Privacy Policy

1. Introduction

Bunta AI, a service of Thinkit Labs LLC ("we", "our", or "us"), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our voice AI agent platform and related services (the "Service").

Our Service enables small business owners to deploy AI voice agents that handle inbound customer calls, scheduling, and inquiries. We take the privacy and security of voice data seriously.

2. Information We Collect

2.1 Business Information

When you register for Bunta AI, we collect:

• Business name, address, and contact information
• Google Business Profile data (category, hours, location)
• Service offerings, pricing, and business policies
• Team member information (names, phone numbers, roles)
• Business documentation and website content you provide

2.2 Call and Conversation Data

When calls are handled by our AI voice agents, the call audio is processed in real time by speech recognition and language models to extract textual data. Calls handled by our AI voice agents are recorded, and the audio recording is stored on your behalf. At the start of each call, the AI voice agent announces to the caller that the call is recorded. The following data is collected and stored:

• Call audio recordings
• Call transcripts and conversation metadata
• Caller phone numbers, call duration, and timing information
• AI-generated summaries, intent classifications, and sentiment analysis
• Booking requests and appointment details
• Caller profiles derived from call interactions

2.3 Technical Data

• Device information, browser type, and IP address
• Usage patterns and feature interactions
• Performance metrics and error logs

3. How We Use Your Information

We use collected information to:

• Provide, maintain, and improve the AI voice agent service
• Generate call transcripts, summaries, insights, and analytics for your business
• Build and maintain caller profiles and contact records within your account
• Route calls and urgent requests appropriately
• Enable appointment booking, reminders, and customer follow-ups
• Provide customer support and resolve technical issues
• Comply with legal obligations and prevent fraud

We may use anonymized, de-identified data derived from call transcripts and platform usage to improve our products, features, and AI models. Any such use will have all personally identifiable information removed prior to processing.

4. Data Retention and Deletion

The following data is retained:

• Call audio recordings: Retained for the duration of your active account and deletable at any time from your dashboard
• Call transcripts and metadata: Retained for the duration of your active account
• Caller profiles and contact records: Retained for the duration of your active account
• Business configuration data: Agent settings, services, team members, and knowledge base content
• Anonymized analytics: De-identified, aggregate data may be retained for product improvement

4.1 Self-Service Data Deletion

You may delete your business and all associated data at any time from your dashboard settings. Deleting your business permanently removes all business configuration, agent settings, call recordings, call transcripts, caller profiles, contacts, appointments, and phone number associations. SMS consent records — including the consent excerpt of a call transcript, its timestamp, and the recipient phone number — are excluded from deletion and retained as described in Section 6.1.

You may also delete your user account from your dashboard settings, which permanently removes your authentication credentials and personal profile information. For assistance with data deletion, you may also contact us at support@bunta.ai.

5. Information Sharing

We do not sell your data. We may share information with:

• Service Providers: Cloud infrastructure providers, telephony providers, and AI model and speech processing providers that help us deliver and improve the Service
• Your Team: Call data is accessible to authorized users in your organization
• Legal Requirements: When required by law, court order, or to protect rights and safety

6. SMS and Messaging Communications

Our Service may send SMS messages on behalf of subscribing businesses. This section describes how we handle messaging consent, data, and opt-out.

6.1 Consent and Opt-In

Consent to receive SMS messages is obtained verbally during AI agent calls. Our voice agents ask for permission in natural conversation before sending any text messages, using a disclosure that identifies the program, message types, frequency, cost, and opt-out mechanics. For example: "Great — [Business Name] can text you at this number with your appointment confirmation, a reminder about 30 minutes before, and any updates about your appointment or service. Message frequency varies, and message and data rates may apply. You can reply STOP anytime to opt out, or HELP for help. Is that alright?" This verbal consent constitutes express consent under A2P 10DLC guidelines. Each consent event is captured in the call transcript with timestamp and recipient phone number, retained for at least four (4) years, including after account closure, for compliance audit purposes.

6.2 Message Types and Frequency

Messages sent through the platform include appointment reminders, booking confirmations, service updates, and customer care messages on behalf of the subscribing business. Message frequency varies based on your service interactions. Bunta AI does not send marketing blasts or promotional messaging campaigns.

6.3 Opt-Out

You can text STOP, STOPALL, UNSUBSCRIBE, END, QUIT, CANCEL, REVOKE, or OPTOUT at any time to immediately opt out of SMS communications. Text HELP for assistance information. Opt-out requests are processed immediately. Standard message and data rates may apply.

6.4 Campaign Structure and Data Handling

Each subscribing business is registered with The Campaign Registry (TCR) as its own brand, with a dedicated A2P 10DLC campaign and a dedicated phone number. Bunta AI acts as the messaging service provider that facilitates this registration and message delivery on the business's behalf. Messages are sent from the business's own dedicated number to its own customers and identify the business by name; Bunta AI's program identification appears in opt-in confirmations, STOP responses, and HELP responses. These campaigns are used exclusively for transactional Customer Care, Account Notification, and Delivery Notification messaging; Bunta AI does not send marketing or promotional traffic through them.

No sharing of mobile information. We do not sell, rent, or share mobile opt-in information — including phone numbers and consent records — with third parties or affiliates for marketing or promotional purposes. Phone numbers collected for SMS purposes are stored securely and used only for the messaging purposes described above. See Section 4 (Data Retention and Deletion) for retention policies.

7. Healthcare Businesses & HIPAA

Our standard Service is not HIPAA-compliant. If you operate a healthcare, dental, veterinary, or other medical business:

• Do not configure the AI agent to collect or process Protected Health Information (PHI)
• You are solely responsible for ensuring your use of the Service complies with HIPAA and applicable healthcare regulations
• HIPAA-compliant deployments may be available in the future. Contact support@bunta.ai for inquiries

8. Security

We implement industry-standard security measures including:

• Encryption in transit (TLS 1.3) and at rest (AES-256)
• Role-based access controls and authentication
• Regular security audits and penetration testing
• Secure data centers with SOC 2 Type II compliance

9. Your Rights

You have the right to:

• Access your data through your dashboard
• Correct inaccurate information in your account settings
• Delete your business and all associated data from your dashboard settings
• Delete your user account from your dashboard settings
• Export call transcripts and business data

For additional data requests or assistance, contact us at support@bunta.ai.

10. International Users

Our Service is operated in the United States. If you are accessing from outside the US, your data will be transferred to and processed in the US, which may have different data protection laws than your jurisdiction.

11. Children's Privacy

Our Service is not intended for users under 18. We do not knowingly collect information from children. If you believe we have collected data from a child, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes by email or through the Service. Continued use after changes constitutes acceptance of the updated policy.

13. Contact Us

For privacy-related questions or requests, contact us at: