1. Scope
This Privacy Policy explains how NONA DIGITAL MARKETING, LLC, doing business as NonaCall ("NonaCall," "we," "us," or "our"), collects, uses, discloses, and retains personal information in connection with the NonaCall website, dashboard, AI receptionist, telephone and AI receptionist functionality, integrations, support, and related services.
For business call data processed through a Subscriber’s NonaCall account, the Subscriber generally determines why and how the information is used in its business relationship with the caller. In those circumstances, NonaCall acts primarily as a service provider or processor on the Subscriber’s behalf, subject to applicable law and contract. NonaCall separately determines the purposes for processing account, security, billing, fraud-prevention, and service-administration information.
2. Information We Collect
- Account and business information. Name, business name, email address, telephone number, login/account identifiers, plan information, business hours, service descriptions, FAQs, scheduling preferences, receptionist configuration, assigned NonaCall telephone number, requested area code or locality, and related provisioning status.
- Caller and call information. Caller telephone number and other contact information provided during a call, call date/time, duration, status, call-handling information, call identifiers, recording or audio content when enabled, transcript, summary, structured outcome, and related communications metadata.
- Billing and usage information. Subscription status, trial eligibility and status, metered usage, call duration, billed units, overage, payment-status information, invoice identifiers, payment-recovery status, payment-history markers used to apply telephone-number retention rules, and limited payment metadata received from payment processors. NonaCall is not designed to collect or store full payment-card numbers through AI conversations.
- Integration information. Identifiers, access tokens, authorization data, and content needed to connect authorized calendar, CRM, or other business integrations.
- Website and device information. IP address, browser/device information, log data, security events, and cookie or similar technology data used for authentication, security, analytics, and product operation.
- Support information. Messages, support tickets, screenshots, attachments, and other information provided when requesting assistance.
3. How We Use Information
- Provide, operate, maintain, and secure the Service.
- Answer inbound calls, interact with callers, take messages and callback details, generate transcripts or summaries, support scheduling, and perform Subscriber-configured workflows.
- Authenticate users and prevent fraud, abuse, and unauthorized access.
- Measure usage, calculate plan limits and overage, invoice Subscribers, and resolve billing disputes.
- Provide customer support and troubleshoot technical issues.
- Maintain service quality, reliability, and safety, including debugging and abuse detection.
- Comply with applicable law, enforce agreements, and protect NonaCall, Subscribers, callers, and others.
4. Call Recording and Notice
Calls handled through NonaCall may be recorded and transcribed. Under the current operational flow, recording and call-content processing may begin when the call connects, and NonaCall presents a mandatory recording disclosure immediately at the beginning of the call before the AI receptionist proceeds into the substantive business conversation. Subscribers cannot remove or edit that disclosure through the standard product interface. Because recording and consent requirements vary by jurisdiction, each Subscriber is responsible for determining whether additional notice, affirmative consent, or another process is required for its callers and use case.
5. Non-Regulated Service and Sensitive Data
NonaCall is currently intended for non-regulated businesses. Do not use NonaCall to collect or process protected health information, payment card data, Social Security numbers, or other regulated sensitive data.
NonaCall is not intended to be used as a standard HIPAA/PHI, payment-card, financial-credential, government-identification, or other regulated-sensitive-data processing platform. Subscribers must not configure the AI receptionist to request such data unless NonaCall has specifically authorized the use case in writing.
6. Service Providers and Third Parties
We use third-party vendors and service providers to operate, support, secure, and improve the Service. These providers may support functions such as cloud infrastructure and data storage, authentication, telecommunications and telephone-number services, call routing and communications infrastructure, artificial intelligence and speech processing, payment processing, transactional communications, analytics, customer support, security, and integrations selected by Subscribers.
These service providers may process personal information on our behalf and subject to contractual, technical, or other safeguards appropriate to the services they provide. In some circumstances, a third party may process information under its own legal obligations or privacy terms. The categories of providers we use, and the specific providers within those categories, may change as the Service evolves.
We may also disclose information when reasonably necessary to comply with applicable law, regulation, legal process, or governmental request; to investigate or prevent fraud, abuse, security incidents, or violations of our agreements; to protect the rights, property, safety, or security of NonaCall, our Subscribers, users, callers, or others; in connection with a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar corporate transaction; or with the consent or at the direction of the relevant Subscriber or user.
7. Data Retention
NonaCall follows a data-minimization approach and maintains a NonaCall-managed cloud copy of certain call information so that Subscribers can access recent call history beyond a communications provider’s temporary retention window. Under the standard configuration:
- Call recordings / raw audio. Recordings are generally retained for approximately thirty (30) days under the standard configuration. Certain plans or workspace configurations may retain recordings for up to ninety (90) days. Recordings are then scheduled for deletion from active NonaCall storage unless a lawful exception applies.
