Privacy Policy

1. Who we are

Aurelium is operated by (not yet configured), a company registered in (not yet configured) under number (not yet configured), with its registered address at (not yet configured). We are the data controller for account data. Where we process data on behalf of business customers (for example call recordings of their callers), we act as a data processor and the customer is the controller.

Contact: (not yet configured). Data Protection Officer (if appointed): (not yet configured).

2. Legal framework

We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and the Irish Data Protection Act 2018.

3. Data we process

• Account data: name, email address, sign-in details, organisation details.
• Call data: phone numbers, call times and durations, call recordings and call transcripts made by the AI assistant on inbound and outbound calls.
• Messages and instructions you send to the assistant, notes, meetings and documents.
• Usage and technical data: device, browser, logs and diagnostic information.
• Billing data: (not yet configured).

4. AI processing

The service uses artificial intelligence to answer and place calls, transcribe audio, summarise conversations, draft replies and suggest actions. Content you provide and call audio/transcripts may be sent to AI providers listed below for this purpose. AI output can be inaccurate and is subject to your review and approval. We do not use AI to make decisions producing legal or similarly significant effects about individuals without human involvement. (not yet configured)

Callers are informed at the start of a call that it may be handled by an AI assistant and recorded. (not yet configured)

5. Purposes and lawful bases

• Providing the service — performance of a contract (Art. 6(1)(b)).
• Call recording and transcription — (not yet configured).
• Security, fraud prevention and service improvement — legitimate interests (Art. 6(1)(f)).
• Legal and tax obligations — legal obligation (Art. 6(1)(c)).
• Marketing emails — consent, which you can withdraw at any time.

6. Sub-processors

We use the following categories of sub-processors. (not yet configured)

• Telephony: (not yet configured).
• AI providers (voice, speech-to-text, language models): (not yet configured).
• Hosting, database and storage: (not yet configured).
• Email / messaging delivery: (not yet configured).
• Payments: (not yet configured).

7. International transfers

Where data is transferred outside the European Economic Area, we rely on an adequacy decision or the European Commission's Standard Contractual Clauses with supplementary measures. (not yet configured)

8. Retention

• Call recordings: (not yet configured).
• Call transcripts and summaries: (not yet configured).
• Account data: for the life of the account plus (not yet configured).
• Audit and security logs: (not yet configured).
• Billing records: (not yet configured).

9. Your rights

You have the right to access, rectify, erase, restrict or object to processing of your personal data, the right to data portability, and the right to withdraw consent at any time. You also have the right not to be subject to solely automated decisions with significant effects. To exercise these rights, contact (not yet configured). We will respond within one month.

10. Complaints

You can lodge a complaint with the Data Protection Commission, 21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland — dataprotection.ie. We would appreciate the chance to address your concerns first.

11. Security

We use encryption in transit, access controls and audit logging. (not yet configured)

12. Changes

We will notify you of material changes to this policy by (not yet configured).