Privacy Policy

Availor ("we", "us", "our") operates an AI-powered voice receptionist platform. This privacy policy explains how we collect, use, disclose, and protect your personal information in compliance with Quebec's Law 25 (Act respecting the protection of personal information in the private sector), the Charter of the French Language, and Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).

Our Privacy Officer can be reached at: privacy@availor.ai

We collect the following categories of personal information:

Account Information: Name, email address, phone number, business name, and billing details when you sign up.

Call Data: Phone numbers of callers, call duration, call recordings, and AI-generated transcriptions and summaries when calls are made to your business line.

Calendar Data: When you connect Google Calendar, we access your calendar availability (free/busy times) to help schedule appointments. We do not read event details beyond availability.

Usage Data: Dashboard interactions, feature usage, and technical logs to improve our service.

Voice Data: Audio recordings of calls processed through our AI system. We do not create or store voiceprints or biometric identifiers.

We use your information for the following purposes:

- AI Receptionist Service: Processing incoming calls, generating call summaries, routing calls, and scheduling appointments on your behalf.

- Automated Decision-Making: Our AI system makes automated decisions about call routing, language detection, and response generation. These decisions are based on caller input, your business configuration, and AI language models. You may request human review of any automated decision by contacting us.

- Call Summaries & Notifications: Sending you SMS and webhook summaries of calls handled by the AI.

- Service Improvement: Analyzing usage patterns to improve AI accuracy and platform reliability.

- Billing & Account Management: Processing payments and managing your subscription.

- Legal Compliance: Meeting our obligations under applicable privacy and telecommunications laws.

In accordance with Section 12.1 of Quebec's Law 25, we inform you that our service uses automated processing to:

- Detect the language spoken by callers (English or French) using speech-to-text technology.

- Route calls to appropriate departments based on AI analysis of caller intent.

- Generate real-time conversational responses using large language models.

- Create post-call summaries and categorize call topics.

The personal information used includes: caller phone number, spoken words (transcribed), and your business configuration. You or your callers have the right to request that any automated decision be reviewed by a human representative.

We use the following third-party processors to deliver our service. Your data may be transferred to and processed in the United States:

| Provider | Purpose | Data Processed |

|----------|---------|----------------|

| Twilio | Telephony (calls & SMS) | Phone numbers, call audio |

| Deepgram | Speech-to-text transcription | Call audio |

| ElevenLabs | Text-to-speech voice synthesis | AI response text |

| Anthropic (Claude) | AI language model | Conversation context |

| Supabase | Database hosting | Account & business data |

| Microsoft Azure | Cloud infrastructure | All service data |

| Google | Calendar integration | Calendar availability |

| Stripe | Payment processing | Billing information |

We maintain data processing agreements with each provider. A privacy impact assessment has been conducted for cross-border transfers as required by Quebec Law 25.

We retain your data as follows:

- Account data: Retained while your account is active, deleted within 30 days of account closure.

- Call recordings & transcriptions: Retained for 90 days, then automatically deleted.

- Call summaries: Retained for 1 year for your business records.

- Calendar data: OAuth tokens are encrypted at rest. Revoked immediately upon disconnection.

- Billing data: Retained as required by tax and accounting regulations (up to 7 years).

You may request earlier deletion of your data at any time.

Under Quebec Law 25 and PIPEDA, you have the right to:

- Access your personal information held by us.

- Rectify inaccurate or incomplete information.

- Delete your personal information (right to be forgotten).

- Data portability — receive your data in a structured, commonly used format.

- Withdraw consent for data processing at any time.

- Object to profiling and automated decision-making.

To exercise any of these rights, contact us at privacy@availor.ai. We will respond within 30 days.

If you are unsatisfied with our response, you may file a complaint with the Commission d'acces a l'information du Quebec (CAI) at www.cai.gouv.qc.ca.

When a caller reaches your AI receptionist, the system informs them that:

1. They are speaking with an AI assistant.

2. The call may be recorded for quality and service purposes.

3. A summary will be provided to the business owner.

Callers may request to speak with a human or opt out of recording. Business owners are responsible for ensuring their use of call recordings complies with applicable laws in their jurisdiction.

We implement appropriate technical and organizational measures to protect your personal information, including:

- Encryption of data in transit (TLS) and at rest.

- Encryption of OAuth tokens and sensitive credentials using AES-256.

- Role-based access controls and managed identity authentication.

- Regular security monitoring and incident response procedures.

In the event of a data breach that poses a risk of serious harm, we will notify affected individuals and the Commission d'acces a l'information du Quebec promptly, as required by Law 25.

We may update this privacy policy from time to time. When we make material changes, we will notify you by email or through a notice on our website. The "Last updated" date at the top reflects the most recent revision.

For privacy inquiries, data access requests, or complaints:

Privacy Officer

Availor (Kyros Groupe Inc.)

Email: privacy@availor.ai

Montreal, Quebec, Canada