Privacy notice: Australia

1. Who this covers

People in Australia whose personal information an Australian business, or a business with an Australian link, handles through the service, and account holders in Australia. Many small businesses with an annual turnover of $3 million or less are outside the Act.

The law: Privacy Act 1988; Australian Privacy Principles (OAIC).

2. Who is responsible

• For the people a business calls or chats with, that business decides why and how the information is used and is responsible for it under the Australian Privacy Principles. We handle it on its behalf, under our Data Processing Agreement.
• For the accounts of people who sign up with us, we decide how the information is used.

3. Why we may use the data

• Account information is collected to run the service, bill for it, keep accounts secure and answer requests, and used only for those purposes. (APPs 3, 5, 6)
• People a business contacts: the business must meet the Australian Privacy Principles and the telemarketing rules, including the Do Not Call Register.
• Every call an agent makes or answers opens with a spoken statement that it is an automated AI assistant, and that the call may be recorded if recording is on. No workspace setting removes it.
• We do not sell personal data, use it for advertising, or train models on calls or chats.

4. Your rights

• Access to the personal information held about you. (APP 12)
• Correction of information that is inaccurate, out of date, incomplete, irrelevant or misleading. (APP 13)
• To ask not to receive direct marketing. (APP 7)

If a business called or messaged you through Dialora AI, ask that business first: it decides what happens to your data, and the workspace has the tools to find, export and erase it. If you do not know which business it was, write to privacy@aicall.vitrano.in with the number that contacted you and the date, and we will pass your request on. If you hold an account with us, write to the same address.

5. Data leaving your country

• Our servers are in Ahmedabad, India, so using the service moves data to India. Services a workspace connects with its own account, such as Twilio, Deepgram, ElevenLabs or a hosted AI model, are mostly in the United States.
• Before disclosing personal information overseas, an Australian business must take reasonable steps to make sure the recipient does not breach the Australian Privacy Principles, and generally remains accountable for what the recipient does. (APP 8; s. 16C)

Where each service is: sub-processor list. Terms for businesses: Data Processing Agreement.

6. If there is a breach

• We tell the business without undue delay after we become aware of a breach of its data.
• Under the Notifiable Data Breaches scheme, a suspected eligible data breach must be assessed within 30 days, and if it is likely to result in serious harm the OAIC and the people affected must be told as soon as practicable. (Part IIIC; OAIC)

7. Complaints

• Complain to us, or to the business that contacted you, first. If you are not satisfied with the answer, you can complain to the Office of the Australian Information Commissioner. (OAIC)

8. Still open