Privacy Policy

This policy applies to two groups of people:

• Business accounts — owners and staff who sign up on kordial.ai and configure a receptionist
• Callers — people who call a phone number answered by Kordial on behalf of a business

When you create an account and set up your receptionist, we collect:

• Your name and email address
• Your business name, website URL, and phone number
• Payment information (processed by Stripe; we store only the last four digits and billing address)
• Content scraped from your website and Google Business Profile (hours, services, reviews) to train your receptionist
• Configuration choices you make in the dashboard (voice, language, greeting, transfer number)

When someone calls a Kordial-powered number, we collect:

• Phone number (via Caller ID)
• Name, if provided during the call
• A full transcript of the conversation
• An audio recording of the call
• The reason for the call, as logged by the AI after the conversation ends

Callers are informed at the start of every call that the call may be recorded and handled by an AI. Continued engagement constitutes consent where required by applicable law. If a caller requests not to be recorded, you (the business) are responsible for handling that request via your own transfer or callback flow.

We use collected data to:

• Operate and improve the receptionist service for your business
• Send you weekly digest emails, missed-call notifications, and transactional messages
• Process billing and manage your subscription
• Detect abuse, protect security, and enforce our Terms of Service
• Improve our AI models using anonymized, aggregated patterns (never linked to individual callers or businesses)

We do not sell your data or caller data to third parties. We do not use caller data for advertising.

We share data with the following processors under data processing agreements. Each receives only what is necessary for its function:

• Call transcripts and recordings are retained for 12 months from the date of the call, then deleted
• Lead contact information is retained until you delete it from your dashboard or close your account
• Account data is retained for 30 days after account closure, then deleted
• Anonymized, aggregated usage statistics may be retained indefinitely

Depending on your jurisdiction, you may have the right to access, correct, export, or delete your personal data. To make a request, email support@kordial.ai. We respond within 30 days.

Callers who wish to request deletion of their call transcript or lead record should contact the business that owns the Kordial number directly. Businesses can delete individual records from their dashboard or by contacting us.

We use minimal, essential cookies for session management on kordial.ai. We do not run third-party advertising pixels. We use privacy-respecting analytics to understand aggregate traffic patterns.

Data is encrypted in transit (TLS) and at rest. Access to production systems is limited to authorized personnel. We do not store full payment card numbers. In the event of a data breach that affects your account, we will notify you within 72 hours of discovery.

Kordial is not directed at children under 13. We do not knowingly collect data from children. If you believe a child has provided us with personal information, contact support@kordial.ai and we will delete it.

We may update this policy. For material changes, we will email business account holders at least 14 days before the change takes effect. The “last updated” date at the top of this page reflects the current version.

Kordial
support@kordial.ai