Privacy Policy

Introduction

Concya Labs Inc. ("Concya," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our voice AI services, including our Reserve restaurant reservation platform and Atlas enterprise voice solutions.

By using our services, you agree to the collection and use of information in accordance with this policy.

Information We Collect

Voice Data

When you interact with our voice AI systems via phone or web interface, we collect and process:

• Audio recordings of your voice
• Transcriptions of your spoken words
• Voice characteristics and patterns for quality improvement
• Call metadata (duration, timestamp, phone number)

Reservation Information

When you make a reservation through our platform, we collect:

• Your name and phone number
• Email address (if provided)
• Party size and dining preferences
• Special requests or dietary restrictions
• Reservation history and visit patterns

Technical Information

We automatically collect certain technical information:

• IP address and device information
• Browser type and version
• Usage data and interaction patterns
• System performance metrics (latency, error rates)

How We Use Your Information

We use the collected information to:

• Process and confirm your restaurant reservations
• Send confirmation messages via SMS and email
• Improve our voice AI accuracy and response quality
• Analyze usage patterns to enhance user experience
• Provide customer support and respond to inquiries
• Detect and prevent fraudulent activity
• Comply with legal obligations and enforce our terms

SMS/Text Messaging and Notifications

We may send you transactional SMS/text messages for essential service-related purposes, such as:

• Reservation confirmations and updates (for example, booking details, changes, or reminders for your restaurant reservation via RSRVE)
• Account setup confirmations (for example, handle claim or voice AI line activation)
• Delivery or status alerts related to your interactions with our platform
• One-time verification codes or security notifications

These messages are sent only to users who have provided their phone number in connection with using our services and have consented to receive such communications (for example, via an explicit checkbox or similar opt-in during signup, reservation, or account setup).

Message and data rates may apply. Message frequency varies based on your activity, such as one-time confirmations or occasional updates.

You can opt out of receiving SMS messages at any time by replying STOP to any message we send, or by contacting us at privacy@concya.com. We will process your opt-out request promptly. Note that opting out may limit your ability to receive important service updates, such as reservation changes or security alerts.

We do not send promotional or marketing SMS messages unless you have separately and explicitly opted in to receive them.

Data Sharing and Disclosure

We may share your information with:

Restaurant Partners

When you make a reservation, we share your name, phone number, party size, and reservation details with the specific restaurant you've booked.

Service Providers

We work with third-party service providers who assist us in:

• Cloud infrastructure and data storage (AWS, Supabase)
• Voice transcription services (Deepgram)
• Voice synthesis (Cartesia)
• SMS delivery (Twilio)
• Email delivery (Resend)
• Analytics and performance monitoring

Legal Requirements

We may disclose your information if required by law, court order, or to protect our rights, property, or safety, or that of our users or the public.

Data Retention

We retain your information for as long as necessary to fulfill the purposes outlined in this policy:

• Voice recordings: Stored for 90 days for quality assurance, then deleted
• Transcripts: Retained for up to 1 year for service improvement
• Reservation data: Kept for the duration of your relationship with us and our restaurant partners
• Account information: Retained until you request deletion

Data Security

We implement industry-standard security measures to protect your data:

• End-to-end encryption for voice data transmission
• Secure cloud infrastructure with restricted access
• Regular security audits and vulnerability assessments
• Employee training on data protection best practices

However, no method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

Your Privacy Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your data
• Portability: Request transfer of your data to another service
• Opt-out: Opt out of marketing communications or SMS notifications (reply STOP to any SMS we send, or email privacy@concya.com to manage your preferences)
• Restriction: Request restriction of data processing

To exercise these rights, please contact us at privacy@concya.com

Children's Privacy

Our services are not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. By using our services, you consent to the transfer of your information to the United States and other countries where we operate.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us: