Privacy Policy

Information we collect

Account information

When a restaurant signs up, we collect the account owner’s email address, business name, business type, business phone number, business address, working hours, menu, and related configuration needed to operate the service.

Call, order and appointment data

When someone calls a business that uses Callra AI, we process the caller’s phone number, the call audio, a transcript of the conversation, and what the call was for: for restaurants, the items ordered, delivery address (if applicable) and any special instructions; for salons, the service booked, the stylist, and the appointment history. We store this so the business can see its history, contact its customers, and improve service.

Allergy-alert (patch) test records — salons

Where a salon uses the allergy-alert test gate, we store whether a client has a valid test on file and when it was recorded, so that services requiring one cannot be booked without it. These records are append-only: a correction is written as a new entry rather than replacing the previous one, so the history stays intact.

SMS information

When we send transactional SMS messages on behalf of a restaurant (for example, order confirmations, status updates, or payment links), we process the recipient’s mobile number and the content of the message.

Technical data

Our systems log standard technical information such as IP address, browser type, device identifiers, timestamps, and error diagnostics so we can operate, secure, and debug the service.

How we use information

• To operate the service — answer calls, and either take orders and forward them to the restaurant and its point-of-sale system where configured, or book, move and cancel appointments against the salon’s diary.
• To send transactional SMS messages that relate directly to an order the caller placed (confirmations, status updates, payment links, delivery notices).
• To provide the dashboard and mobile app, including order or appointment management, customer history, reporting, and support.
• To improve accuracy, reliability, and safety of the service, including debugging and fraud prevention.
• To communicate with account holders about their subscription, service updates, and support requests.

What we do not do

We do not sell, rent, or share your personal information, or the personal information of callers, with third parties for their own marketing purposes. We do not use SMS or call data for marketing, advertising, or any purpose other than operating the ordering service the caller contacted.

Mobile information (including phone numbers obtained through our SMS program) is never shared with third parties or affiliates for marketing or promotional purposes. Information sharing to subcontractors supporting the service is permitted only as described below; all other categories exclude text-messaging originator opt-in data and consent.

Service providers we use

We rely on a small number of trusted processors to deliver the service. These providers only receive the data needed to perform their function and are contractually bound to protect it. By category:

Telephony and real-time media

Inbound phone numbers, call routing, SMS delivery, and the real-time voice infrastructure that connects a call to our AI agent.

Speech and language processing

Speech-to-text transcription of call audio, text-to-speech synthesis for the agent’s replies, and the large language model behind its understanding and responses.

Transactional email

Delivery of account and booking email.

Cloud hosting and data infrastructure

Database, cache, and cloud hosting, located in the United States.

Square and Clover

Only when a restaurant has connected its point-of-sale account; we forward the order details the POS system requires.

We do not publish the individual vendors behind these categories. Business customers whose procurement or data-protection review requires the named list can request it from info@callraai.com.

Legal disclosures

We may disclose information where required to comply with a valid legal process, to protect the rights, property, or safety of Callra AI, our customers, or the public, or to enforce our Terms. We will notify affected account holders where we are permitted to do so.

Data retention

Account and business configuration data is retained for as long as the restaurant’s account is active. Call transcripts, order history, and notifications are retained for the duration required to operate the service and meet the restaurant’s reasonable reporting needs. In-app notifications expire after 30 days. Webhook delivery logs are retained for 7 days. We will delete or anonymize personal information when it is no longer needed or upon a verified deletion request.

Security

We protect information with industry-standard safeguards: TLS in transit, encryption at rest for sensitive credentials (AES-256), least-privilege access controls, and audit logging of administrative actions. No system is perfectly secure, but we take our obligation to protect this data seriously.

Your choices

You can access, correct, or delete your account information at any time from the dashboard, or by contacting us at the address below. To stop receiving transactional SMS messages from a business that uses Callra AI, reply STOP to any message from that restaurant. Reply HELP for assistance.

Children

Callra AI is intended for use by business operators — restaurants, salons, barbers and beauty studios — and their adult customers. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with information, contact us so we can delete it.

Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date at the top of this page and notify account holders where appropriate. Continued use of the service after a change means you accept the revised policy.

Contact us

Questions, requests, or complaints about this Privacy Policy can be sent to info@callraai.com.