- Transcripts and detailed call artifacts. Transcripts and comparable detailed text/content artifacts may be retained for up to ninety (90) days and then scheduled for deletion from active NonaCall storage, subject to lawful exceptions.
- Call metadata. Limited operational metadata that does not require retention of the full call content may be retained for up to twelve (12) months for history, analytics, support, fraud prevention, and service administration.
- Billing / usage metadata. Limited records necessary to document subscription usage, invoicing, tax/accounting treatment, disputes, fraud prevention, payment recovery, and legal obligations may be retained for the period reasonably necessary to satisfy those purposes and may extend beyond call-content retention periods.
- Account and subscription records. Generally retained while the account is active and for up to twelve (12) months after termination where reasonably necessary for billing, fraud prevention, legal, tax, dispute, and operational purposes, subject to earlier deletion where appropriate.
- Support records. Generally retained for up to twelve (12) months unless a longer period is reasonably necessary for an active dispute, security incident, or legal requirement.
- Integration credentials. Retained while the integration is connected or the account remains eligible for reactivation, and deleted, revoked, or invalidated no later than the end of the applicable thirty (30)-day Post-Termination Window when reasonably practicable, subject to technical backup and provider limitations.
Specific retention periods may vary based on legal requirements, security needs, technical limitations, contractual obligations, and whether information is needed to establish, exercise, or defend legal claims.
Account termination and export. A failed or past-due payment may temporarily pause call-answering without terminating the account. When cancellation or termination becomes effective, NonaCall provides a thirty (30)-day Post-Termination Window during which Customer Data that has not already expired under a shorter retention period may remain available for dashboard access or a reasonable verified export request, as technically available. At the end of that window, remaining Customer Data in active storage is scheduled for deletion or rendered inaccessible, subject to billing, tax, fraud-prevention, security, legal-hold, dispute, backup, and other lawful exceptions. Telephone-number reservation and release are separate from Customer Data retention: a never-paid trial may have its assigned number released when the trial/subscription effectively terminates, while an eligible previously paid account may have its provider-controlled number reserved for up to thirty (30) days after effective termination. Releasing a number does not, by itself, accelerate or extend the retention periods applicable to call content or other Customer Data.
8. Security
NonaCall uses reasonable administrative, technical, and organizational measures designed to protect information appropriate to the nature of the Service and the information involved. No system can guarantee absolute security, and NonaCall does not warrant that unauthorized access, loss, misuse, or disclosure will never occur.
9. Subscriber and Caller Rights
Depending on location and applicable law, individuals may have rights to request access, correction, deletion, portability, or other treatment of personal information. For information collected in a call on behalf of a Subscriber, callers should ordinarily direct requests to the business they called. NonaCall may assist the Subscriber as required by applicable law or contract. Requests concerning a NonaCall account or NonaCall’s own processing may be sent to info@nonadigitalmarketing.com.
10. U.S. State Privacy Laws
Certain U.S. states provide residents with privacy rights regarding their personal information. Where an applicable state privacy law applies to NonaCall or to the processing of personal information through the Service, we will handle applicable privacy requests and personal information in accordance with that law.
Privacy rights, eligibility requirements, exceptions, and our obligations may differ depending on the state and the circumstances. NonaCall is designed to limit the collection and use of personal information to what is reasonably necessary to provide, secure, support, and improve the Service.
11. Children
The Service is intended for business use and is not directed to children under 13. Subscribers must not intentionally configure NonaCall to collect personal information from children in violation of applicable law.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will post the updated version and revise the effective date. Material changes may also be communicated by email or through the Service where appropriate.
13. Contact
NONA DIGITAL MARKETING, LLC
Attn: NonaCall Privacy
NONA DIGITAL MARKETING
info@nonadigitalmarketing.com
14. Data Processing Roles and Data Processing Addendum
Where NonaCall processes caller or other personal information on behalf of a Subscriber, additional processor/service-provider obligations may be set out in a Data Processing Addendum. The DPA may address processing instructions, categories of data and individuals, confidentiality, subprocessors, security, assistance with privacy-rights requests, deletion or return, audit information, and incident notification as required by applicable law.
15. Subprocessors
NonaCall may use subprocessors and other service providers for cloud hosting, telephony, call orchestration, AI and speech processing, authentication, payments, transactional email, analytics, support, and integrations. Current material providers are described in Section 6 and may change over time. NonaCall may maintain a more detailed current subprocessor list identifying material providers and the services they perform. Changes to material subprocessors may be handled as described in the applicable DPA or customer agreement.
