Privacy Policy
Last updated: April 2026
1. Information We Collect
Personal Information
- Contact Details: Name, email address, phone number, and other details you provide when filling out forms, signing up for communications, or using our AI/chatbot services
- Business Information: Company name, role/title, or other relevant corporate details (if applicable)
Voice & Call Data (Important Notice)
- Voice Recordings: When you call our AI voice agents at 1-888-442-BUZZ (1-888-442-2899) or interact with our voice services, ALL conversations are recorded and processed for service delivery, quality assurance, and AI training purposes
- Call Metadata: Phone numbers, call duration, timestamps, call routing information, and caller ID details
- Conversation Transcripts: AI-generated text transcriptions of all voice interactions for analysis, service improvement, and record-keeping
- Voice Patterns: Voice characteristics and patterns may be analyzed for service optimization (not used for biometric identification)
- AI Platform Sharing: Voice data is processed by our AI service providers including Retell, Vapi, and ElevenLabs under strict confidentiality agreements
Digital Interaction Data
- Website Usage: IP address, browser type, device type, operating system, pages visited, timestamps, and navigation patterns
- Chatbot Interactions: All messages, queries, and responses from AI chatbot conversations on our website
- Cookies & Tracking: Session cookies, preference cookies, analytics cookies, and similar tracking technologies
Payment & Transaction Data
Payment details are collected and processed by trusted third-party payment processors. We do not store full payment card details on our servers. Transaction records and billing information are retained for accounting and legal purposes.
2. How We Use Your Information
Voice Services & AI Operations
- Service Delivery: Provide AI voice agent services, handle customer inquiries, and process voice-based requests
- AI Training: Use anonymized voice data to train and improve AI models for better conversation quality and accuracy
- Quality Assurance: Monitor call quality, review conversations, and ensure service standards are met
- Analytics: Generate insights for business optimization and service improvement
- Compliance: Maintain records for regulatory compliance and dispute resolution
- Service Delivery: Provide, maintain, and enhance all our AI-driven solutions, phone-based services, and digital offerings
- Communication: Send service notifications, respond to inquiries, and with consent, send marketing communications (CASL compliant)
- Personalization: Customize user experiences and optimize our services based on usage patterns
- Legal Compliance: Meet legal, regulatory, or law enforcement requirements and protect our rights
3. AI Service Providers & Third-Party Sharing
AI Platform Partners
We work with industry-leading AI service providers who process your voice data under strict contractual obligations:
- Retell: Voice AI infrastructure and real-time conversation handling
- Vapi: Voice AI orchestration and call management services
- ElevenLabs: AI voice synthesis and speech generation technology
All partners are contractually bound to protect your data and use it solely for providing AI voice services.
- Service Providers: Hosting, analytics, payment processing, and technical infrastructure providers
- Business Transactions: Information may be transferred in mergers, acquisitions, or asset sales with equivalent privacy protections
- Legal Requirements: Disclosure when required by law, court order, or to protect legal rights
4. Data Retention & Storage
Voice Data Retention Schedule
- Voice Recordings: Retained for up to 2 years for service improvement and quality assurance
- Call Transcripts: Retained for up to 2 years for analysis and training purposes
- Call Metadata: Retained for up to 3 years for business and compliance purposes
- Personal Information: Retained as long as necessary for service delivery and legal requirements
You may request earlier deletion of your voice data by contacting hello@tonnic.ai
5. Canadian Legal Basis (PIPEDA & CASL)
Under PIPEDA, we collect, use, and disclose personal information with appropriate consent or as otherwise permitted by law:
- Implied Consent: For clearly communicated purposes when you voluntarily provide information
- Express Consent: Required for voice recording and marketing communications (CASL compliant)
- Withdrawal Rights: You can withdraw consent at any time (may limit service access)
6. Your Rights & Choices
Voice Data Rights
- Access: Request copies of your voice recordings and transcripts
- Deletion: Request deletion of your voice recordings and related data
- Opt-Out: Stop using voice services to prevent future voice data collection
- Correction: Request correction of inaccurate transcripts or personal information
- Marketing Opt-Out: Unsubscribe from emails or SMS by following unsubscribe instructions
- Cookie Management: Control cookies through browser settings (may affect functionality)
- Complaint Rights: Contact Privacy Commissioner of Canada if concerns are not resolved
7. International Transfers & Security
We implement industry-standard security measures to protect your data. While our operations are primarily in Canada, some AI service providers may process data outside Canada. We ensure appropriate safeguards through contractual protections and compliance with Canadian privacy requirements.
8. Children's Privacy
Our services are not intended for individuals under 18. We do not knowingly collect personal information from minors. If you believe we have collected data from a child, please contact us immediately for deletion.
9. Policy Updates
We may update this Privacy Policy to reflect changes in our practices or legal requirements. Material changes will be posted with an updated "Last Updated" date. Continued use of our services after updates constitutes acceptance of the revised policy.