1. What We Collect
When you interact with one of our AI agents (via WhatsApp, voice, web, or email), we may collect:
- Your name and contact details (phone number, email)
- Booking, deal, job, or appointment details you provide
- Message and call content (stored for audit and quality purposes)
- Limited technical metadata (timestamps, message identifiers, device hints)
2. Why We Collect It
Your personal information is used solely to:
- Provide the service you (or our tenant business) requested
- Send confirmations, reminders, and follow-ups
- Synchronise with calendars, CRMs, and scheduling tools you've authorised
- Comply with legal and regulatory requirements
3. How We Protect It
- Phone numbers and other sensitive identifiers are encrypted at rest using AES-256-GCM
- All data is transmitted via HTTPS / TLS 1.2+
- Access is restricted to authorised personnel and audited
- Session data is automatically deleted after a short period of inactivity
- A strict ca-only residency mode — keeping data and LLM inference within Canadian regions — is on our near-term roadmap and available on request as we onboard founding tenants
4. Third-Party Services
Depending on the agent and tenant configuration, your data may be processed by:
- WhatsApp (Meta): messaging — phone numbers and message content
- Google Calendar / Sheets: scheduling and record-keeping
- Telnyx / Retell.ai: voice processing for AgentVeronica
- Stripe: payment processing
- OpenAI: language model inference (a Canadian-region LLM provider will be substituted for tenants on ca-only residency mode once that mode is generally available)
Some of these services may process data outside of Canada in the default residency mode. By using the Service, you consent to this cross-border data transfer.
5. Data Retention
Records are retained as long as necessary to provide our services and comply with legal obligations. Session data is automatically deleted after a short period of inactivity. Message and call logs are retained for audit and dispute resolution purposes.
6. Your Rights
Under PIPEDA (Personal Information Protection and Electronic Documents Act), you have the right to:
- Access the personal information we hold about you
- Request correction of inaccurate information
- Withdraw consent and request deletion of your data
- File a complaint with the Office of the Privacy Commissioner of Canada
To exercise these rights, contact us using the address below, or visit our Data Deletion page.
7. Opting Out
You can opt out of further messages at any time by sending STOP via WhatsApp, replying STOP to SMS, or contacting the business directly.
8. Contact
For privacy-related inquiries, contact us at privacy@smbaiagents.ca.