Privacy Policy

Account data: name, email, phone number, password (hashed), workspace and business configuration (services, hours, service area, transfer numbers, greetings).

Call data: when your business uses the Service, calls are processed by our AI infrastructure and may include audio, caller ID, transcripts, AI-generated summaries and analyses, and details callers state (names, phone numbers, addresses, appointment requests). The business using the Service is responsible for providing any legally required notice and consent to its callers.

Billing data: processed by Stripe; we store subscription status and usage records (call minutes), not card numbers.

Technical data: logs, device and usage information, and cookies necessary for authentication and security.

To provide and operate the Service (answering and placing calls, transcription, analysis, notifications, dashboards); to bill and meter usage; to secure the platform and prevent abuse; to communicate with you about the Service; and to improve the Service, including using aggregated and de-identified data. We do not sell personal information.

Subprocessors that power the Service under contract: voice and telephony AI infrastructure (Retell AI), cloud database and authentication (Supabase), payment processing (Stripe), transactional email (Resend), and hosting providers. We share data with them only as needed to run the Service. We may also disclose information to comply with law, enforce our terms, or protect rights and safety, and in connection with a merger or acquisition.

Account and call data are retained while your account is active and for a period afterward for legal, billing, and audit purposes. After account termination, data may be deleted following a 30-day export window. Audit logs and billing records may be retained longer where required.

Data is encrypted in transit; every record is isolated per business with database-level row security; sensitive actions are audit-logged; platform administration requires multi-factor authentication. No system is perfectly secure, and we cannot guarantee absolute security.

You can access and update account information in the app, change where notifications are sent, and cancel your account at any time. Depending on your location, you may have rights to access, correct, delete, or export personal information — contact hello@orlivo.ai. If you are a caller of a business that uses ORLIVO, direct requests to that business, which controls its customer data; we assist businesses in fulfilling such requests.

The Service is for businesses and is not directed to children under 18; we do not knowingly collect children’s data.

We may update this policy; material changes will be notified via the Service or email. Questions: hello@orlivo.ai.