Privacy Policy

1.1 Account and billing information — name, email, organization, role, IP address, payment metadata, and identifiers required to invoice and provide service.

1.2 Customer-uploaded content — call audio, transcripts, agent interactions, voicebot session data, and any uploaded files needed to perform conversation analysis or biometric verification (when those modules are active). This data is processed under our Master SaaS Services Agreement; the Customer is the data controller for it.

1.3 Platform usage data — analytics events, error logs, audit logs, and metrics on how the platform is used.

1.4 Website navigation data — pages visited, referrer, browser type, cookies, and similar telemetry from auralytik.com.

2.1 Service delivery, account management, billing, and customer support.

2.2 Platform security, abuse detection, fraud prevention, and legal compliance.

2.3 Improvement and personalization of the platform, including improving our AI models — but only on anonymized or aggregated data. We do not train third-party foundation models on Customer Data, and we do not use Customer-uploaded conversation content to train models that are made available to other customers.

2.4 Communications with you about your account, service status, and (with consent or where permitted) marketing.

3.1 For Customer-uploaded content, the Customer acts as Data Controller under GDPR, CCPA/CPRA, and applicable equivalents. Pintor Project acts as Data Processor.

3.2 For account, billing, and website navigation data, Pintor Project acts as Data Controller.

4.1 We engage sub-processors to provide infrastructure and supporting services. The current list is maintained at auralytik.com/subprocessors and includes Microsoft Azure (hosting, Azure AI Speech, Azure AI Language, Azure OpenAI Service, Communication Services Email, Application Insights, Blob Storage, SQL, Power BI), Stripe (self-serve billing), ElevenLabs (AI voice synthesis when voicebot features are active), and Twilio / Meta (WhatsApp Business messaging when WhatsApp integration is active).

4.2 We provide at least 30 days' advance notice for new sub-processors to customers with contractual notification requirements.

5.1 Customer Data is processed primarily in US and Chilean Azure regions. Cross-border transfers are covered by Standard Contractual Clauses, adequacy decisions, or equivalent safeguards required by applicable law.

6.1 We implement reasonable technical and organizational measures including encryption in transit and at rest, least-privilege access, multi-factor authentication, access and event logging, periodic security audits, and incident-management procedures.

7.1 Depending on your jurisdiction, you may have rights to access, correct, delete, port, or restrict processing of your personal data, and to opt out of certain processing.

7.2 Requests received directly by Pintor Project that concern Customer-uploaded content will be forwarded to the relevant Customer, unless applicable law imposes direct obligations on us.

7.3 To exercise rights regarding account, billing, or website data, contact privacy@auralytik.com.

8.1 Customer Data is retained while the contract is active. Upon written request from the Customer, Pintor Project deletes or returns Customer Data within a reasonable period, except where retention is legally required. Inactive accounts may be deleted after 24 months of inactivity.

9.1 The website uses cookies for session management, preferences, and analytics. You can manage cookie behavior through your browser settings.

10.1 We may update this policy. Material changes are communicated with reasonable advance notice through the platform or by email.