Privacy Policy
Last Updated: January 1, 2025
Introduction
At Ayra AI ("Ayra," "we," "us," or "our"), we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our platform and services (collectively, the "Service").
This Privacy Policy applies to information we collect:
- Through the Ayra platform (website, dashboard, APIs)
- Through voice agents created using our Service
- Through integrations with third-party services
- Through communications with us
Please read this Privacy Policy carefully. By using the Service, you consent to the practices described in this Policy. If you do not agree with this Policy, do not use the Service.
1. Information We Collect
1.1 Information You Provide Directly
Account Information:
When you register for an Account, we collect:
- Name (first and last)
- Email address
- Phone number
- Company name and details
- Job title
- Password (stored encrypted)
- Billing and payment information
Profile Information:
You may provide additional information such as:
- Profile photo
- Business address
- Industry and company size
- Use case and preferences
- Communication preferences
Content You Upload:
When using the Service, you provide:
- Voice agent configurations (system prompts, knowledge bases)
- Integration credentials and settings
- Custom branding and logos (for white-label users)
- Conversation data and recordings (created by your voice agents)
- Training data for voice agents
- Support communications
Payment Information:
We collect payment details through secure third-party payment processors (Stripe). We do not store complete credit card numbers on our servers; we retain only the last four digits and card type for reference.
1.2 Information Collected Automatically
Usage Information:
When you use the Service, we automatically collect:
- Pages and features you access
- Actions you take (creating agents, viewing conversations)
- Time and duration of your sessions
- Frequency of use
- Feature engagement metrics
Device and Technical Information:
- IP address
- Browser type and version
- Operating system
- Device type (desktop, mobile, tablet)
- Screen resolution
- Language preferences
- Referring URLs
- Mobile device identifiers (for mobile app users)
Cookies and Similar Technologies:
We use cookies, web beacons, and similar tracking technologies to:
- Maintain your logged-in state
- Remember your preferences
- Analyze Service usage
- Provide personalized experiences
- Measure marketing campaign effectiveness
You can control cookie preferences through your browser settings, but disabling cookies may limit Service functionality.
1.3 Information from Voice Agent Interactions
Call Data:
When your voice agents interact with callers (End Users):
- Phone numbers (caller ID)
- Call duration and timing
- Call recordings (if recording enabled)
- Call transcripts
- Detected language and accent
- Call quality metrics
Conversation Analytics:
- Sentiment analysis results
- Detected topics and keywords
- Intent classification
- Customer satisfaction indicators
- Conversation outcomes
End User Information:
Information collected during calls as configured by you:
- Names
- Contact information
- Appointment details
- Product preferences
- Support inquiries
- Any other information your voice agent is configured to collect
Important Note: You (the Customer) control what information your voice agents collect from End Users. You are responsible for obtaining proper consent from End Users and complying with applicable privacy laws.
1.4 Information from Third-Party Integrations
When you connect third-party services:
Calendar Integrations
Calendar events, availability, meeting details, attendee information
CRM Integrations
Contact records, company information, deal and pipeline data
Communication Integrations
User identities, message content, channel information
Voice Platform Integrations
Voice interaction data, platform usage metrics, technical performance data
We access third-party data only as necessary to provide the Service and only with your authorization through OAuth or API credentials you provide.
