How we keep your clients’ data safe
Our AI voice agents speak with your customers every day. These are the measures in place to protect the personal information they share, from the first ring to the last record.
Canadian company, Canadian privacy law
18310351 Canada Inc. is a federal corporation (1831035-1) registered in Kitchener, Ontario. Personal information is handled under PIPEDA and, for Quebec residents, Quebec Law 25.
Only what the call needs, never sold
Agents collect only what your service requires, such as a name, phone number and booking details. We never sell personal information or share it for others’ commercial use.
You choose how long data is kept
Each service agreement sets one of two frameworks: 30-day retention for quality improvement, or zero retention, where audio and transcripts are deleted when the call ends.
Encrypted in transit
Calls, transcripts and data exchanged with your systems travel over encrypted connections (TLS). Our website and APIs run on Cloudflare’s network with built-in DDoS protection.
Strict access control
Only authorised technical staff bound by confidentiality obligations can access call data, and administration tools are password-protected. You decide who on your team has access.
Callers always know it’s AI
Every call opens by saying the caller is speaking with an AI assistant and that the call may be recorded. Agents never ask for health, banking or government ID details.
Transparent about where data goes
Some of the service providers we rely on may store or process data outside Canada. Where they do, it is protected by contractual safeguards, and we tell you which framework applies.
Security by design
Security is part of every agent’s specification before it is built, and our processes are reviewed through our partnership with CyberShield, the Association for Cybersecurity Education.
Rights and incidents handled by the book
Requests to access, correct or delete personal information are answered within 30 days. Every breach is logged, and those with a real risk of significant harm are reported as PIPEDA requires.
Our Privacy Officer, Tudor Trocaru, is accountable for how personal information is handled. Contact them directly, or file a complaint with the Office of the Privacy Commissioner of Canada (priv.gc.ca) or, in Quebec, the Commission d’accès à l’information (cai.gouv.qc.ca).