Privacy Policy

Last updated: 2026-04-10

1. Information We Collect

We collect information you provide directly (name, email, phone, business details), data generated through the Service (call recordings, transcripts, leads, bookings), and technical data (IP addresses, browser type, usage patterns). For voice calls, we process audio data through AI providers (OpenAI, Google, ElevenLabs) as specified in your tenant configuration.

2. How We Use Your Information

We use your data to provide and improve the Service, process AI voice interactions, manage your account and billing, send transactional communications (booking confirmations, appointment reminders), and comply with legal obligations. We do not use your data to train AI models.

3. Information Sharing

We share data only with: AI providers (OpenAI, Google, ElevenLabs) for voice processing, Stripe for payment processing, SMTP providers for email delivery, analytics providers (Google Analytics and Microsoft Clarity, only if you opt in on the marketing website), and as required by law. We do not sell your personal data. All sub-processors are GDPR-compliant.

4. Data Retention

Account data is retained while your account is active. Call recordings and transcripts are retained for 90 days by default (configurable per tenant). After account deletion, data is permanently removed within 30 days unless legal retention obligations apply.

5. Your Rights (GDPR)

Under GDPR, you have the right to: access your personal data, rectify inaccurate data, erase your data ("right to be forgotten"), restrict processing, data portability, and object to processing. To exercise these rights, contact [email protected]. We will respond within 30 days.

6. Security Measures

We implement industry-standard security measures including: encrypted data transmission (TLS), hashed passwords (bcrypt), tenant data isolation, audit logging, API key authentication with SHA-256 hashing, and regular security reviews.

7. Cookies

We use essential cookies for authentication (JWT refresh tokens) and locale preferences. Optional analytics tools are used only with your consent. See our Cookie Policy for full details.

8. Children's Privacy

The Service is not intended for individuals under 16 years of age. We do not knowingly collect personal data from children.

9. Changes to This Policy

We may update this policy periodically. Material changes will be communicated via email or in-app notification at least 30 days before taking effect.

10. Contact

For privacy inquiries or to exercise your GDPR rights, contact: Data Controller: Santiago Moreno Arce Operating as: Kelvia NIF: ES48656100Z Email: [email protected]