Privacy Policy

1. What Information Do We Collect?

• ›Account information: your name, email address, phone number, password, business name, and billing details when you register or update your account
• ›Voice and call data: telephone call recordings and AI-generated transcripts processed through your Konci AI assistants, including the phone numbers of callers, call duration, timestamps, call disposition, and voicemail content
• ›Payment information: billing details processed securely through Stripe; Konci does not store raw payment card numbers or full card details
• ›Usage data: how you interact with the platform, which features you use, API calls made, dashboard activity, assistant configuration history, and performance metrics
• ›Device and technical data: your IP address, browser type and version, operating system, session identifiers, and referring URLs collected automatically when you access our website or platform
• ›Integration data: information from connected third-party services such as Google Calendar, CRM systems, and point-of-sale platforms, as authorized by you during setup
• ›Communications: messages you send to our support team, feedback you submit, and responses to surveys or research requests
• ›Marketing data: whether you opened our emails, clicked links, or attended webinars, where you have subscribed to our communications

2. How Do We Use The Information We Collect?

• ›Provide, operate, maintain, and improve our AI voice assistant platform and all related Services
• ›Process and analyze call recordings and transcripts to deliver AI-powered responses, summaries, and business insights
• ›Bill you for Services and process payments through our third-party payment processor
• ›Send service-related communications including usage notifications, billing receipts, security alerts, and product updates
• ›Respond to your support requests and resolve technical issues
• ›Detect, investigate, and prevent fraud, abuse, unauthorized access, and security incidents
• ›Comply with applicable laws and regulations, including FCC telecommunications requirements and CPNI rules
• ›Create de-identified and aggregated datasets to understand usage patterns and improve our AI models — we do not use identifiable Customer Data for AI model training without your explicit opt-in consent
• ›Contact you about new features, offers, or events from Konci, where you have opted in to such communications

3. Customer Proprietary Network Information (CPNI)

As a provider of voice communications services, Konci is subject to FCC regulations regarding Customer Proprietary Network Information (CPNI) under 47 U.S.C. § 222 and 47 C.F.R. Part 64. CPNI includes information about the quantity, technical configuration, type, destination, location, and amount of use of your telecommunications services, along with related billing information that we obtain solely by virtue of our provider relationship with you. Konci collects CPNI in the ordinary course of providing voice services, including data about call volumes, call duration, called and calling phone numbers, and usage patterns. We use CPNI only to provide and improve the specific telecommunications services we offer you, unless you have given us your approval to use it for additional purposes such as marketing of other services. You have the right to restrict Konci's use of your CPNI beyond service provision. To exercise this right, contact us at privacy@konci.ai. Restricting CPNI use will not affect your ability to receive and use the Services. Konci will provide customers with annual notice of their CPNI rights consistent with FCC requirements.

4. Call Recordings and Transcripts

Konci records telephone calls handled by your AI assistants and generates transcripts using AI speech recognition technology. These recordings and transcripts are stored within your account and are accessible to you and the authorized users of your account. Call recordings are retained according to your plan settings — the default retention period is ninety (90) days, which you can configure from your dashboard. Extended retention of up to seven (7) years is available on eligible plans for regulatory or compliance purposes. You can request deletion of specific recordings at any time through your dashboard. You are responsible for configuring Konci's built-in call recording disclosure announcement, which plays an audible notice to callers before recording begins. Compliance with applicable state and federal call recording consent laws is your responsibility — see our Terms of Service for details.

5. Caller Data and Third-Party Privacy

When callers interact with your Konci AI assistants, we process information about those callers — including their phone numbers, call content, and call recordings — on your behalf as a data processor. You are the data controller for this caller information. Your privacy policy and data handling practices govern how you use, retain, and protect that caller data. If a caller contacts you requesting access to, correction of, or deletion of data processed through your AI assistant, and you forward that request to us, Konci will provide reasonable technical assistance in honoring the request. Callers who have questions about how their data is handled by a Konci-powered AI assistant should direct their inquiry to the business operating that assistant.

6. Do We Share Your Personal Information?

Konci does not sell your personal information to third parties. We do not share your personal information for third-party advertising or behavioral targeting purposes. We may share your information in the following limited circumstances: (a) Service providers — we share data with trusted third-party vendors who assist in operating the Services, including cloud infrastructure providers (Amazon Web Services), payment processors (Stripe), AI model providers, telecommunications carriers, and analytics services. All service providers are contractually required to protect your information and may only use it for the purposes we specify. (b) Legal compliance — we may disclose information when required by law, subpoena, court order, or other governmental or legal process, or when we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others. (c) Business transfers — in the event of a merger, acquisition, or sale of substantially all of our assets, your information may be transferred to the successor entity. We will provide notice of any such transfer and your rights with respect to your information. (d) With your consent — we may share information for other purposes with your prior written consent.

7. How Do We Use Tracking Technologies?

We use cookies and similar tracking technologies on our website and platform. Essential cookies are necessary for the Services to function and cannot be disabled. Analytics cookies help us understand how users interact with our platform so we can identify improvements — you can opt out of non-essential analytics through your browser settings. We do not use advertising cookies or cross-site behavioral tracking technologies, and we do not sell your browsing data to data brokers, advertising networks, or other third parties. Konci's website does not currently alter its data collection practices in response to browser "Do Not Track" signals, as we do not engage in the behavioral advertising for which such signals were designed.

8. How Do We Secure Your Personal Information?

• ›All data is encrypted in transit using TLS 1.2 or higher
• ›Data at rest is encrypted using AES-256
• ›Our cloud infrastructure undergoes regular third-party security assessments
• ›We maintain role-based access controls and comprehensive audit logging for all data access
• ›Our systems are hosted in U.S.-based data centers with geographic redundancy
• ›We maintain an incident response plan and will notify you of material security breaches as required by applicable law
• ›No method of data transmission over the internet or electronic storage is 100% secure — while we use industry-standard measures, we cannot guarantee absolute security

9. Data Retention

We retain your account information for as long as your account is active and for thirty (30) days after account cancellation to allow for reactivation or data export. After that window, we delete or anonymize your account data. Call recordings and transcripts are retained according to your configured plan settings. De-identified and aggregated analytics data may be retained indefinitely. Certain data may be retained for longer periods where required by applicable law, FCC regulations, legal holds, or legitimate business purposes such as fraud prevention and dispute resolution.

10. Managing Your Privacy

• ›Access: request a copy of the personal information we hold about you
• ›Correction: ask us to update or correct inaccurate or incomplete information
• ›Deletion: request deletion of your personal information, subject to legal retention requirements and legitimate business needs
• ›Portability: export your account data in a machine-readable format directly from your dashboard
• ›CPNI restriction: opt out of non-service uses of your CPNI by contacting privacy@konci.ai
• ›Marketing opt-out: unsubscribe from marketing emails at any time using the unsubscribe link in any email or by contacting us
• ›To submit any privacy rights request, email privacy@konci.ai. We will verify your identity before processing requests and respond within forty-five (45) days of receipt

11. California Privacy Rights (CCPA/CPRA)

California residents have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA). You have the right to know what personal information we collect about you and how we use and share it. You have the right to request deletion of your personal information, subject to exceptions. You have the right to correct inaccurate personal information. You have the right to opt out of the "sale" or "sharing" of personal information for cross-context behavioral advertising — Konci does not sell or share personal information in this manner. You have the right to limit use of sensitive personal information — we use sensitive personal information only as necessary to provide the Services. You have the right to non-discrimination — we will not deny you services, charge you different prices, or provide a different quality of service because you exercised your privacy rights. To submit a CCPA/CPRA request, contact privacy@konci.ai. You may designate an authorized agent to make requests on your behalf with written authorization.

12. Other U.S. State Privacy Laws

Residents of Virginia (CDPA), Colorado (CPA), Connecticut (CTDPA), Texas (TDPSA), and other states with comprehensive consumer data privacy laws have similar rights to access, correct, delete, and port their personal information, and to opt out of certain uses of their data. Konci does not sell personal data or engage in targeted advertising as defined under these laws. To exercise rights under applicable state privacy law, contact privacy@konci.ai. We will respond to verified requests within the timeframes required by applicable law.

13. Non-U.S. Users and International Transfers

Konci's services are operated from the United States and are currently intended for customers located in the United States. If you access the Services from outside the United States, your personal information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country. By using the Services, you acknowledge that your information may be transferred to and processed in the United States. We do not currently offer the Services to residents of the European Economic Area, United Kingdom, or Switzerland.

14. Children's Privacy

The Services are not directed to individuals under the age of sixteen (16). Konci does not knowingly collect personal information from children under 16. If you are a parent or guardian and believe we have inadvertently collected personal information from a child under 16, please contact us immediately at privacy@konci.ai and we will promptly investigate and delete the information.

15. How We Respond to Do Not Track Signals

Some browsers offer a "Do Not Track" feature that signals to websites that you do not want your online activities tracked across sites. Konci does not alter its data collection or use practices in response to Do Not Track signals because we do not engage in cross-site behavioral tracking or targeted advertising. Our analytics practices are described in the Tracking Technologies section above.

16. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. If we make material changes, we will notify you by email or through a notice on our platform at least thirty (30) days before the changes take effect. The "Last updated" date at the top of this Policy indicates the most recent revision. Your continued use of the Services after changes take effect constitutes your acceptance of the updated Policy. If you do not agree to the updated Policy, you may cancel your account before the changes take effect.

17. Contact Us

For privacy-related questions, to exercise your rights, or to reach our Privacy Team, contact us at: privacy@konci.ai. Written correspondence may be sent to: Konci LLC, Attn: Privacy Team, 7975 N Hayden Rd Suite A210, Scottsdale, AZ 85258.