Privacy Policy

1. Introduction

EchoAI Enterprise Inc (“we”, “our”, or “us”) respects your privacy. This Privacy Policy describes how we collect, use, disclose, and protect information when you use our website, dashboard, API, SDK, voice agent services, and related products (collectively, the “Service”). By using the Service, you agree to the practices described in this policy.

2. Information We Collect

We collect information in the following ways:

• Account and profile information: When you register, we collect your email address, name (if provided), and authentication credentials (e.g., via OAuth). We may also store profile and preference settings you choose in the dashboard.
• Usage and product data: We collect information about how you use the Service, including API and SDK usage, call logs (e.g., duration, phone numbers in hashed or truncated form where applicable), agent configuration, and feature usage to operate, improve, and bill the Service.
• Voice and call data: When you or your end users interact with voice agents, we process audio, transcripts, and related metadata to provide the Service (e.g., speech-to-text, language model, text-to-speech). We may retain call logs and transcripts as described in our data retention practices and your settings.
• Device and technical data: We collect IP address, browser type, device information, and similar technical data when you use our website or APIs.
• Cookies and similar technologies: We use cookies and similar technologies for session management, security, and analytics as described in this policy.

3. How We Use Your Information

We use the information we collect to: provide, operate, and improve the Service; authenticate you and manage your account; process and complete transactions and billing; send service-related communications and, with your consent, marketing; detect and prevent fraud and abuse; comply with legal obligations; and for other purposes described at the time of collection or with your consent. We may use aggregated or de-identified data for product improvement and analytics.

4. Sharing and Disclosure

We do not sell your personal information. We may share information with: (a) service providers who assist us in operating the Service (e.g., hosting, analytics, telephony, transcription, and AI providers), under contractual obligations to protect your data; (b) affiliates for the purposes described in this policy; (c) law enforcement or other parties when required by law or to protect our rights and safety; and (d) acquirers or successors in the event of a merger, sale, or transfer of assets. We may also share aggregated or de-identified information that cannot reasonably identify you.

5. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service and fulfill the purposes described in this policy. Call logs, transcripts, and similar operational data may be retained for a period necessary for billing, support, and legal compliance; you may have options in the dashboard to control retention where technically available. After account termination, we may retain certain information as required by law or for legitimate business purposes (e.g., dispute resolution).

6. Security

We implement technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction. These include encryption in transit and at rest where applicable, access controls, and regular review of our practices. No method of transmission or storage is completely secure; you provide information at your own risk and are responsible for safeguarding your account credentials.

7. Your Rights and Choices

Depending on your location, you may have the right to:

• Access and receive a copy of the personal information we hold about you
• Correct or update inaccurate information
• Request deletion of your personal information
• Object to or restrict certain processing
• Data portability
• Withdraw consent where processing is based on consent
• Lodge a complaint with a supervisory authority

To exercise these rights, contact us at privacy@echoai.dev. You can also update account and profile information in the dashboard. We will respond in accordance with applicable law. Residents of certain jurisdictions (e.g., the European Economic Area, United Kingdom, California) may have additional rights under local data protection laws.

8. Children

The Service is not directed to individuals under 16 (or higher age where required). We do not knowingly collect personal information from children. If you believe we have collected such information, please contact us and we will take steps to delete it.

9. International Transfers

Your information may be transferred to and processed in countries other than your own. We take steps to ensure that such transfers are subject to appropriate safeguards (e.g., standard contractual clauses or other mechanisms recognized by applicable law) so that your information remains protected in accordance with this policy and applicable data protection laws.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page and update the “Last updated” date. Material changes may be communicated via email or a prominent notice in the Service. We encourage you to review this policy periodically. Continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact Us

For privacy-related questions or to exercise your rights, contact us at privacy@echoai.dev. For general inquiries, you may also use the contact information provided on our website.