1. Who we are
Naracord Technologies (“Naracord”, “we”, “us”) provides AI voice agent, AI receptionist, outbound calling, text messaging and website chat services to businesses in the United States, Canada and the United Kingdom. This policy explains how we handle personal information when you visit our website, contact us, or when your call is handled by an AI agent operated on behalf of one of our business customers.
2. Our two roles
- Processor / service provider. When we answer or place calls and messages for a business customer, that business decides why and how caller data is used. We process it only on their instructions. Questions about those calls should go to the business you called; we will help them respond.
- Controller. For our own website, marketing and sales enquiries (for example the contact form), we decide how the data is used and are responsible for it.
3. Information we collect
- Website enquiries: name, work email, phone number, country, company, website, industry, call volume, message, communication preferences, and attribution data (such as UTM tags and referring site).
- Calls and messages handled for customers: audio, transcripts, phone numbers, and details the caller provides (such as appointment preferences), plus call metadata like time and duration.
- Account data: administrator names, emails, phone numbers and billing information for business customers.
- Technical data: IP address, device and browser information, collected for security and rate-limiting.
4. How we use information
- To provide, secure and support the services our customers subscribe to.
- To respond to enquiries and demo requests, using the channel you choose.
- To send product updates only where you opted in (for example under CASL in Canada or PECR in the UK); you can unsubscribe at any time.
- To detect abuse, fraud and spam, and to meet legal obligations.
We do not sell personal information and do not “share” it for cross-context behavioral advertising as defined by the CCPA/CPRA. We do not use customer call data to train shared AI models without the customer's written permission.
5. Call recording and AI disclosure
Our default greeting tells callers that the call may be recorded and is handled by an AI assistant. Some US states (including California, Florida, Illinois, Maryland, Massachusetts, Pennsylvania and Washington) require all parties to consent to recording; Canadian and UK law also require transparency. Business customers are responsible for configuring disclosures appropriate to their callers.
6. Security
Data is encrypted in transit (TLS 1.2 or higher, SRTP for media where supported) and at rest (AES-256). Access is role-based and protected by multi-factor authentication. Customer data is logically isolated per account.
7. Retention
Recordings and transcripts are retained for 90 days by default; customers can choose shorter or longer periods. Website enquiries are kept for up to 24 months after our last interaction, unless you ask us to delete them sooner.
8. Your rights by region
United States
Depending on your state (for example California under the CCPA/CPRA, and Colorado, Connecticut, Virginia and others), you may request access to, correction of, or deletion of your personal information, and opt out of sale or sharing. We will not discriminate against you for exercising these rights. For healthcare customers, we sign a HIPAA Business Associate Agreement and handle protected health information according to it.
Canada
Under PIPEDA and applicable provincial laws, including Québec's Law 25, you may access and correct your personal information and withdraw consent. Our privacy contact below acts as the person responsible for the protection of personal information.
United Kingdom
Under the UK GDPR and Data Protection Act 2018 you have rights of access, rectification, erasure, restriction, portability and objection. Our lawful bases are contract, legitimate interests (responding to business enquiries and securing our services) and consent (marketing). You may complain to the Information Commissioner's Office (ico.org.uk).
9. International transfers
We use cloud infrastructure and sub-processors that may process data in the United States, Canada, the United Kingdom or the European Economic Area. Where UK personal data is transferred abroad, we use appropriate safeguards such as the UK International Data Transfer Addendum or the UK Extension to the EU–US Data Privacy Framework.
10. Cookies
Our website uses only strictly necessary storage (for example, remembering your light/dark theme preference). If we add analytics or advertising cookies, we will ask for consent where required and update this policy.
11. Contact
Privacy requests: privacy@naracord.com
Data processing agreements, BAAs and legal questions: legal@naracord.com
See also our Terms of Service.