Privacy Policy

We collect information you provide directly and information generated through your use of the Service:

• Account information: Name, email address, company name, phone number, and password when you create an account.
• Business data: Contact information, service listings, service requests, service provider details, and other business records you enter into the platform.
• Call recordings and transcripts: When call recording is enabled, we store audio recordings and AI-generated transcripts of calls handled by the Perbene voice assistant. These may include caller phone numbers, names, and the content of conversations.
• SMS and email messages: When you or your contacts send or receive SMS messages or emails through the platform, we store the message content, sender and recipient phone numbers or email addresses, timestamps, and delivery status.
• Contact information of callers: Phone numbers, names, and other details provided by callers during interactions with the AI assistant.
• Usage data: Log files, device information, IP addresses, browser type, pages visited, and feature usage analytics.
• Payment information: Billing details are processed securely by Stripe. We do not store full credit card numbers on our servers.

We use the information we collect to:

• Provide, maintain, and improve the Perbene platform and AI voice assistant service.
• Process calls, qualify leads, triage service requests, and escalate emergencies on your behalf.
• Generate call transcripts and analytics for your dashboard.
• Process your subscription and billing.
• Send transactional communications (account verification, password resets, billing receipts, team invitations).
• Improve our AI models and service quality using anonymized and aggregated data only.
• Respond to support requests and provide customer service.
• Detect, prevent, and address technical issues and security threats.

Call recordings and transcripts are a core part of the Service. Important details:

• Recordings and transcripts are stored securely and encrypted at rest.
• Access is restricted to authorized members of your organization.
• Retention periods depend on your subscription plan: 30 days (Starter), 90 days (Professional), or 365 days (Enterprise).
• You may delete individual recordings at any time through the dashboard.
• We do not use your call recordings to train AI models without your explicit consent.

We share data with third-party service providers that are essential to operating the Service:

• Telnyx: Telephony and SMS services. Telnyx routes calls and messages to and from the Perbene platform.
• Amazon S3: Secure cloud storage for call recordings.
• Stripe: Payment processing. Stripe handles all billing and credit card information.
• AI model providers: Large language model and speech recognition providers (including but not limited to DeepSeek) that power the AI voice assistant. These providers process call transcripts, conversation text, and AI prompts in real time to generate responses. They do not retain your data for their own training purposes.
• Cloud infrastructure providers: Hosting, databases, and compute services necessary to run the platform.

We require all third-party providers to maintain appropriate security measures and to process your data only as directed by us.

We do not sell your personal data. We share data only in the following circumstances:

• With the third-party service providers listed above, solely to operate the Service.
• When required by law, regulation, legal process, or governmental request.
• To protect the rights, property, or safety of Perbene, our users, or the public.
• In connection with a merger, acquisition, or sale of assets, with appropriate notice to affected users.

We implement industry-standard security measures including:

• Encryption in transit (TLS 1.2+) and at rest (AES-256).
• Access controls and role-based permissions.
• Regular security audits and vulnerability assessments.
• Secure API authentication using timing-safe comparisons.

However, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

• Account data: Retained for as long as your account is active, plus 30 days after account deletion to allow for recovery.
• Call recordings: Retained according to your subscription plan limits (30, 90, or 365 days).
• Usage logs: Retained for up to 12 months for analytics and troubleshooting purposes.
• Billing records: Retained as required by applicable tax and financial regulations.

You may request deletion of your data at any time by contacting us at [email protected].

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data.
• Portability: Request your data in a machine-readable format.
• Restriction: Request that we restrict processing of your data.
• Objection: Object to processing of your data for certain purposes.
• Withdrawal of consent: Withdraw consent where processing is based on consent.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

DAHO is established in Ontario, Canada. Our handling of personal information in the course of commercial activity is governed by the Personal Information Protection and Electronic Documents Act (PIPEDA) and by applicable provincial privacy legislation.

• Accountability: We are responsible for personal information under our control. Privacy questions go to [email protected].
• Identifying purposes and consent: We tell you why we collect personal information at or before the time we collect it, and we obtain your consent except where the law permits otherwise.
• Limiting collection, use and retention: We collect only what is needed to operate the Service, use it only for the purposes identified, and retain it only for your plan’s retention period.
• Accuracy and safeguards: We keep personal information accurate and protect it with safeguards appropriate to its sensitivity, including encryption in transit and at rest.
• Openness and access: On request we will tell you what personal information we hold about you, how it is used, and to whom it has been disclosed, and we will correct it if it is wrong.
• Challenging compliance: Contact [email protected] to challenge our handling of your personal information. You may also complain to the Office of the Privacy Commissioner of Canada.

Call recordings and transcripts may contain personal information about the people who call you. In that processing you are the organization collecting the information and we act on your behalf. You remain responsible for notifying callers that calls are recorded and for obtaining any consent your jurisdiction requires — see section 3. If you operate in Quebec, Law 25 places further obligations on you as the collecting organization.

If you are located in the European Economic Area (EEA), we process your personal data on the following legal bases:

• Performance of a contract: Processing necessary to provide the Service you have subscribed to.
• Legitimate interests: Improving our Service, preventing fraud, and ensuring security.
• Consent: Where required, such as for optional analytics or marketing communications.
• Legal obligation: Compliance with applicable laws and regulations.

You have the right to lodge a complaint with your local data protection authority. For data transfers outside the EEA, we rely on Standard Contractual Clauses approved by the European Commission.

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• The right to know what personal information we collect, use, and disclose.
• The right to request deletion of your personal information.
• The right to opt out of the sale of your personal information. We do not sell personal information.
• The right to non-discrimination for exercising your CCPA rights.

To exercise your CCPA rights, contact us at [email protected] or submit a request through your dashboard settings.

We use essential cookies for authentication, session management, and security. We do not use third-party advertising or tracking cookies. Essential cookies cannot be disabled as they are necessary for the Service to function.

The Service is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Service and update the “Effective date” at the top of this page. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy or our data practices, please contact us at:

DAHO Email: [email protected]