Privacy Policy

abridai (“abridai,” “we,” “us”) provides an AI-powered reputation platform that helps businesses collect customer feedback, reviews, and video testimonials, and turn approved reviews into social content. This Policy explains what personal information we handle, why, and the choices available — for two audiences:

• Customers — the agencies and businesses that create an abridai account.
• Consumers — our Customers' own customers, whom the abridai agent contacts on the Customer's behalf (by phone call, SMS, or email) after a visit.

For Consumer data, we act as a service provider / processor: the business you visited decides what data to share with us and why; we process it only on that business's documented instructions and never for our own advertising or profiling purposes.

1. Information we collect

• From Customers: account details (name, work email, password or Google sign-in), business/branding details (logo, colors, links), reward and agent configuration, and billing details when paid plans launch.
• About Consumers, provided by the Customer: name and a phone number and/or email address, plus basic visit context (e.g. service and date). We never scrape, buy, rent, or sell contact lists.
• Generated during outreach: call recordings and transcripts of conversations with the AI agent, SMS/email delivery status, review text a Consumer chooses to write, and — only when a Consumer opts in — video testimonials they record.
• Automatically: standard technical logs (IP address, browser type, timestamps) used for security and debugging.

2. How we use information

• To run the follow-up the business asked for: contact the Consumer, ask about their experience, and route the outcome (a review link for a happy customer; a private alert to the business owner otherwise).
• To create the deliverables: transcripts, edited testimonial clips, on-brand social posts, and reputation reports for the business.
• To operate, secure, and improve the reliability of the platform.
• To meet legal obligations and enforce our Terms.

What we do NOT do:we do not sell or “share” personal information for cross-context behavioral advertising (as those terms are defined by the CCPA/CPRA); we do not use Consumer data to train AI models; and voice recordings are never used for voice cloning or biometric identification.

3. Calls, texts, and consent

• Outreach happens only to contacts the business provides from its own customer relationship, and our Terms require the business to have obtained the consent US law requires (including prior express written consent under the TCPA for calls and texts made with an artificial or prerecorded voice or an autodialer).
• The AI agent identifies itself as a virtual assistant calling on behalf of the named business, and discloses that the call may be recorded at the start of every call.
• Every SMS and email includes a working opt-out (reply STOP / unsubscribe link). Opt-outs are honored immediately and permanently for that business.
• Calls are placed only during permitted hours (8am–9pm in the Consumer's local time zone).

4. Video testimonials & incentives

• Video testimonials are always opt-in: the Consumer schedules and records knowingly, on camera, after granting device permissions.
• Where a business offers a reward for recording a testimonial, the reward is for giving honest feedback — it is never conditioned on saying something positive, and businesses are required to disclose the incentive when the testimonial is published (per the FTC's Endorsement Guides).
• Recordings and clips belong to the business the Consumer visited; abridai processes them only to edit and deliver.

5. Sharing & subprocessors

We share personal information only with:

• The business you visited — the Consumer's feedback, recordings, transcripts, and testimonial content are delivered to that business (it is their customer relationship).
• Subprocessors that host or power the service under contract: Google Cloud / Firebase (hosting, database, storage), Vercel (web hosting), ElevenLabs (real-time voice AI), telephony/SMS and email delivery providers, and — when a business connects them — the social platforms it publishes to (e.g. Meta). Each processes data only to provide their service to us.
• Authorities when required by law, and successors in a merger or acquisition (with notice).

6. Retention & deletion

• Consumer contact data is deleted when the campaign it was uploaded for ends, or earlier on the business's request.
• A Consumer can opt out with one reply at any time; verified deletion requests are honored within 30 days.
• Customers can delete their workspace data at any time from the dashboard or by written request; backups purge on a rolling schedule thereafter.

7. Your privacy rights (US state laws)

Depending on your state (including California, Colorado, Connecticut, Texas, Virginia, and others with comprehensive privacy laws), you may have the right to know/access, correct, delete, and port your personal information, to opt out of sale, sharing, targeted advertising, and certain profiling (we do none of these), and to not be discriminated against for exercising your rights.

• To exercise rights, email privacy@abridai.com. We verify requests and respond within the legally required window (45 days in most states, extendable once).
• If we hold your data as a service provider for a business, we may route your request to that business and assist them in fulfilling it.
• You may use an authorized agent, and where state law provides it (e.g. Virginia, Colorado), you may appeal a refusal by replying to our decision.
• We honor the Global Privacy Control (GPC) signal where applicable.

California notice: in the last 12 months we collected the categories described in Section 1 (identifiers, commercial information, audio/visual information, internet activity, and professional information) for the purposes in Section 2. We do not sell or share personal information, and we do not use or disclose sensitive personal information for purposes requiring a right to limit.

8. Children

The service is for businesses and their adult customers. It is not directed to children under 16, and we do not knowingly collect their data; if you believe a child's data reached us, contact us and we will delete it.

9. Security

Data is encrypted in transit (TLS 1.2+) and at rest on Google Cloud infrastructure, with each business's data isolated in its own workspace. See our Security page for details.

10. Changes & contact

We will post any changes here and update the date above; material changes get direct notice to Customers. Contact: privacy@abridai.com. A data-processing agreement (DPA) is available to any Customer on request.