Privacy Policy
Effective: February 2026 · AINORA, MB · Lithuania, EU
1. Introduction
AINORA, MB ("AINORA", "we", "us", or "our") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect information when you use our AI digital administrator services, visit our website at ainora.lt, or interact with our AI voice assistants.
We process personal data in compliance with the General Data Protection Regulation (GDPR) and applicable Lithuanian data protection laws. By using our services, you acknowledge that you have read and understood this Privacy Policy.
2. Data We Collect
Depending on how you interact with our services, we may collect the following types of data:
Voice Call Recordings
When our AI voice assistant handles phone calls on behalf of a business, calls may be recorded for service delivery, quality assurance, and improvement purposes. Callers are informed at the beginning of each call that the conversation may be recorded.
Contact Information
We collect names, email addresses, phone numbers, and business details when you contact us, request a demo, or when your information is provided during AI-assisted conversations.
CRM and Business Data
For businesses using our AI administrator services, we process customer relationship management (CRM) data including appointment history, customer preferences, booking records, and communication logs necessary to deliver our services.
Website Usage Data
We collect standard web analytics data including IP addresses, browser type, pages visited, time spent on pages, and referring URLs through cookies and analytics tools.
3. How We Use Data
We use the data we collect for the following purposes:
- Service Delivery: To operate our AI digital administrator, handle phone calls, manage bookings, and provide customer service on behalf of our clients.
- Service Improvement: To analyze call recordings and interaction data to improve our AI models, voice recognition accuracy, and overall service quality.
- Analytics: To understand how our website and services are used, identify trends, and optimize user experience.
- Communication: To respond to inquiries, send service-related updates, and provide customer support.
- Legal Compliance: To comply with applicable laws, regulations, and legal obligations.
4. Data Storage & Security
Your data is stored on servers hosted within the European Union, ensuring compliance with GDPR data residency requirements. We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction.
Security measures include:
- Encryption of data in transit (TLS/SSL) and at rest
- Access controls and authentication mechanisms
- Regular security audits and vulnerability assessments
- Employee training on data protection practices
- Data minimization principles applied throughout our systems
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. Call recordings are retained for the period agreed upon with the business client and deleted thereafter.
5. Your Rights
Under the GDPR, you have the following rights regarding your personal data:
- Right of Access: You can request a copy of the personal data we hold about you.
- Right to Rectification: You can request correction of inaccurate or incomplete personal data.
- Right to Erasure: You can request deletion of your personal data where there is no compelling reason for its continued processing.
- Right to Data Portability: You can request to receive your personal data in a structured, commonly used, machine-readable format.
- Right to Restrict Processing: You can request that we limit how we use your data.
- Right to Object: You can object to processing of your personal data in certain circumstances.
- Right to Withdraw Consent: Where processing is based on consent, you can withdraw it at any time.
To exercise any of these rights, please contact us at info@ainora.lt. We will respond to your request within 30 days. You also have the right to lodge a complaint with the Lithuanian State Data Protection Inspectorate (VDAI).
6. Cookies
Our website uses cookies and similar tracking technologies to enhance your browsing experience and collect analytics data. Cookies are small text files stored on your device when you visit our website.
We use the following types of cookies:
- Essential Cookies: Necessary for the website to function properly. These cannot be disabled.
- Analytics Cookies: Help us understand how visitors interact with our website (e.g., Google Analytics). These collect anonymous usage data.
You can control cookie preferences through your browser settings. Disabling cookies may affect your experience on our website.
7. Third-Party Services
We use the following third-party services that may process your data:
- OpenAI: Powers our AI voice assistant and natural language processing capabilities. Voice data and conversation transcripts may be processed by OpenAI's API in accordance with their data processing agreement.
- Telnyx: Provides telecommunications infrastructure for phone calls handled by our AI assistant. Call metadata and recordings are processed through Telnyx's platform.
- Google Analytics: Collects anonymous website usage statistics to help us improve our website experience.
Each third-party service provider has their own privacy policy governing how they handle data. We ensure that all third-party processors comply with GDPR requirements through appropriate data processing agreements.
8. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the "Effective" date at the top of this page. We encourage you to review this page periodically to stay informed about how we protect your data.
9. Contact Us
If you have any questions about this Privacy Policy, your personal data, or wish to exercise your data protection rights, please contact us:
Supervisory authority: Lithuanian State Data Protection Inspectorate (Valstybine duomenu apsaugos inspekcija, VDAI) — vdai.lrv.lt