Privacy Policy

1. Introduction

SalemWise Solutions, a trade name of Iskhak LLC ("we", "our", or "us"), operates the NXIVO AI Receptionist platform at nxivo.ai (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By accessing or using the Service, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. If you do not agree, please discontinue use of the Service.

2. Information We Collect

We collect the following categories of information:

2.1 Account Information

Name, email address, phone number, and business details you provide during registration.

2.2 Authentication Data

When you sign in with Google, we receive your name, email address, and profile picture from Google. We do not access your Google contacts, calendar, or any other Google services beyond basic authentication.

2.3 Call and Communication Data

Phone call recordings, transcripts, and SMS messages processed through the AI Receptionist on behalf of your business. See Section 4 for important details about how this data is used.

2.4 Payment Information

Billing details processed securely through Stripe. We do not store your full credit card number on our systems.

2.5 Usage Data

Log data, IP addresses, device information, browser type, pages visited, and how you interact with the Service.

2.6 Cookies and Tracking Technologies

We use cookies, web beacons, and similar tracking technologies to operate and improve the Service, analyze usage patterns, and for security purposes. This may include third-party analytics tools such as Google Analytics. You may control cookie preferences through your browser settings. Disabling certain cookies may affect Service functionality.

3. How We Use Your Information

We use collected information to:

• Provide, operate, and maintain the Service
• Process transactions and send related billing information
• Send administrative information, service updates, and security alerts
• Respond to inquiries and provide customer support
• Improve Service functionality, reliability, and performance
• Comply with legal obligations and enforce our Terms and Conditions
• Detect, prevent, and address fraud, abuse, or security incidents
• Improve and train our AI models, subject to your right to opt out as described in Section 4

4. AI and Data Processing

4.1 Operational Processing

Our Service uses artificial intelligence and large language models (LLMs) to handle phone calls and communications on behalf of your business. Call recordings and transcripts are processed to fulfill the core functions of the Service (e.g., answering calls, booking appointments, sending confirmations).

4.2 AI Training Use

In addition to operational processing, call recordings and transcripts may be analyzed and used to improve AI response quality and train our models. This is a separate use from operational processing and you have the right to opt out.

To opt out of AI training use of your data, contact us at [email protected] with the subject line "AI Training Opt-Out." Opting out does not affect your ability to use the Service. Operational processing necessary to deliver the Service will continue.

4.3 Client Obligations Regarding End-User Consent

If you are a business client using NXIVO to handle calls with your customers ("End Users"), you are solely responsible for:

• Informing your End Users that calls are handled by an AI system and may be recorded
• Obtaining any required consent under applicable federal, state, or local laws, including wiretapping and call recording statutes
• Complying with two-party or all-party consent requirements in jurisdictions where you operate (including but not limited to California, Illinois, Maryland, Washington, Florida, Connecticut, Michigan, Montana, Nevada, New Hampshire, Oregon, and Pennsylvania)
• Ensuring your use of the Service complies with the Telephone Consumer Protection Act (TCPA) and any other applicable telecommunications laws

SalemWise Solutions provides the AI infrastructure. You, as the business client, bear responsibility for lawful deployment within your jurisdiction and industry.

5. Sharing of Information

We do not sell your personal information. We may share data with:

• Service Providers: Third-party vendors that help us operate the Service, including Stripe (payment processing) and Twilio (telephony infrastructure). These providers are contractually bound to use your data only as necessary to provide their services.
• Legal Requirements: When required by law, subpoena, regulation, or valid legal process.
• Business Transfers: In connection with a merger, acquisition, or sale of business assets, with appropriate confidentiality protections.
• Safety and Fraud Prevention: When necessary to protect the rights, property, or safety of SalemWise Solutions, our clients, or others.

6. Data Security

We implement appropriate technical and organizational measures to protect your information, including encryption in transit and at rest, access controls, and security monitoring. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

In the event of a data breach that affects your personal information, we will notify you as required by applicable law.

7. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. Call recordings and transcripts used for AI training are retained in accordance with our data governance policies. Consent records related to SMS communications are retained for a minimum of four (4) years in compliance with TCPA statute of limitations requirements.

Upon account termination, you may request deletion of your account and associated personal data by contacting us. Note that certain data may be retained as required by law or for legitimate business purposes (e.g., billing records, legal compliance).

8. Your Rights

8.1 General Rights

Depending on your location, you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate data
• Request deletion of your personal data
• Opt out of AI training use (see Section 4.2)
• Object to or restrict certain processing
• Request your data in a portable format

To exercise any of these rights, contact us at [email protected].

8.2 California Residents — CCPA Rights

If you are a California resident, you have the following additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Right to Know: You may request disclosure of the categories and specific pieces of personal information we have collected about you, the purposes for collection, and the categories of third parties with whom it is shared.
• Right to Delete: You may request deletion of personal information we have collected, subject to certain exceptions.
• Right to Correct: You may request correction of inaccurate personal information.
• Right to Opt-Out of Sale or Sharing: We do not sell or share your personal information for cross-context behavioral advertising. You may nonetheless submit an opt-out request at [email protected].
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

Do Not Sell or Share My Personal Information: We do not sell personal information as defined under the CCPA. To confirm or submit a request, contact [email protected].

To submit a verifiable CCPA request, contact us with sufficient information to verify your identity. We will respond within 45 days.

8.3 European Residents — GDPR Rights

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your personal data under the following lawful bases:

• Contractual necessity: Processing required to deliver the Service you signed up for
• Legitimate interests: Service improvement, security, and fraud prevention
• Consent: AI training use (which you may withdraw at any time)

You have the right to access, rectify, erase, restrict, or object to processing of your personal data, and the right to data portability. You also have the right to lodge a complaint with your local data protection authority.

International Data Transfers: If you are located outside the United States, your data will be transferred to and processed in the United States. We rely on appropriate safeguards (such as Standard Contractual Clauses) for such transfers where required.

Business clients in the EEA may request a Data Processing Agreement (DPA) by contacting [email protected].

9. Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that we have collected personal information from a child under 18 without parental consent, we will take steps to delete that information.

10. Third-Party Links

The Service may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies.

11. Changes to This Policy

We may update this Privacy Policy from time to time. For material changes, we will provide at least 30 days' prior notice via email to the address associated with your account before the changes take effect. Your continued use of the Service after the effective date constitutes acceptance of the updated policy.

We will always update the "Last updated" date at the top of this page.

12. Contact

If you have any questions, concerns, or requests related to this Privacy Policy, please contact us.

SalemWise Solutions / Iskhak LLC
Email: [email protected]
Compliance & Privacy: [email protected]
Website: nxivo.ai