PIPEDA
Privacy Policy
Effective 15 August 2026 · Amaria Assistant Systems, Edmonton, Alberta
Amaria answers a Canadian one-person business’s phone while the owner is with a client, then relays the job in writing. This page says what personal information we handle, why, who else sees it, and how to have it deleted.
Who is responsible
For the owner’s own account (email, password, business number), Amaria is the organization that collects it. For callers to that business — their number, words, and recording — the owner is usually the organization responsible; we process that information on their behalf.
What we collect
- Account: business name, email, business number, timezone, voice settings.
- Calls and texts: phone numbers, timestamps, transcripts, audio recordings when the line is set to record, and the raw message we relay to the owner.
- Calendar data, only if the owner connects Google, Outlook, or Calendly.
- Payment: handled by Stripe. We do not store card numbers.
Why, and the transfer outside Canada
We use this information to answer the line, relay the job, show the dashboard, bill the subscription, and delete records on the retention clock.
To fill the lead card (name, reason, urgency) and to summarize a recording, we send the caller’s words to DeepSeek (Hangzhou DeepSeek Artificial Intelligence Co., Ltd.) through OpenRouter (United States). That is a cross-border transfer under PIPEDA. Extraction runs after the owner already has the verbatim text. If OpenRouter is unset, or extraction is switched off, the product still works: the raw message stays.
Voice and SMS go through Telnyx (United States). The app and database are hosted in the United States (Render, Supabase). Transactional email goes through Resend. Connected calendars go through Nylas or Calendly.
How long we keep it
Transcripts and recordings: 90 days, then deleted. Call records: 180 days. Closed accounts and a caller’s “forget me” request are honoured, including a delete request to Telnyx for their copy.
Your rights
An owner can ask for access to or deletion of their account data. A caller asks the business they called first; we act on the owner’s request. Write from the email on the account, from Settings, or through the home page.