16. AI and Model Improvement
Any use of Customer Data for AI or model improvement must be consistent with these Terms, the applicable DPA, this Privacy Policy, provider settings, and applicable law. NonaCall will not materially expand the use of identifiable caller recordings, transcripts, or Subscriber-confidential content for generalized model training without providing any notice, authorization, or contractual update required by applicable law or agreement.
NonaCall periodically reviews the data-use and training settings of material AI, speech, analytics, communications, and integration providers and updates contractual or product controls when reasonably necessary.
17. Security Incidents and Breach Notifications
NonaCall maintains reasonable procedures for identifying, investigating, containing, and responding to suspected security incidents involving personal information. If NonaCall determines that notification is required by applicable law or contract, NonaCall will provide notice to affected Subscribers, individuals, regulators, or other parties as required.
18. Cookies, Analytics, Advertising, and Sale/Sharing
The marketing site and application may use cookies, software development kits, pixels, analytics, error-monitoring, authentication, and similar technologies. NonaCall maintains an inventory of material technologies used in production and updates this Policy and any cookie controls as reasonably necessary. If a disclosure or use is treated as a sale, sharing, targeted advertising, or similar regulated activity under applicable law, NonaCall will provide any notice, consent, opt-out, or other choice required by law.
NonaCall maintains and periodically reviews an inventory of material cookies, analytics, authentication, payment, support, error-monitoring, and embedded third-party technologies. Where applicable law requires notice, consent, opt-out, or a “Do Not Sell or Share” mechanism based on technologies actually deployed, NonaCall will provide the required control.
19. Legal Process and Preservation Requests
NonaCall may preserve or disclose information in response to valid subpoenas, warrants, court orders, preservation requests, emergency requests, or other legal process as required or permitted by law. NonaCall may notify the relevant Subscriber unless legally prohibited.
20. NonaCall-Managed Call Archive
NonaCall may receive call audio, transcripts, and related call artifacts from communications, telephony, AI, or speech-processing providers and store a separate copy in NonaCall-controlled cloud infrastructure. This NonaCall-managed copy is used to provide the dashboard, recent-call history, support, authorized integrations, security, and related Service functionality.
- Call metadata. Limited operational metadata such as call ID, workspace/Subscriber association, caller/called number where applicable, timestamps, duration, status, receptionist or assistant identifier, and similar fields may be retained for up to twelve (12) months.
- Transcripts and detailed text artifacts. Transcripts and comparable detailed call-content artifacts may be retained for up to ninety (90) days.
- Recordings. Audio recordings are generally retained for approximately thirty (30) days, and may be retained for up to ninety (90) days where an extended-retention plan or workspace configuration expressly provides that period.
- Summaries / structured outcomes. These content-derived artifacts may be retained for up to ninety (90) days unless a shorter period is required by the applicable plan, verified deletion request, or law.
- Billing / tax / accounting records. Limited billing and usage metadata may be retained for the period reasonably necessary for invoicing, taxes, accounting, disputes, fraud prevention, legal claims, and other lawful obligations, even after related call content has been deleted.
Retention periods may be shortened, extended by legal hold or security incident, or affected by backup and provider deletion cycles. NonaCall does not use backups to provide ordinary access to expired call artifacts.
Plan-specific retention terms, verified deletion requests, legal holds, security incidents, backup cycles, and applicable law may shorten or extend the periods described above. The Data Retention & Deletion Policy provides additional operational detail.
21. Telephone Number Provisioning and Resource Lifecycle
NonaCall may collect and maintain assigned telephone numbers, telecommunications-provider identifiers, requested area code or locality, provisioning status, and release timestamps in order to provision, operate, manage, and maintain telephone-number functionality for the Service. Telephone numbers may be provisioned, hosted, routed, or otherwise supported through third-party telecommunications and communications-infrastructure providers. Availability of specific telephone numbers, area codes, or local inventory is not guaranteed.
A payment failure or past-due account status may result in call-answering functionality being paused without immediately releasing an assigned telephone number. If a trial or subscription ends without any successful invoice payment greater than $0, an assigned provider-controlled telephone number may be released promptly following effective termination. If the account has a successful positive-payment history, the assigned number may generally be reserved for up to thirty (30) days after effective termination before release. A permanent account-closure request may result in immediate release of the assigned number.
Telephone-number release may be automated and is separate from the retention and deletion schedule applicable to Customer Data described elsewhere in this Privacy Policy.