Privacy Policy

How we collect, use, and protect your information

Last Updated: January 26, 2025

Introduction

Welcome to Dimora AI. This Privacy Policy explains how Dimora AI, Inc. ("Dimora AI," "we," "us," or "our") collects, uses, discloses, and protects personal information when you interact with our voice AI assistant services.

B2B2C Service Model

Dimora AI acts as a service provider on behalf of our business clients (property management companies). When you call a property using our services, both Dimora AI and the property owner/manager may have responsibilities regarding your personal information.

Information We Collect

A. From Website Visitors

  • Contact Information: Name and email address when you submit contact forms
  • Analytics: Currently we do not use cookies or analytics tools

B. From Service Clients

  • Business Information: Company name, property details, team member contact information
  • Call Data: Audio recordings, transcripts, and metadata from guest phone conversations
  • Guest Information: Phone numbers, names, reservation details, and inquiry content

Call Recordings & Transcripts

Recording Notice

Your calls with our AI assistants are recorded.

At the beginning of each call, you will hear an automated message notifying you that the call is being recorded. This disclosure complies with federal and state call recording laws.

Retention Period

Call recordings and transcripts are retained for 30-90 days from the date of the call.

After this period, recordings are automatically deleted from our systems unless we are legally required to retain them longer.

How We Use Information

  • Service Delivery: Provide our AI receptionist service and handle guest inquiries
  • AI Improvement: Improve AI performance, accuracy, and conversational quality
  • Security: Detect and prevent fraudulent activity and unauthorized access

Data Sharing & Third-Party Sub-Processors

We work with third-party service providers (sub-processors) to deliver our service. These providers have access only to the information necessary to perform their functions.

Cloud-Based Voice AI Platforms

Process phone calls and voice recognition. SOC 2 certified, GDPR compliant, US-based with end-to-end encryption.

Enterprise Workflow Automation Services

Route notifications and integrate with client systems. ISO 27001 certified with secure API connections.

Secure Cloud Database Providers

Store data with AES-256 encryption at rest and TLS 1.3 in transit. SOC 2 Type II certified, US-based.

Cloud Infrastructure Providers

Secure hosting with physical security, redundancy, and disaster recovery. SOC 2, ISO 27001, GDPR certified.

Email Service Providers

Send notifications and communications. GDPR compliant with enterprise-grade security.

Property Management System Integrations

Sync reservation data via secure APIs following industry security standards.

Sub-Processor Details

Detailed information about specific sub-processors, including vendor names, locations, and certifications, is provided in our Data Processing Addendum during client onboarding.

For inquiries: legal@dimora.ai

Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this Privacy Policy:

Data TypeRetention PeriodReason
Call Recordings & Transcripts30-90 daysQuality assurance, service improvement
Contact InformationDuration of service + 3 yearsCustomer support, legal compliance
Reservation DetailsDuration + 7 yearsAccounting, dispute resolution
Technical Logs12 monthsSecurity monitoring, troubleshooting

Data Security

We implement multiple layers of security to protect your information:

Encryption in Transit

HTTPS and TLS 1.3 for all data transmission

Encryption at Rest

AES-256 encryption for all stored data

Access Control

Multi-factor authentication and role-based permissions

24/7 Monitoring

Continuous security monitoring and threat detection

California Privacy Rights (CCPA/CPRA)

California residents have specific rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

Right to Know

Request information about categories and specific data we've collected about you

Right to Delete

Request deletion of your personal information (subject to legal exceptions)

Right to Correct

Request correction of inaccurate personal information

Right to Opt-Out of Sale/Sharing

We do not sell or share your personal data

We Do Not Sell or Share Your Personal Information

Dimora AI does not sell or share personal information for monetary or other valuable consideration.

Global Privacy Control (GPC): We recognize and honor Global Privacy Control (GPC) signals sent by your browser.

Consumer Rights Verification Procedures

To protect your privacy and security, we must verify your identity before processing privacy requests. The verification method depends on the type of request.

Important

We will NOT require you to create an account, provide your Social Security number, driver's license, or other government-issued ID solely to verify your identity. We will use the least intrusive verification method possible.

Cookies & Tracking

Current Status

We currently do not use cookies or analytics tracking on our website.

Children's Privacy

Our Service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13.

If we become aware that we have collected personal information from a child under 13, we will delete that information within 5 business days.

International Users

Our Service is primarily designed for clients based in the United States. If you are accessing our Service from outside the United States:

  • Your information will be transferred to and stored in the United States
  • For EU users, we use Standard Contractual Clauses (SCCs) for data transfers

Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes:

  • We will update the "Last Updated" date at the top of this policy
  • We will notify you via email if you are a registered user
  • Continued use of the Service after changes constitutes acceptance

Contact Information

If you have questions or requests regarding this Privacy Policy:

Privacy Inquiries

privacy@dimora.ai

General Inquiries

hello@dimora.ai