Privacy Policy

1. Information We Collect

We collect several different types of information for various purposes to provide and improve our Service to you:

• Account Data: Email address, name, company details, and password hashes.
• Billing Data: Payment information is securely processed and stored by our payment partner, Stripe. We do not store full credit card details.
• Call Data: When providing AI voice services, we process audio streams and generate text transcripts of inbound calls to your assigned phone numbers.
• Knowledge Base: Any documents, FAQs, and business information you upload to train your AI agent.
• Usage Data: Information on how the Service is accessed and used, including IP addresses, browser types, and interaction metrics.

2. How We Use Your Data

SecraAI uses the collected data to:

• Provide, operate, and maintain our AI call answering platform
• Process call audio in real-time to generate responses via our AI subprocessors
• Provide you with call transcripts, summaries, and analytics
• Manage your billing, subscription plans, and usage limits
• Notify you about changes to our Service or important account updates

3. Third-Party Subprocessors

To provide our Service, we share necessary data with trusted third-party service providers:

• OpenAI: Used for real-time speech, language, and intelligence processing. Processing is governed by the provider terms and service configuration applicable to SecraAI.
• Twilio: Provides the telephony infrastructure, phone numbers, and media streams.
• Stripe: Handles payment processing and subscription billing securely.
• Microsoft Azure / MongoDB Atlas: Cloud hosting, database, and blob storage for transcripts, audio recordings, and knowledge bases.
• PulseMetric: Provides optional website performance and behaviour analytics when you grant the relevant cookie consent.
• Meta: Provides optional campaign measurement through Meta Pixel only when you allow behaviour and marketing tracking.

4. Data Retention

Workspace owners and administrators can configure automated retention periods for call transcripts and recordings. Other account, billing, audit, contact, call, and knowledge data may be retained while an account is active and where needed for operational or legal purposes. Contact us to request access, correction, restriction, or deletion; requests are assessed against applicable legal and technical requirements.

5. Security of Data

We use HTTPS/WSS for production data in transit, signed access tokens, role-based access controls, and application-level tenant scoping across primary customer APIs. No method of transmission, application control, or electronic storage is completely secure.

6. Your Rights

Depending on your location (including under UK GDPR or EU GDPR), you may have rights to access, rectify, restrict, object to processing, or request deletion of personal data. Some privacy and retention settings are available in the dashboard. For other requests, please contact us.

7. Contact Us

If you have any questions about this Privacy Policy, please contact us at privacy@secraai.co.uk.