Privacy Policy
We Respect Your Privacy—Here's How
Effective Date: July 20, 2025
ARIIA AI LLC (“we,” “us,” or “our”) operates the ARIIA AI platform (the “Service”), a cloud-hosted SaaS solution for automating customer interactions, accessible at https://www.ariiaai.com/, as further described in our Terms of Service. This Privacy Policy explains how we collect, use, and protect your information. By using the Service, you consent to these practices and our Terms of Service.
INFORMATION WE COLLECT
Personal Data
As defined in our Terms of Service, Personal Data includes information that identifies an individual. When you use our Service, we collect:
- User Information: Full name, email, phone number, business name, business address, business EIN, business number.
- Customer Interaction Data: Voice recordings and transcripts of customer calls processed by AI agents for booking appointments, reservations, orders, and customer support.
- Voice Cloning: For businesses only (not customers). This involves processing biometric data, such as voice patterns, solely to provide the voice cloning feature for enhancing AI interactions. We do not use this data for individual consumer profiling, marketing, or any other purpose beyond the Service.
- Customer-Provided Details: Names, phone numbers, addresses (for delivery requests), service and order history.
- SMS Data: Phone numbers and content of SMS/text messages sent or received via the Service.
- Trial Users: During trial periods, we collect only the data necessary to provide the Service, as outlined in this section.
Technical Data
We automatically collect:
- IP address, device type (mobile/desktop), browser version, operating system (e.g., iOS, Android).
- Service usage metrics (call duration, API request volume, error logs).
Cookies and Tracking
We use cookies to:
- Essential Functions: Authenticate users and secure sessions (session cookies, expire when you close your browser).
- Analytics: Analyze traffic patterns via Google Analytics (persistent cookies).
- No Advertising: We do not serve targeted ads or track users across third-party sites.
Consent:
- A cookie banner requests consent for non-essential cookies (e.g., analytics).
- You can disable non-essential cookies via browser settings (Chrome, Safari).
- No Advertising: We do not serve targeted ads or track users across third-party sites.
Job Applicant Data
When you apply for a role through our careers section, we collect:
- Full name and email address.
- LinkedIn profile URL.
- College attended or attending.
- Job applicant data is used solely to evaluate your candidacy.
HOW WE USE YOUR INFORMATION
Service Functionality
We use your information to:
- Automate customer interactions (appointments, reservations, orders, support) in multiple languages.
- Retain customer preferences (e.g., dietary restrictions) to offer a more personalized experience. We do not use this data for marketing, research, or other purposes.
- Payments and Invoicing: Processed securely via Stripe. We do not collect or store payment details, including billing addresses, which are handled by Stripe and subject to Stripe’s Privacy Policy. Stripe generates and sends invoices on our behalf for subscriptions or usage-based billing, accessible via the Stripe Customer Portal or emailed to you.
- AI Interactions: Disclose to customers that interactions may be handled by an AI agent, as required by our Terms of Service.
Call Recording & Data Retention
- Call recording is disabled by default and requires user activation.
Business Responsibility:
- If you enable call recording, you must:
- Notify customers (e.g., “This call may be recorded”) and obtain consent (verbal or written) where required by law (e.g., all-party consent states like CA, FL, WA).
- Recordings are stored for 6 months and then automatically deleted.
- ARIIA AI LLC is not responsible for compliance with call recording laws (e.g., two-party consent states). By enabling this feature, you agree to comply with all applicable laws.
Compliance & Security
- Retain transaction records for 7 years for financial compliance.
- Respond to legal requests (e.g., subpoenas, court orders).
Automated Decisions
- AI-driven decisions are based on user prompts. The AI system is designed to automate decisions, and there is no human review. However, businesses can monitor AI interactions with customers in real-time.
Biometric Data Compliance
If you use the voice cloning feature, you are responsible for:
- Obtaining all necessary consents from individuals whose voices are cloned.
- Complying with applicable biometric data laws, such as the Illinois Biometric Information Privacy Act (BIPA).
- By using this feature, you agree to comply with applicable biometric data laws.
- Voice cloning data is deleted within 30 days after account termination unless required for legal compliance.
Consent to Receive SMS Communications
- When you provide your phone number while using ARIIA AI, you consent to receive automated SMS messages from us. These messages may include verification codes, account-related alerts, or other essential notifications related to your use of the platform. Message and data rates may apply depending on your mobile carrier. If you wish to stop receiving SMS communications from us, please contact our support team.
SMS Compliance
Transactional SMS (e.g., appointment confirmations, reservation confirmations, order confirmations, order-ready alerts):
- All SMS sent out will automatically include “Reply STOP to opt-out.”
- Opt-out requests (‘STOP’ replies) are processed automatically, and opted-out numbers are blocked from future SMS.
Marketing SMS (e.g., sales offers, promotions):
- Require prior Express Written Consent (e.g., signed form, checkbox on a website).
- Must include an opt-out mechanism (e.g., “Reply STOP to unsubscribe”).
- Opt-out requests (‘STOP’ replies) are processed automatically, and opted-out numbers are permanently blocked from future SMS.
- You agree not to circumvent this feature (e.g., re-adding blocked numbers).
HOW WE SHARE YOUR INFORMATION
Third-Party Vendors
We work with trusted third-party vendors to provide essential services, which may collect and process data such as customer details, payment information, audio, text, and scheduling data. You are responsible for reviewing and complying with their terms and privacy policies, and obtaining user consent where required by law (e.g., for SMS or audio processing):
- VoIP/SMS: Twilio (calls and SMS).
- Payment Processing and Invoicing: Stripe.
- AI/Cloud: ElevenLabs (text to speech, voice cloning), OpenAI (LLM), Deepgram (speech-to-text, transcription), AWS (cloud hosting).
- Scheduling/POS: Microsoft Bookings (booking system), Foodhub (syncs phone orders to compatible POS systems).
Legal & Security Disclosures
- We may share data with authorities if required to investigate fraud or comply with legal obligations.
Data Security
- Encryption: TLS 1.2+ (in transit), AES-256 (at rest).
- Access Control: We implement strict access control measures to ensure data security.
- AWS Hosting: Data is stored on ISO 27001-certified servers.
YOUR RIGHTS
General Rights
You have the right to:
- Access/Delete Data: Email security-privacy@ariiaai.com for a response within 30 days (or 45 days for California residents under CCPA, if shorter per other applicable state laws).
- Opt-Out: You can unsubscribe from marketing emails and text messages.
- AI/Cloud: ElevenLabs (text to speech, voice cloning), OpenAI (LLM), Deepgram (speech-to-text, transcription), AWS (cloud hosting).
- EU/UK Users: Our Service is intended for U.S.-based businesses only. We do not offer the full range of data rights under GDPR. However, users outside the U.S. may contact us at security-privacy@ariiaai.com to inquire about data portability or object to processing, though our compliance focuses on U.S. laws.
DATA RETENTION
- Financial Transactions: Retained for 7 years for tax compliance.
- Biometric Data: Voice cloning data is deleted within 30 days after account termination unless required for legal compliance.
CHILDREN’S PRIVACY
- The Service is restricted to users 18+. If we become aware of underage use, we will take steps to remove the account and associated data. Please report any suspected underage use to security-privacy@ariiaai.com.
LINKS TO OTHER WEBSITES
- Our Service may contain links to other websites. Third-party services integrated with our platform (e.g., Stripe, AWS) are listed in Section 3.1. We are not responsible for their privacy practices
STATE-SPECIFIC PRIVACY RIGHTS
If you are a resident of California, Virginia, Colorado, Connecticut, Utah, or other states with applicable privacy laws, you may have additional rights under laws such as the California Consumer Privacy Act (CCPA) or the Virginia Consumer Data Protection Act (VCDPA). These rights may include:
- The right to request access to your personal data.
- The right to request deletion of your personal data.
- The right to opt-out of the sale of personal information (although we do not sell your personal information).
- The right to non-discrimination for exercising your privacy rights.