Privacy Policy

Effective Date: April 1st, 2025

Welcome to CIAO (sayciao.ai). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you visit our website and use our services.

By accessing or using CIAO’s services, you agree to the terms of this Privacy Policy.

1. Information We Collect

We collect the following types of information:

a. Account & Contact Information

• Name

• Email address

• Organization/business name

• Phone numbers associated with your account or AI voice agents

b. Payment Information

• Billing details provided during subscription sign-up

• Note: Payment processing is handled securely by Stripe. We do not store your credit card or payment details directly.

c. Call Data & Transcripts

• Call logs (caller number, called number, date/time, duration)

• Call recordings and/or transcripts (if enabled)

• AI-generated tags or outcomes (e.g., appointment scheduled)

d. Integration Data

If you connect third-party services (e.g., Google Calendar, Calendly, Twilio):

• OAuth tokens or API keys (stored securely and encrypted)

• Metadata required for booking or managing appointments

e. Usage Data

• Log files (IP address, browser type, access times)

• Actions taken within the platform (e.g., creating voice agents, editing knowledge bases)

2. How We Use Your Information

Your information is used to:

• Provide and manage the CIAO service

• Configure and operate AI voice agents

• Manage subscriptions and billing

• Send administrative emails or SMS notifications

• Provide customer support

• Analyze service usage to improve our offerings

• Comply with legal obligations

We do not sell or share your data with advertisers.

3. Sharing & Disclosure

We may share your data only in the following situations:

• Third-Party Integrations: To enable functionality (e.g., Stripe for billing, Twilio for SMS, Google Calendar for scheduling, Vapi.ai for AI voice services).

• Legal Compliance: If required by law, subpoena, or legal process.

• Business Transfers: In the event of a merger, acquisition, or asset sale, data may be transferred as part of the business assets.

All third parties are required to maintain the confidentiality and security of your data.

4. Data Security

We implement industry-standard security measures, including:

• Encrypted data storage (OAuth tokens, call data)

• Secure HTTPS connections

• Role-based access control

• Regular vulnerability assessments

Please note that no method of transmission over the internet or electronic storage is 100% secure.

5. Data Retention

• Account and contact data is retained as long as your account is active.

• Call data and transcripts are retained according to your organization’s plan settings or as required by law.

• You may request deletion of your data by contacting support@sayciao.ai.

6. Your Rights

Depending on your jurisdiction, you may have rights to:

• Access, correct, or delete your personal data

• Object to data processing

• Data portability

• Withdraw consent (where applicable)

To exercise these rights, contact us at support@sayciao.ai.

7. International Data Transfers

CIAO is based in the United States. By using our services, you consent to the transfer and processing of your information in the U.S. and other jurisdictions as necessary to provide the services.

8. Children’s Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect data from children.

9. Changes to This Policy

We may update this Privacy Policy periodically. Changes will be posted on this page with an updated effective date.

10. Contact Us

For questions or concerns about this Privacy Policy, contact:

CIAO Support

Email: support@sayciao.ai