Privacy Policy

Studio Nallan (“AnswerAll,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect information in connection with the AnswerAll website and AI call/text-answering service (the “Service”). It applies to two categories of individuals: (1) our business clients and their authorized users (“Clients”), and (2) the end callers/website visitors who interact with a Client's AI-answered phone line or chat widget (“End Users”).

This policy is designed to comply with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation, and, where relevant, applicable U.S. state privacy laws for Clients and End Users located in the United States.

1. Information We Collect

1.1 From Clients (business accounts)

• Business and contact details: name, business name, email, phone number, billing address.
• Account credentials.
• Payment information (processed by our third-party payment processor — see Section 4; we do not store full card numbers).
• Business configuration data you provide: scripts, FAQs, service descriptions, call-routing preferences.
• Usage data: login activity, dashboard usage, support communications.

1.2 From End Users (your customers/callers)

When an End User calls, texts, or messages a Client's AI-answered line or chat widget, we (via our AI infrastructure provider) may process:

• Phone number or contact details provided by the End User.
• Call audio, recordings, and/or transcriptions.
• Chat widget conversation content.
• Information volunteered during the interaction (e.g., service requested, appointment details, address, general inquiry content).

We collect End User information on behalf of the Client to deliver the Service; the Client is the party responsible for its own customer relationships and for providing any required notices to its End Users (see Section 7).

1.3 Automatically Collected (Website)

When you visit the AnswerAll website, we may automatically collect standard technical data such as IP address, browser type, device information, and pages visited, potentially via cookies or similar technologies (see Section 6).

2. How We Use Information

We use the information described above to:

• Provide, operate, and maintain the Service (answering calls/chats, routing leads, booking appointments);
• Process billing and manage Client accounts;
• Communicate with Clients about their account, support requests, or service updates;
• Improve and troubleshoot the Service, including monitoring AI response quality;
• Comply with legal obligations; and
• Detect, prevent, and address fraud, security, or technical issues.

We do not sell personal information. We do not use End User call/chat content to train AI models beyond what is necessary to deliver the Service to the relevant Client, except as disclosed by our infrastructure provider(s) per Section 4.

3. Legal Basis / Consent

Where required by law, we rely on: performance of a contract (delivering the Service to Clients), legitimate business interests (operating and improving the Service), and consent (where applicable, e.g., certain marketing communications). Clients are responsible for obtaining consent from their End Users for call recording, SMS communication, and AI interaction as required under applicable law (see Section 7).

4. Third-Party Service Providers

We share information with the following categories of third parties, solely to operate the Service:

• AI voice/chat infrastructure provider (currently Reception.ai and its underlying telephony/communications sub-processors) — processes call audio, transcriptions, and chat content to power the AI answering service.
• Payment processor (Stripe) — processes billing information.
• Hosting and infrastructure providers — host our website and dashboard.
• Analytics providers (if applicable) — for website usage analytics.

These providers are contractually or by policy restricted to using data only as necessary to provide their services to us. We do not control, and are not responsible for, the independent privacy practices of third-party providers beyond our reasonable oversight; we encourage Clients to review the privacy policies of Reception.ai (or successor providers) directly.

5. Data Retention

We retain Client account information for as long as the account is active and for a reasonable period afterward to comply with legal, accounting, or dispute-resolution obligations. Call recordings, transcriptions, and chat logs associated with End User interactions are retained for 12 months while a Client's account remains active, or as otherwise configured by the Client's plan. If a Client's account is cancelled, associated End User call/chat data is retained for 30 days post-cancellation to allow for account recovery or data export requests, after which it is deleted or anonymized, unless a longer period is required by law or requested by the Client.

6. Cookies and Website Tracking

Our website may use cookies or similar technologies to operate correctly, remember preferences, and understand site usage. You can control cookies through your browser settings; disabling cookies may affect site functionality.

7. Client Obligations Regarding End Users

Because AnswerAll processes End User data on behalf of Clients, each Client is responsible for:

• Providing any legally required notice to its own customers/callers that calls or chats may be handled or recorded by an AI system;
• Obtaining any consent required under applicable call-recording, wiretapping, or telemarketing/SMS consent laws (e.g., two-party consent states/provinces, CASL, TCPA); and
• Ensuring it has a lawful basis to collect and share End User data with AnswerAll for processing.

AnswerAll is not responsible for a Client's failure to provide required End User notices or obtain required consents.

8. Your Rights

Subject to applicable law, individuals may have the right to:

• Access the personal information we hold about them;
• Request correction of inaccurate information;
• Request deletion of their information, subject to legal retention requirements;
• Withdraw consent where processing is based on consent; and
• Object to certain processing.

Clients may exercise these rights via info@studionallan.com. End Users seeking to exercise rights regarding their interactions with a specific business should generally contact that business directly, or may contact us at info@studionallan.com and we will coordinate with the relevant Client as needed.

9. Data Security

We implement commercially reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, disclosure, alteration, or destruction. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

10. International Data Transfers

Personal information may be stored or processed in Canada, the United States, or other jurisdictions where our service providers operate. Where information is transferred internationally, we take reasonable steps to ensure it receives an adequate level of protection consistent with this Policy.

11. Children's Privacy

The Service is not directed to individuals under the age of 18, and we do not knowingly collect personal information from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated “Last Updated” date, and where appropriate, communicated directly to Clients.

13. Contact Us

For questions about this Privacy Policy or to exercise your privacy rights, contact: