Privacy Policy

Introduction

‍
Welcome to Orova AI, Inc. (“Orova AI,” “we,” “us,” or “our”). We provide a subscription-based SaaS platform that powers AI voice agents for appointment reminders, customer surveys, inbound support routing, and related business communications (the “Service”). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our Service or visit https://orova.ai (“Site”).

By using our Service or Site, you agree to the collection and use of information as described in this Privacy Policy.

2. Information We Collect

2.1 Personal Data You Provide

• Contact information: name, business email address, business phone number
• Account credentials: username, password, API keys
• Company details: organization name, industry, role

2.2 Call Data & Consent Flags

• Call recordings & transcripts: when you—or your authorized representatives—use our dialer;
• Call metadata: timestamp, duration, dialed number, disposition codes;
• Opt-in/opt-out flags: records of customer consent, Do-Not-Call (DNC) requests, and unsubscribe events.

2.3 Usage & Technical Data

• Log data: IP address, browser type/version, operating system, pages visited, time/date stamps;
• Analytics: feature usage, system performance metrics.

3. How We Use Your Information
We use your data to:

1. Provide, maintain, and improve the Service.
2. Authenticate and authorize your access.
3. Place and record calls only to contacts who have explicitly opted in.
4. Enforce automatic DNC and unsubscribe requests.
5. Analyze usage to enhance features and security.
6. Comply with legal obligations (e.g., TCPA, A2P registration).
7. Communicate about updates, billing, and support.

4. Telemarketing & Call Compliance

• No Cold-Calling by Orova AI: We do not purchase call lists or engage in unsolicited telemarketing.
• Opt-In Requirement: Calls are made exclusively to contacts whose consent you (our customer) have collected.
• Do-Not-Call Management: We automatically honor DNC and opt-out requests at the platform level.
• TCPA & A2P Registration: Our platform is TCPA-compliant, and we maintain active A2P registration with major carriers.

5. Sharing & Disclosure
We do not sell your personal data. We may share information with:

• Your authorized users and sub-accounts;
• Service providers: payment processors (e.g., Stripe), cloud hosts (e.g., AWS), telephony providers (e.g., Twilio);
• Legal & regulatory bodies: to comply with laws or protect our rights.

6. Data Retention

• Account & usage data: retained for as long as your account is active plus 2 years thereafter for compliance.
• Call recordings & transcripts: retained per your subscription plan or as required by law; customers can configure retention policies in their dashboard.
• Deletion requests: you may request deletion of your personal data or recordings via privacy@orova.ai, subject to legal obligations.

7. Security
We implement administrative, technical, and physical safeguards, including:

• Encryption in transit (TLS) and at rest;
• Role-based access controls and audit logs;
• Regular security assessments and third-party penetration tests.

8. International Transfers
Orova AI is headquartered in the United States (Delaware & California). By using our Service, you consent to transfer, storage, and processing of your data in the U.S., which may have different data protection laws than your jurisdiction.

9. Your Rights
Depending on your location, you may have rights to:

• Access, correct, delete, or restrict our use of your personal data;
• Withdraw consent for certain processing activities;
• Lodge a complaint with a supervisory authority.

To exercise these rights, contact us at privacy@orova.ai.

10. Third-Party Providers
We use the following key vendors:

• Stripe (payments)
• AWS (hosting)
• Twilio & Telnyx (telephony/A2P)
• Google Analytics (for analytics)
• Open AI (LLM API)

Each vendor is bound by contractual obligations to protect your data.

11. Children’s Privacy
Our Service is intended for business users and their opted-in contacts; we do not knowingly collect personal data from children under 16.

12. Changes to This Policy
We may update this Privacy Policy to reflect changes in our practices or legal requirements. We’ll post the revised date at the top and notify you via email or Site banner for material changes.

13. Contact Us
If you have questions or requests regarding this Privacy Policy, please contact:

Orova AI, Inc.
2261 Market Street STE 85129
San Francisco, CA 94114 USA
privacy@orova.ai

‍