Privacy Policy

Last updated: March 15, 2026

1. Introduction

Innovenses Pty Ltd ("Karmas AI", "we", "us") is committed to protecting your privacy. This policy explains how we collect, use, store, and share your personal information when you use our AI voice agent platform.

2. Information We Collect

Account Information: Name, email address, company name, industry, and billing details when you create an account.

Call Data: Call recordings, transcripts, metadata (duration, phone numbers, timestamps), and agent interaction logs generated through the Service.

Usage Data: Browser type, IP address, pages visited, feature usage, and performance metrics collected automatically.

Knowledge Base Content: Documents, FAQs, and other materials you upload to train your voice agents.

3. How We Use Your Information

  • To provide, maintain, and improve the Service
  • To process calls through your configured AI voice agents
  • To generate analytics and insights about your call performance
  • To send transactional communications (billing, security alerts, service updates)
  • To comply with legal obligations

4. Data Storage & Security

Your data is stored on secure, SOC 2 Type II certified infrastructure. We use encryption in transit (TLS 1.3) and at rest (AES-256). Call recordings are stored in isolated, tenant-specific containers. Access is restricted through role-based access controls.

5. Data Sharing

We do not sell your personal information. We may share data with:

  • Service Providers: Cloud hosting (Railway/AWS), voice AI providers (Deepgram, ElevenLabs), and payment processors (Stripe) that help us deliver the Service
  • Legal Requirements: When required by law, subpoena, or to protect our rights
  • Business Transfers: In connection with a merger, acquisition, or sale of assets

6. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access, correct, or delete your personal data
  • Export your data in a portable format
  • Opt out of marketing communications
  • Request restriction of processing
  • Lodge a complaint with a data protection authority

To exercise these rights, email privacy@karmas.ai.

7. GDPR & CCPA Compliance

We process data in compliance with the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). For EU residents, our legal basis for processing is contract performance and legitimate interest. California residents have additional rights under the CCPA, including the right to know and the right to delete.

8. Data Retention

We retain your account data for the duration of your account plus 30 days. Call recordings are retained according to your plan settings (default: 90 days). You can request earlier deletion at any time. Anonymized, aggregated analytics data may be retained indefinitely.

9. Cookies

We use essential cookies for authentication and session management. We use analytics cookies to understand how the Service is used. You can control cookie preferences through your browser settings.

10. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes by email or through the Service. Continued use after changes constitutes acceptance.

11. Contact

For privacy-related questions, contact our Data Protection Officer at privacy@karmas.ai.

Innovenses Pty Ltd
Sydney, NSW, Australia