2. How We Use Your Information
2.1 To Provide and Maintain the Service
- Creating and managing your Account
- Processing voice agent interactions
- Storing and retrieving conversation data
- Executing integrations and workflows
- Generating analytics and reports
- Providing customer support
- Processing payments and billing
2.2 To Improve the Service
- Analyzing usage patterns to identify improvements
- Testing new features and functionality
- Optimizing performance and reliability
- Training and improving AI models (using aggregated, anonymized data)
- Identifying and fixing bugs
- Conducting research and development
2.3 To Communicate with You
- Sending transactional emails (confirmations, receipts, notifications)
- Providing Service updates and announcements
- Responding to support inquiries
- Sending marketing communications (with your consent)
- Conducting surveys and gathering feedback
- Notifying you of Terms or Policy changes
2.4 For Security and Fraud Prevention
- Detecting and preventing unauthorized access
- Monitoring for suspicious activity
- Investigating potential violations of our Terms
- Complying with legal obligations
- Protecting against fraud and abuse
- Maintaining system security
2.5 For Legal and Compliance Purposes
- Complying with applicable laws and regulations
- Responding to legal requests (subpoenas, court orders)
- Enforcing our Terms of Service
- Protecting our legal rights
- Resolving disputes
2.6 With Your Consent
We may use your information for other purposes with your explicit consent.
4. Data Retention
4.1 Account Data
We retain your Account information for as long as your Account is active. After Account termination:
- Core Account data is deleted within 30 days
- Billing records are retained for 7 years (tax and legal requirements)
- Anonymized usage data may be retained indefinitely
4.2 Conversation Data
Conversation recordings, transcripts, and analytics are retained according to your configured retention settings:
- Default Retention: 90 days
- Configurable Range: 1 day to indefinite retention
- After Deletion: Data is permanently removed from production systems within 30 days and from backups within 90 days
- You can modify retention settings or delete specific conversations at any time through the Service interface.
4.3 Backup Data
Deleted data may persist in backups for up to 90 days before being permanently purged from all systems.
4.4 Legal Holds
If data is subject to legal holds, litigation, or investigation, we will retain such data until the hold is lifted, regardless of retention settings.
5. Data Security
5.1 Security Measures
We implement industry-standard security measures to protect your information:
Encryption
- Data encrypted in transit using TLS 1.2+ (HTTPS)
- Data encrypted at rest using AES-256 encryption
- Database encryption
- Encrypted backups
Access Controls
- Role-based access control (RBAC)
- Multi-factor authentication (MFA) for employee access
- Principle of least privilege
- Regular access reviews
Infrastructure Security
- Secure cloud infrastructure (AWS, Google Cloud)
- Network segmentation and firewalls
- Intrusion detection and prevention
- DDoS protection
- Regular security patching
Application Security
- Regular security audits and penetration testing
- Secure coding practices
- Input validation and sanitization
- SQL injection protection
- Cross-site scripting (XSS) prevention
5.2 Security Certifications
Ayra maintains the following security certifications:
- SOC 2 Type II compliance
- GDPR compliance framework
- HIPAA compliance (for customers with Business Associate Agreements)
5.3 Your Security Responsibilities
You are responsible for:
- Maintaining confidentiality of your Account credentials
- Using strong, unique passwords
- Enabling two-factor authentication
- Monitoring your Account for unauthorized access
- Promptly reporting security concerns
5.4 Security Incidents
In the event of a data breach:
- We will investigate immediately
- Affected users will be notified without unreasonable delay
- We will take steps to mitigate harm
- We will cooperate with regulatory authorities
- We will document and learn from incidents
To report a security vulnerability: security@ayra.ai
6. Your Privacy Rights
6.1 Access and Portability
You have the right to:
- Access your personal information
- Download your data in a portable format (JSON, CSV)
- Review conversation recordings and transcripts
- Obtain copies of your Account data
Access your data through the Service dashboard or contact privacy@ayra.ai.
6.2 Correction
You may update or correct your information at any time through your Account settings. If you cannot update information yourself, contact us at privacy@ayra.ai.
6.3 Deletion
You have the right to request deletion of your personal information. You may:
- Delete your Account through the dashboard (deletes all data)
- Request deletion of specific data by contacting privacy@ayra.ai
- Delete individual conversations through the Service interface
Exceptions: We may retain information necessary for legal obligations, dispute resolution, or fraud prevention.
6.4 Objection and Restriction
You may object to or request restriction of certain processing activities:
- Opt out of marketing emails (unsubscribe link in emails)
- Disable analytics cookies (browser settings)
- Request restriction of processing for specific purposes
6.5 Withdraw Consent
Where processing is based on consent, you may withdraw consent at any time. This does not affect the lawfulness of processing before withdrawal.
