1. Controller
AMAI SOLUTIONS LLC, a Domestic Limited Liability Company organised in New Mexico, United States, EIN 42-1910767, address 1209 MOUNTAIN ROAD PL NE STE R, ALBUQUERQUE, NM 87110, USA. Privacy contact: legal@amai.run.
This policy explains the processing that AMAI SOLUTIONS LLC carries out as controller on voice.amai.run and on the AMAI Voice platform: website visits, information and demo requests, customer accounts, billing, security and our own communications.
2. When we act on behalf of our customers
Businesses that use AMAI Voice upload contacts and make or receive calls with their agents. For those people and their calls, recordings and transcripts, the customer business is the controller and AMAI acts as processor under the DPA. If you received or made a call handled by an AMAI Voice agent, see the Recording and Transcription Notice and direct your requests to that business.
3. What data we process, why and on what basis
- Information and demo requests. Name, email, phone, company, message and the origin of the visit (campaign parameters and referring page). We use them to reply, send the material you ask for, offer a meeting and, if you request it, to have an AMAI AI voice agent call the number you provide as a demo. Basis: steps taken at your request before entering into a contract. When you submit the form, we send Meta a hashed version of your email and phone number to measure the effectiveness of our advertising campaigns. Basis: legitimate interest; you can object by writing to legal@amai.run.
- Customer accounts. Registration and account-user data, credentials, sign-in with Google or Facebook if you choose it, two-step verification, roles and activity logs. Basis: performance of the contract and legitimate interest in service security.
- Phone numbering. Identity and address documents of the business or its representative when the rules of the number's country require them. Basis: performance of the contract and legal obligations.
- Billing. Plan, usage, invoices, tax data and payment reference. Payments are processed by Stripe; AMAI does not store card numbers. Basis: performance of the contract and legal obligations.
- Security and fraud prevention. IP address, technical browser data and access and usage logs, including Cloudflare Turnstile anti-abuse checks on forms. Basis: legitimate interest in protecting the platform, its users and third parties.
- Our own marketing communications. Only with your consent or where the law allows it for customers, always with an easy way to unsubscribe. Basis: consent or legitimate interest.
- Analytics and advertising on the public website. Only if you accept the relevant cookies. Basis: consent. See the Cookie Policy.
We do not ask for special categories of data. Please do not include them in forms.
4. Artificial intelligence
We use AI to provide the service and, if you request a demo, to call you. We do not take decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you. See the AI Transparency Notice.
5. Recipients
Providers that process data on our behalf (hosting, voice and AI, telephony, email, payments, security and analytics) are listed with their function, location and transfer mechanism in the subprocessor list. We may also disclose data to authorities when the law requires it. We do not sell personal data.
6. International transfers
AMAI SOLUTIONS LLC is organised in the United States and several providers process data outside the European Economic Area. Those transfers rely on the EU-U.S. Data Privacy Framework and/or Standard Contractual Clauses, depending on the provider, under Chapter V of the GDPR.
7. Retention
- Requests and demos: while there is an active commercial interest and, afterwards, only as needed for legal obligations or the defence of claims.
- Accounts: while the account is active. If you request account deletion from the platform, you have 30 days to cancel it; after that period your account sign-in data is anonymised, the account's call recordings and transcripts are deleted, and the content and phone numbers of its call records are removed. Billing records are kept for the statutory tax retention period. You can request full deletion of the account data at legal@amai.run.
- Call data we process as a processor: audio recordings for the period of the business's plan (90 days by default); transcripts and tool data 180 days, or the plan's recording period if longer; the call record's number, analysis and sentiment 24 months; audit logs 24 months. Each call's billing record (date, duration, amount and numbers) is kept for the statutory tax retention period. The business customer can shorten these periods (minimum 7 days); details in the Recording and Transcription Notice.
- Invoices and tax records: for the legally required periods.
- Numbering documentation: while the number is assigned and for the time required by that country's rules.
- Security logs: for a period proportionate to the risk and to incident investigation.
- Evidence of consent and objection: while needed to demonstrate compliance and respect your objection.
- Database backups are deleted through rotation.
8. Your rights
You can request access, rectification, erasure, restriction, objection and portability, withdraw consent at any time without affecting prior processing, and ask for human intervention in automated decisions where applicable. Write to legal@amai.run; we may ask for information to verify your identity. Customers can download their account data from the platform. You may also complain to the data protection authority of your place of residence, work or of the alleged infringement; in Spain, the Agencia Española de Protección de Datos (www.aepd.es).
9. Minors
AMAI Voice is a business service and is not aimed at minors.
10. Security
We apply technical and organisational measures proportionate to the risk, such as encryption in transit, role-based access control, two-step verification, per-customer data separation, secret management, activity logs and backups. No system is infallible; if a security breach requires it, we will apply the relevant response and notification procedure.
11. Changes
We will update this policy when the service, providers or law change, stating the new version and its date.