Privacy Policy

Last updated: August 28, 2026

Clirah (“Clirah,” “we,” “us,” or “our”) provides an AI-powered phone receptionist service that answers, transcribes, and manages calls on behalf of business customers (“Customers,” “you”). This policy explains what information we collect, how we use it, and the choices you have — whether you’re a Customer using Clirah, or someone calling a business that uses it.

This policy is a starting point, not legal advice. Please have it reviewed by a qualified professional before relying on it for compliance in your jurisdiction.

1. Information we collect

Account information. When you sign up, we collect your name, email address, and business details (business name, phone number).

Call data. When a customer calls your Clirah-connected number, we record the audio, transcribe the conversation, and may extract details like the caller’s name, phone number, and reason for calling, in order to answer questions, check availability, and book appointments on your behalf.

Business knowledge. Information you provide about your business (hours, services, pricing, policies) so Clirah’s AI can answer callers accurately.

Calendar data. If you connect Google Calendar, we access your calendar’s free/busy information and create events for bookings made through Clirah. We request only the minimum permissions needed for this — we do not read your other event details.

Usage data. Standard technical information (IP address, browser type, pages visited) collected automatically when you use our dashboard or website.

2. How we use information

  • To operate the AI receptionist service: answering calls, checking availability, booking appointments, capturing leads, and sending SMS confirmations (where enabled).
  • To display your call history, transcripts, contacts, and appointments in your dashboard.
  • To improve the accuracy of the AI receptionist over time, for example by flagging questions it couldn’t confidently answer so you can teach it the answer.
  • To communicate with you about your account and the service.
  • To comply with legal obligations.

3. Automated decision-making

When Clirah answers a call, it uses automated processing to classify how urgent the caller’s request sounds (for example, routine versus emergency) so it can flag time-sensitive messages for your attention faster. This classification is based on the caller’s own words during the call, is not used to deny anyone service, and a person (you, the business) reviews it — it does not make a final decision about the caller on its own. If you believe a call was mis-classified, contact us and we can look into it.

4. Call recording and consent

Clirah records and transcribes calls in order to provide the service. Call recording laws vary by location — in many places, businesses must notify callers that a call may be recorded, and in some places all parties must consent. As the business using Clirah, you are responsible for ensuring your use of call recording complies with the laws that apply to you, including adding any required disclosure to your own greeting or website.

5. Cross-border data transfers

Clirah is built on infrastructure providers based in the United States (OpenAI, Supabase, Vercel) alongside SignalWire for telephony. Call audio, transcripts, and the personal information within them (a caller’s name, phone number, and what they say on the call) are processed and stored on this infrastructure, which is located outside Australia. By using Clirah or calling a business that uses it, this information may be transferred to, and processed in, countries other than your own, which may have different data protection laws than your home jurisdiction.

6. Third-party services

We rely on the following providers to deliver Clirah:

  • OpenAI — processes call audio in real time to generate the AI receptionist’s responses (speech-to-text, reasoning, text-to-speech).
  • SignalWire — provides the phone number, call routing, and SMS delivery.
  • Google — if you connect Google Calendar, used for availability checks and event creation.
  • Supabase — hosts our database and handles account authentication.
  • Vercel — hosts our application.

Each provider processes data under their own privacy policies and terms.

7. Data retention

We retain call transcripts, contacts, leads, and appointment data for as long as your account is active, so you have a complete history in your dashboard. You can request deletion of your account and associated data at any time by contacting us below.

8. Data security

We use industry-standard practices to protect your data, including encrypted connections (HTTPS/TLS), row-level access controls on our database, and OAuth-based authentication rather than storing passwords in plain text. No system is 100% secure, and we can’t guarantee absolute security.

9. Your rights

Depending on where you’re located, you may have rights to access, correct, or delete your personal information, or to object to certain processing. To exercise these rights, contact us at the email below.

10. Cookies

We use cookies necessary for authentication (keeping you logged in to your dashboard). We do not use third-party advertising or tracking cookies.

11. Children's privacy

Clirah is not directed at children, and we do not knowingly collect personal information from children under 16.

12. Changes to this policy

We may update this policy from time to time. We’ll update the “Last updated” date above when we do.

13. Contact us

Questions about this policy? Email us at legal@clirah.com.