6.6 Automated Decision-Making
The Service uses automated decision-making for:
- Sentiment analysis
- Intent classification
- Conversation routing
You may contest automated decisions by contacting privacy@ayra.ai.
6.7 Complaints
If you believe we have violated your privacy rights, you may file a complaint with:
- Ayra at privacy@ayra.ai
- Your local data protection authority
- In the EU: Your Member State's supervisory authority
7. Regional Privacy Rights
7.1 European Users (GDPR)
If you are in the European Economic Area (EEA), UK, or Switzerland:
Legal Basis for Processing:
- Contractual Necessity: To provide the Service you've requested
- Legitimate Interests: To improve the Service, prevent fraud, and ensure security
- Consent: For marketing communications and optional features
- Legal Obligations: To comply with applicable laws
Data Transfers:
The Service is hosted in the United States. International transfers are protected by:
- Standard Contractual Clauses (SCCs)
- Adequacy decisions where applicable
- Other approved transfer mechanisms
Your Rights:
All rights described in Section 6, including specific GDPR rights to erasure, portability, and objection.
Data Protection Officer:
Contact our DPO at dpo@ayra.ai for privacy questions.
7.2 California Users (CCPA/CPRA)
If you are a California resident:
Categories of Information Collected:
As described in Section 1 (all categories listed above).
Business Purposes:
As described in Section 2.
Sharing:
As described in Section 3. We do not sell personal information.
Your Rights:
- Right to Know: Request disclosure of information collected
- Right to Delete: Request deletion of personal information
- Right to Opt-Out: Opt out of sale (though we do not sell data)
- Right to Non-Discrimination: Equal service regardless of privacy rights exercise
Contact for Requests:
Email privacy@ayra.ai or call [phone number]. We will respond within 45 days.
7.3 Other U.S. States
Residents of Virginia, Colorado, Connecticut, Utah, and other states with privacy laws have similar rights to California residents. Contact privacy@ayra.ai to exercise these rights.
7.4 Canadian Users (PIPEDA)
Canadian users have rights under PIPEDA similar to GDPR rights. Contact privacy@ayra.ai for assistance.
8. International Data Transfers
Ayra is based in the United States. Information collected may be transferred to, stored, and processed in the United States or other countries where we or our service providers operate.
We ensure international transfers comply with applicable laws through:
- Standard Contractual Clauses (EU)
- Adequacy decisions
- Binding Corporate Rules
- Other approved mechanisms
By using the Service, you consent to transfer of your information to the United States and other countries.
9. Children's Privacy
The Service is not intended for children under 18. We do not knowingly collect information from children under 18.
If you believe we have collected information from a child under 18, contact us immediately at privacy@ayra.ai. We will delete such information promptly.
Parents and guardians: If your child has created an Account, contact us to request deletion.
10. Third-Party Links and Services
The Service may contain links to third-party websites, services, or integrations. This Privacy Policy does not apply to third-party services.
We are not responsible for third-party privacy practices. Review the privacy policies of third-party services before providing information to them.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date.
Material Changes:
For material changes, we will:
- Email you at your registered email address
- Display a prominent notice in the Service
- Provide 30 days' notice before changes take effect
Your Continued Use:
Continued use of the Service after changes become effective constitutes acceptance of the revised Privacy Policy.
12. Contact Us
For questions, concerns, or requests regarding this Privacy Policy or our privacy practices:
Email: privacy@ayra.ai
Data Protection Officer: dpo@ayra.ai
Mailing Address:
Ayra AI, Inc.
Attn: Privacy
[Company Address]
Response Time: We will respond to privacy inquiries within 30 days (or as required by applicable law).
Effective Date: January 1, 2025
Last Updated: January 1, 2025
Ready to transform your agency?
Start building with Ayra today. No credit card required.