Privacy Policy

1. Introduction

OO7 AI, Inc. ("OO7 AI," "we," "our," or "us") operates an AI-powered voice calling platform that enables businesses to automate outbound and inbound phone calls using intelligent voice agents. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, platform, APIs, and related services (collectively, the "Services").

This policy applies to all users of the Services, including account holders, their team members, and individuals who interact with calls placed or received through our platform. By accessing or using our Services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.

If you do not agree with our policies and practices, please do not use our Services. If you have any questions, please contact us at legal@oo7ai.com.

2. Information We Collect

2.1 Personal Information

When you create an account or use our Services, we may collect the following personal information:

• Full name and job title
• Email address
• Phone number
• Company name and business address
• Billing address
• Account credentials (passwords are hashed and never stored in plain text)

2.2 Usage Data

We automatically collect certain information when you access and use our Services:

• Log data (IP address, browser type, pages visited, time and date of access)
• Device information (operating system, device type, unique device identifiers)
• Cookies and similar tracking technologies
• Referral URLs and navigation paths
• Feature usage patterns and interaction data

2.3 Call Data

When calls are placed or received through our platform, we collect:

• Call recordings (audio files)
• Call transcripts (generated by our AI transcription system)
• Call metadata (duration, timestamps, caller/callee phone numbers, call disposition)
• AI agent interaction logs and conversation flow data
• Call quality metrics

2.4 Payment Information

Payment processing is handled by Stripe, Inc. We do not directly store your full credit card number or banking details on our servers. Stripe collects and processes your payment information in accordance with their own privacy policy. We receive and store only limited payment information such as the last four digits of your card, card brand, expiration date, and billing address for record-keeping purposes.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Provide and maintain our Services: To operate the platform, process calls, manage your account, and deliver the features you request.
• Process and manage calls: To initiate, route, record, and transcribe calls made through our AI voice agents.
• Improve our Services: To analyze usage patterns, train and improve our AI models, optimize call quality, and develop new features.
• Communicate with you: To send service updates, security alerts, billing notifications, and marketing communications (with your consent).
• Process payments: To bill you for Services, manage subscriptions, and handle refunds.
• Ensure compliance: To comply with applicable laws, regulations, and legal processes, including TCPA and DNC requirements.
• Analytics and reporting: To generate usage reports, call analytics, and compliance reports for your account.
• Security: To detect, prevent, and address technical issues, fraud, and unauthorized access.

4. Call Recording & AI Disclosure

Our AI voice agents are designed to disclose their AI nature at the beginning of every call. This disclosure is a mandatory part of our platform and cannot be disabled. The disclosure informs the call recipient that they are speaking with an AI-powered assistant and that the call may be recorded.

Call recordings are retained for a default period of 90 days from the date of the call. Account administrators may configure shorter retention periods. After the retention period, recordings are permanently deleted from our systems.

Call transcripts are retained for the duration of your active account unless you request earlier deletion. Transcripts may be used in anonymized and aggregated form to improve our AI models and call quality.

5. Data Sharing

We may share your information with the following categories of third parties, solely to the extent necessary to provide and improve our Services:

• Twilio, Inc.: Our telephony infrastructure provider. Twilio processes call routing, phone number management, and voice transmission data.
• ElevenLabs: Our voice synthesis provider. ElevenLabs processes text-to-speech data to generate AI voice output during calls.
• Stripe, Inc.: Our payment processor. Stripe handles billing, subscription management, and payment card data.
• Amazon Web Services (AWS): Our cloud infrastructure provider. AWS hosts our servers, databases, and file storage.
• Vercel: Our web application hosting provider.

We may also disclose your information:

• When required by law, subpoena, court order, or governmental regulation
• To protect the rights, property, or safety of OO7 AI, our users, or others
• In connection with a merger, acquisition, or sale of assets (with prior notice)
• With your explicit consent

6. Data Security

We implement robust technical and organizational measures to protect your data:

• Encryption at rest: All stored data, including call recordings and personal information, is encrypted using AES-256 encryption.
• Encryption in transit: All data transmitted between your device and our servers is protected using TLS 1.2 or higher.
• SOC 2 compliance: We are currently pursuing SOC 2 Type II certification and maintain security controls aligned with SOC 2 standards.
• Access controls: We enforce role-based access controls and the principle of least privilege for all internal systems.
• Regular audits: We conduct regular security assessments, penetration testing, and vulnerability scanning.
• Incident response: We maintain an incident response plan and will notify affected users of any data breach in accordance with applicable law.

While we strive to use commercially acceptable means to protect your personal information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Right to Access: You may request a copy of the personal information we hold about you.
• Right to Correction: You may request that we correct any inaccurate or incomplete personal information.
• Right to Deletion: You may request that we delete your personal information, subject to certain exceptions (e.g., legal retention obligations).
• Right to Data Portability: You may request a copy of your data in a structured, commonly used, and machine-readable format.
• Right to Opt-Out: You may opt out of marketing communications at any time by clicking the unsubscribe link in our emails or contacting us directly.
• Right to Restrict Processing: You may request that we limit how we process your data in certain circumstances.

To exercise any of these rights, please contact us at legal@oo7ai.com. We will respond to your request within 30 days. We may need to verify your identity before processing your request.

8. Cookies

We use cookies and similar tracking technologies to enhance your experience on our platform. The types of cookies we use include:

• Essential Cookies: Required for the basic functionality of our Services, such as authentication, session management, and security. These cannot be disabled.
• Analytics Cookies: Help us understand how users interact with our platform, which pages are visited most often, and where users encounter issues. We use tools like Google Analytics and Mixpanel.
• Functional Cookies: Remember your preferences and settings (such as language, timezone, and dashboard layout) to provide a personalized experience.

You can manage your cookie preferences through your browser settings. Most browsers allow you to block or delete cookies. However, disabling essential cookies may impair the functionality of our Services.

9. Data Retention

We retain your information for as long as necessary to provide our Services and fulfill the purposes described in this policy:

• Account data: Retained for the duration of your active account and for up to 30 days after account deletion.
• Call recordings: Retained for 90 days by default. Account administrators can configure shorter retention periods.
• Call transcripts: Retained for the duration of your active account unless earlier deletion is requested.
• Usage and analytics data: Retained in aggregated, anonymized form indefinitely for service improvement.
• Billing records: Retained for up to 7 years as required by tax and accounting regulations.
• Deleted account data: Permanently removed from our systems within 30 days of account deletion, except where retention is required by law.

10. Children's Privacy

Our Services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete such information promptly.

If you are a parent or guardian and believe that your child has provided us with personal information, please contact us at legal@oo7ai.com so that we can take appropriate action.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will:

• Notify you via email at the address associated with your account
• Post the updated policy on our website with a revised "Last Updated" date
• Provide a summary of key changes

We encourage you to review this Privacy Policy periodically. Your continued use of our Services after any changes constitutes your acceptance of the updated policy.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: