Privacy Policy

Who we are

AiFortis VoiceAI Portal is operated by [AiFortis LTD] (EIK [EIK / company number]), [registered address, Bulgaria] ("we", "us"). Contact: [contact@aifortis.example]. Data Protection contact: [dpo@aifortis.example].

Our role

For data about our business clients (account holders), we are the data controller. For personal data that a client uploads and processes through the platform to run voice campaigns (e.g. their customers' phone numbers and names), the client is the controller and we act as a processor on their behalf under a Data Processing Agreement.

What we process

• Account data: name, email, role, authentication and security logs.
• Client-provided contact data: phone numbers, names and custom variables used to place or receive calls.
• Call data: timestamps, duration, outcome, recordings, transcripts and analysis produced by our voice provider.
• Technical data: IP address, device/browser info and cookies needed to run the portal.

Why we process it (legal bases)

• To provide the service and perform our contract with you.
• To comply with legal obligations (accounting, security).
• For our legitimate interests in securing and improving the platform.
• Call recording relies on the consent/notice captured in the call flow.

Sharing

We use sub-processors to deliver the service (see the Sub-processors page). We do not sell personal data.

International transfers

Where data is processed outside the EEA, we rely on appropriate safeguards such as the EU Standard Contractual Clauses.

Retention

We retain call data for the configured retention period (default 365 days) and delete or anonymise it afterwards, unless a longer period is legally required.

Your rights

You may request access, rectification, erasure, restriction, portability and objection. End customers should contact the client (controller) who placed the call; we will assist that client. Contact [dpo@aifortis.example].

Complaints

You may lodge a complaint with the Bulgarian Commission for Personal Data Protection (CPDP) or your local supervisory authority.