Privacy Policy

1. Who We Are

Donna AI is an AI-powered receptionist and voice automation platform. Our website is: https://donnaio.ai

2. What Information We Collect

a. Personal Information

• Name, email, phone number, company info
• Account credentials and preferences
• Billing details and payment method (processed via secure third parties)

b. Voice & Communication Data

• Call recordings and voice inputs
• Call metadata (caller ID, timestamps, durations)
• Transcripts of conversations

c. Usage Data

• Log files (IP address, browser type, OS, timestamps)
• User interactions, session info
• Cookies and analytics data

3. How We Use Your Information

We use your data to:

• Provide and operate the Service
• Record and transcribe calls
• Analyze performance and improve features
• Send you service notifications and updates
• Comply with legal obligations

We do not sell your personal data.

4. Sharing & Disclosure

We may share your data with:

• Trusted third-party service providers (e.g., AWS, Google Cloud, Twilio)
• Payment processors and analytics tools
• Legal authorities if required by law
• In case of business transfer (merger/acquisition)

We ensure third-party providers adhere to confidentiality and data protection obligations.

5. International Data Transfers

Your data may be processed in the U.S., Canada, or other jurisdictions where our infrastructure or partners are located. We apply safeguards such as encryption, standard contractual clauses, and data minimization.

6. Data Retention

We retain data as long as needed for business or legal reasons. Call recordings and transcripts are stored for up to 12 months unless otherwise agreed.

You may request deletion or export of your data by contacting us.

7. Your Rights

a. Canadian Users (PIPEDA):

You have the right to:

• Access your personal data
• Correct or update your information
• Withdraw consent
• File a complaint with the Office of the Privacy Commissioner of Canada

b. U.S. Users (e.g., CCPA for CA residents):

You have the right to:

• Know what personal data we collect
• Request deletion of your data
• Opt-out of data sharing for advertising (if applicable)
• File complaints with your state's Attorney General

We will not discriminate against you for exercising your rights.

8. Security

We implement industry-standard security practices:

• Data encryption (in transit & at rest)
• Role-based access controls
• Monitoring and incident response

However, no method is 100% secure.

9. Cookies & Tracking

We use cookies and similar technologies for:

• Site functionality
• Analytics and performance
• Session management

You can control cookie settings in your browser.

10. Children's Data

Our Service is not intended for children under 13 (or under 16 in Canada). We do not knowingly collect data from minors.

11. Changes to This Policy

We may revise this Policy from time to time. Material changes will be posted on our website or emailed to users.

12. Contact Us

If you have questions or requests regarding your data, please contact: