Privacy Policy

Data we process about you

Account data: your email address, password (stored as a secure hash by our authentication provider) and language preference.

Agent configuration: your agent's name, how it should address you, its opening question, your custom instructions and the WhatsApp number where summaries are delivered.

Billing data: payments are handled by Stripe. We store only your Stripe customer and subscription identifiers and your subscription status — never your card details.

Usage data: answered minutes and call metadata (timestamps, durations, costs) needed to operate your plan.

Data we process about your callers

When Iris answers a call on your behalf, we process the caller's phone number, their name if they give one, the request they describe and a transcript of the conversation. This is done to deliver the call summary to you.

For caller data, you — our customer — are the data controller and we act as your processor. A data processing agreement is available on request at ai@pt-solutions.tech.

How long we keep data

Caller personal data (number, name, request, transcript) is deleted automatically 3 months after each call. Anonymous call metrics (duration, timestamps, cost) are kept for statistics.

Account and configuration data is kept for as long as you have an account. Billing records are kept as long as tax law requires.

Service providers

We use a small number of providers to run Iris: Supabase (database and authentication, hosted in the EU), Stripe (payments), Twilio (telephony and WhatsApp), Vapi (voice AI), Resend (email), Vercel (web hosting) and n8n (workflow automation).

Some providers may process data outside the EEA; where they do, transfers are covered by the European Commission's Standard Contractual Clauses or an adequacy decision.

Legal bases

We process your data to perform our contract with you (providing the service), for our legitimate interests (service communication, security, fraud prevention) and to comply with legal obligations (accounting and tax).

Your rights

You can request access to, correction of, or deletion of your personal data, restriction of or objection to its processing, and a portable copy. Write to ai@pt-solutions.tech.

You can also lodge a complaint with your supervisory authority — for example the ÚOOÚ in the Czech Republic or the CNPD in Portugal.

Cookies and analytics

We use only cookies necessary to run the service: your sign-in session and your language preference. We use no advertising or cross-site tracking cookies; our usage analytics are cookieless and aggregated.

Changes

We may update this policy as the service evolves. We will announce material changes in the app or by email. Questions? ai@pt-solutions.tech.