Short version: We collect only what's needed to run our services. We don't sell your data. Call data from Atlas AI belongs to you. We use trusted third parties (OpenAI, Twilio, AWS) to deliver our services.
1. Who We Are
Auzora ("we," "us," or "our") provides AI-powered business automation services, including the Atlas AI phone agent platform. This Privacy Policy explains how we collect, use, and protect information when you use our website at auzora.io and our services.
For privacy questions, contact us at privacy@auzora.io.
2. Information We Collect
From website visitors:
- Contact form submissions (name, email, business name, message)
- Basic analytics (page views, referral source — no personally identifiable tracking)
From clients (businesses using our platform):
- Account information: business name, email address, billing information
- Configuration data: AI agent settings, FAQs, services, office hours
- Twilio phone number associated with your account
From end users (callers speaking with Atlas AI):
- Name, phone number, and email (when provided to the AI agent)
- Appointment details (service requested, preferred date/time, notes)
- Call audio processed in real-time by OpenAI's Realtime API (not stored by Auzora)
- AI-generated transcript excerpts used for appointment booking
- SMS message content (booking links, follow-up information, appointment reminders) sent to the caller's phone number after verbal consent during the call
3. How We Use Information
- To deliver and operate our services
- To process appointment bookings made through Atlas AI
- To sync appointment data to connected calendars (Google Calendar, when authorized)
- To send service-related communications (invoices, alerts, updates)
- To send SMS messages to callers (booking links, follow-up information, appointment reminders) only after the caller has verbally consented during a call with the AI agent
- To improve our AI models and service quality (aggregated, non-identifiable data only)
- To comply with legal obligations
We do not use your data or your callers' data for advertising or sell it to third parties.
4. Third-Party Service Providers
We use the following trusted providers to deliver our services. Each has their own privacy practices:
| Provider | Purpose | Data Shared |
|---|
| OpenAI | AI voice processing (GPT-4o Realtime) | Real-time call audio; processed per OpenAI's Privacy Policy |
| Twilio | Phone number, call routing, audio streaming | Call metadata; processed per Twilio's Privacy Policy |
| Amazon Web Services | Cloud infrastructure, database storage | All platform data stored in AWS us-east-2 (Ohio) |
| Google | Calendar integration (when enabled by client) | Appointment data synced when client connects their Google Calendar |
| Netlify | Website hosting | Website traffic analytics |
| Stripe | Payment processing | Billing info; Auzora never stores full card numbers |
5. Data Retention
- Appointment records: Retained for the duration of your subscription + 12 months
- Call audio: Processed in real-time by OpenAI; not stored by Auzora
- Account data: Retained until account deletion + 30-day grace period
- Billing records: Retained for 7 years as required by law
6. Data Security
We implement industry-standard security measures including:
- TLS encryption for all data in transit
- Encrypted storage on AWS with restricted IAM access controls
- API authentication tokens for all service-to-service communication
- No storage of raw call audio by Auzora
No method of electronic transmission is 100% secure. We cannot guarantee absolute security but take reasonable precautions.
7. Your Rights
Depending on your location, you may have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Delete your data (subject to legal retention requirements)
- Export your data in a machine-readable format
- Opt out of non-essential communications
To exercise these rights, contact privacy@auzora.io. We will respond within 30 days.
8. Caller Data (For Auzora Clients)
If you are an Auzora client deploying Atlas AI, you are the data controller for your callers' information. You are responsible for:
- Disclosing to callers that they may be speaking with an AI
- Obtaining any required consent for call recording or data collection
- Complying with applicable privacy laws (CCPA, GDPR, TCPA, etc.) with respect to your callers
Auzora processes caller data on your behalf as a data processor under your instruction.
9. SMS Messaging
Auzora's Atlas AI platform may send SMS text messages to callers who have initiated contact with a client's business. SMS messages are used for:
- Booking links and appointment scheduling
- Follow-up information requested during the call
- Appointment reminders and confirmations
Consent: SMS messages are sent only to individuals who have provided express written consent through one of the following methods:
- Online Booking Form: Customers fill out a booking form on the business's website. The form includes an unchecked consent checkbox: "I agree to receive text message confirmations and reminders about my appointment." The customer must actively check this box to submit the form.
- Website Contact Form: Visitors fill out the contact form on auzora.io. The form includes an unchecked consent checkbox: "I agree to receive text messages from Auzora IT Services at the phone number provided." The visitor must actively check this box to submit the form.
- SMS Keyword Opt-In: Individuals text START, YES, or UNSTOP to the business's phone number to opt in. The system responds: "You have successfully been re-subscribed to messages from this number. Reply HELP for help. Reply STOP to unsubscribe. Msg&Data Rates May Apply."
- Verbal Consent During Call: During a phone call with the AI agent, the caller verbally agrees to receive text messages. The consent is recorded on the lead record with a timestamp.
SMS is never sent as unsolicited marketing. All consent is active and affirmative — no pre-checked boxes or forced consent are used.
Opt-out: Recipients may opt out of SMS messages at any time by replying STOP, STOP ALL, UNSUBSCRIBE, CANCEL, or END to any message. Upon opt-out, no further SMS messages will be sent to that number. Recipients may opt back in by texting START, YES, or UNSTOP to the business number.
No sharing of mobile numbers: Mobile numbers are not shared with third parties or affiliates for marketing or promotional purposes.
Message frequency: Message frequency varies based on the interaction. Typically 1–3 messages per caller per inquiry (e.g., a booking link, a confirmation, and a reminder). No recurring or subscription-based messaging is sent.
Carrier fees: Standard message and data rates may apply to recipients based on their mobile carrier plan.
Compliance: SMS messaging is delivered via Twilio under A2P 10DLC registration. Clients are responsible for ensuring their use of SMS complies with the TCPA, CTIA guidelines, and all applicable state and federal regulations.
10. Children's Privacy
Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children.
11. Changes to This Policy
We may update this policy periodically. Material changes will be announced via email or portal notification. Continued use of our services after changes constitutes acceptance.
12. Contact Us
Email: privacy@auzora.io
Website: auzora.io