Privacy Policy

1. Introduction

Bunta AI, a service of Thinkit Labs LLC ("we", "our", or "us"), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our voice AI agent platform and related services (the "Service").

Our Service enables small business owners to deploy AI voice agents that handle inbound customer calls, scheduling, and inquiries. We take the privacy and security of voice data seriously.

2. Information We Collect

2.1 Business Information

When you register for Bunta AI, we collect:

• Business name, address, and contact information
• Google Business Profile data (category, hours, location)
• Service offerings, pricing, and business policies
• Team member information (names, phone numbers, roles)
• Business documentation and website content you provide

2.2 Call and Conversation Data

When calls are handled by our AI voice agents, audio is processed in real time by speech recognition and language models to extract textual data. We do not store audio recordings. Voice audio is ephemeral and is discarded immediately after processing. The following derived data is collected and stored:

• Call transcripts and conversation metadata
• Caller phone numbers, call duration, and timing information
• AI-generated summaries, intent classifications, and sentiment analysis
• Booking requests and appointment details
• Caller profiles derived from call interactions

2.3 Technical Data

• Device information, browser type, and IP address
• Usage patterns and feature interactions
• Performance metrics and error logs

3. How We Use Your Information

We use collected information to:

• Provide, maintain, and improve the AI voice agent service
• Generate call transcripts, summaries, insights, and analytics for your business
• Build and maintain caller profiles and contact records within your account
• Route calls and urgent requests appropriately
• Enable appointment booking, reminders, and customer follow-ups
• Provide customer support and resolve technical issues
• Comply with legal obligations and prevent fraud

We may use anonymized, de-identified data derived from call transcripts and platform usage to improve our products, features, and AI models. Any such use will have all personally identifiable information removed prior to processing.

4. Data Retention and Deletion

Audio data is processed in real time and is not stored. Voice audio is ephemeral and is discarded immediately after speech recognition and language model processing.

The following derived and structured data is retained:

• Call transcripts and metadata: Retained for the duration of your active account
• Caller profiles and contact records: Retained for the duration of your active account
• Business configuration data: Agent settings, services, team members, and knowledge base content
• Anonymized analytics: De-identified, aggregate data may be retained for product improvement

4.1 Self-Service Data Deletion

You may delete your business and all associated data at any time from your dashboard settings. Deleting your business permanently removes all business configuration, agent settings, call transcripts, caller profiles, contacts, appointments, and phone number associations.

You may also delete your user account from your dashboard settings, which permanently removes your authentication credentials and personal profile information. For assistance with data deletion, you may also contact us at info@bunta.ai.

5. Information Sharing

We do not sell your data. We may share information with:

• Service Providers: Cloud infrastructure providers, telephony providers, and AI model and speech processing providers that help us deliver and improve the Service
• Your Team: Call data is accessible to authorized users in your organization
• Legal Requirements: When required by law, court order, or to protect rights and safety

6. SMS and Messaging Communications

Our Service may send SMS messages on behalf of subscribing businesses. This section describes how we handle messaging consent, data, and opt-out.

6.1 Consent and Opt-In

Consent to receive SMS messages is obtained verbally during AI agent calls. Our voice agents ask for permission in natural conversation before sending any text messages (for example, "Want me to send you a text with the details?"). This verbal consent constitutes express consent under A2P 10DLC guidelines.

6.2 Message Types and Frequency

Messages sent through the platform include appointment reminders, booking confirmations, service updates, and customer care messages on behalf of the subscribing business. Message frequency varies based on your service interactions. Bunta AI does not send marketing blasts or promotional messaging campaigns.

6.3 Opt-Out

You can text STOP at any time to immediately opt out of SMS communications. Text HELP for assistance information. Opt-out requests are processed immediately. Standard message and data rates may apply.

6.4 Campaign Structure and Data Handling

Messages are sent through Bunta AI's registered A2P 10DLC campaign on behalf of subscribing businesses. Each business's phone number is assigned to this campaign. Phone numbers collected for SMS purposes are stored securely and used only for the messaging purposes described above. See Section 4 (Data Retention and Deletion) for data retention policies.

7. Healthcare Businesses & HIPAA

Our standard Service is not HIPAA-compliant. If you operate a healthcare, dental, veterinary, or other medical business:

• Do not configure the AI agent to collect or process Protected Health Information (PHI)
• You are solely responsible for ensuring your use of the Service complies with HIPAA and applicable healthcare regulations
• HIPAA-compliant deployments may be available in the future. Contact info@bunta.ai for inquiries

8. Security

We implement industry-standard security measures including:

• Encryption in transit (TLS 1.3) and at rest (AES-256)
• Role-based access controls and authentication
• Regular security audits and penetration testing
• Secure data centers with SOC 2 Type II compliance

9. Your Rights

You have the right to:

• Access your data through your dashboard
• Correct inaccurate information in your account settings
• Delete your business and all associated data from your dashboard settings
• Delete your user account from your dashboard settings
• Export call transcripts and business data

For additional data requests or assistance, contact us at info@bunta.ai.

10. International Users

Our Service is operated in the United States. If you are accessing from outside the US, your data will be transferred to and processed in the US, which may have different data protection laws than your jurisdiction.

11. Children's Privacy

Our Service is not intended for users under 18. We do not knowingly collect information from children. If you believe we have collected data from a child, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes by email or through the Service. Continued use after changes constitutes acceptance of the updated policy.

13. Contact Us

For privacy-related questions or requests, contact us at: