Privacy Policy

1. Scope of This Policy

This Privacy Policy explains how Alalai LLC ("Alalai," "we," "us"), located at 30 Montgomery St, Suite 1200, Jersey City, NJ 07302-3829, collects, uses, and shares information in connection with our AI receptionist platform and related services (the "Service"), and our website at alalai-ai.com.

This Policy applies both to businesses that sign up for the Service ("Customers") and to the people who call a Customer's AI Assistant ("Callers"). See Section 4 for how our responsibilities differ between these two groups.

2. Information We Collect

From Customers (businesses that sign up):

• Account information: business name, industry, business address and phone number, login email address, and password (stored in encrypted/hashed form — we never see or store your plain-text password).
• Billing information: processed and stored directly by our payment processor, Stripe. Alalai does not store your full card number.
• Content you provide: knowledge-base content (website URLs, pasted text), your Assistant's configured instructions/greeting, and lists of authorized contacts/transfer numbers.

From Callers (people who call a Customer's AI Assistant):

• Caller-provided information: name, callback phone number, and anything said during the call, including appointment details or the content of a message left for someone at the business.
• Call audio and an AI-generated transcript of the call, and metadata such as call time, duration, and outcome.

3. How We Use Information

• To operate the Service: answering calls, booking appointments, taking and routing messages, transferring calls, and answering questions from a Customer's knowledge base.
• To send transactional emails (for example, a notification that a message was left for a Customer's contact, or an appointment confirmation).
• To provide customer support, maintain security, and troubleshoot issues.
• To process payments and manage subscriptions, once billing is active.
• To improve and maintain the reliability of the Service.

We do not use Caller or Customer content to train third-party foundation models beyond what is required to generate a real-time response during a call, and we do not sell personal information.

4. Our Role: Customers vs. Callers

For a Customer's own account data, Alalai acts as the party responsible for deciding how that data is used (a "controller"). For data about a Customer's Callers (the people who call in), Alalai acts primarily as a service provider processing that data on the Customer's behalf. The Customer business is responsible for its own relationship with its callers, including providing any privacy notices or obtaining any consents required by law (for example, call-recording consent — see our Terms of Service, Section 5). If you are a Caller and have a privacy question about a specific call, we recommend contacting the business you called first; you're also welcome to contact us directly using the information in Section 13.

5. Cookies & Tracking

Our website and dashboard do not currently use analytics, advertising, or tracking cookies. We use only the minimal, functional browser storage required for you to stay logged in to your dashboard. If this changes in the future (for example, if we add product analytics), we will update this Policy accordingly.

6. How We Share Information

We share information with the following categories of service providers ("sub-processors") solely to operate the Service. We do not sell personal information to anyone.

We may also disclose information if required by law, to protect the rights and safety of Alalai or others, or in connection with a merger, acquisition, or sale of assets (in which case we will provide notice as required by law).

7. Data Retention

We retain Customer and Caller data for as long as an account remains active, in order to provide the Service. If a Customer cancels or is offboarded, their data is retained as an inactive archive — rather than immediately deleted — so the account can be restored if the Customer returns. You may request permanent deletion of your data at any time by contacting us (see Section 13); we will honor such requests except where we are required to retain certain records by law (for example, financial/tax records).

8. Data Security

We use reasonable technical and organizational measures designed to protect information against unauthorized access, alteration, or disclosure, including encrypted storage of passwords and encrypted connections (HTTPS/TLS) between your browser and our services. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Your Rights & Choices

Depending on where you live, you may have rights to access, correct, or delete your personal information, or to object to certain processing. To exercise any of these rights, contact us at [email protected]. We will respond within a reasonable time and in accordance with applicable law.

10. Children's Privacy

The Service is intended for business use and is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us so we can delete it.

11. International Users

Alalai is based in the United States, and the Service is designed for U.S. businesses. If you access the Service from outside the United States, your information will be processed and stored in the United States, which may have different data-protection laws than your home jurisdiction.

12. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide reasonable notice (for example, by email or a notice within the Service) and update the "Last Updated" date above.

13. Contact Us

Questions about this Privacy Policy, or requests regarding your personal information, can be sent to [email protected], or by mail to Alalai LLC, 30 Montgomery St, Suite 1200, Jersey City, NJ 07302-3829.