GDPR CompliantKVKK CompliantPDPL Compliant

Privacy Policy

We believe privacy is a fundamental right. Our systems are built from the ground up with a "privacy-by-design" architecture to ensure your organizational data remains yours alone.

June 9, 2026 Jan 15, 2025

1. Information We Collect

Hala AI collects only the minimum necessary information required to provide our enterprise AI services. This includes:

  • Account Information: Name, professional email, and organizational role.
  • Interaction Data: Transcripts of AI-driven voice or text interactions.
  • Metadata: IP addresses and device identifiers for security logging.

2. How We Use Your Data

Your data is used exclusively to refine the performance of your specific organizational AI instance. We never sell, rent, or lease your private data to third-party advertisers.

Usage is limited to processing requests, improving model accuracy for your specific use-case, and providing technical support upon request.

3. Data Storage & Security

Encrypted at Rest & In Transit

All call recordings and transcriptions are encrypted using AES-256 standards. Keys are managed through HSM-backed services to ensure maximum isolation.

4. Healthcare & sensitive data

We apply encryption, access controls, and least-privilege practices to sensitive data you store in Hala. Customer conversation content is not used to train third-party foundation models beyond the limited license needed to operate your AI receptionist.

5. Controller & processor roles

For your Hala account (business profile, billing, staff users), Hala AI acts as the data controller.

For end-customer conversations processed through your connected channels, Hala acts as a processor on your behalf. You remain responsible for lawful bases and notices to your customers.

6. Your rights

1

Right to Access

You may request a copy of all data we hold regarding your organization.

2

Right to Erasure

Request permanent deletion of interaction logs and account metadata.

3

Right to Object

Opt-out of specific data processing activities that are not core to service delivery.

Need a Data Processing Agreement?

Our legal team can provide standard DPAs for enterprise clients.

Contact Privacy Team

Have more questions about how we protect your data?