Privacy Policy

Askappel is an AI voice receptionist service for restaurants, operated by Genesis Optimisation. This Privacy Policy explains how we collect, use, and protect your personal data when you use our platform.

For any privacy-related requests, contact us at: privacy@genesis-optimisation.com

We collect the following categories of personal data:

• Account data: email address, encrypted password, organization name.
• Call data: caller phone numbers, call duration, timestamps, call status, and optional recording URLs.
• Transcript data: text transcripts of conversations between callers and the AI agent.
• Order data: items ordered by callers, caller phone numbers, order notes.
• Configuration data: agent settings, menus, opening hours, knowledge base content you provide.
• Twilio credentials: if provided, stored encrypted (AES-256-GCM) and never exposed in plaintext.

We process your personal data on the following legal bases under the GDPR:

• Performance of a contract (Art. 6(1)(b)): processing necessary to provide the service you signed up for.
• Legitimate interests (Art. 6(1)(f)): service improvement, fraud prevention, and security.
• Legal obligation (Art. 6(1)(c)): where required by applicable law.

• Providing, operating, and maintaining the Askappel platform.
• Processing and routing incoming phone calls to your AI agent.
• Logging calls, transcripts, and orders in your dashboard.
• Sending service notifications (no marketing emails without consent).
• Detecting and preventing fraud or abuse.

We retain your data for as long as your account is active. Specifically:

• Call logs and transcripts: retained for 12 months, then automatically deleted.
• Orders: retained for 24 months for accounting purposes.
• Account data: retained until account deletion.
• Upon account deletion, all personal data is permanently erased within 30 days.

We do not sell your personal data. We share data only with:

• Twilio Inc.: for telephony services (call routing and recording). Twilio acts as a sub-processor.
• OpenAI: for AI language model processing of call transcripts. Prompts are not used for model training.
• AWS: for cloud hosting and text-to-speech (Amazon Polly).
• Cartesia AI: for text-to-speech synthesis (for English and Dutch).
• Deepgram Inc.: for speech-to-text processing of caller audio in real-time.
• Hetzner Online GmbH: for VPS hosting and data storage infrastructure.

All processors are bound by appropriate data processing agreements.

Some of our sub-processors (OpenAI, AWS, Twilio, Cartesia) are based in the United States. Transfers are covered by Standard Contractual Clauses (SCCs) as approved by the European Commission, or other lawful transfer mechanisms.

If you are located in the European Economic Area, you have the following rights:

• Right of access — request a copy of your personal data.
• Right to rectification — correct inaccurate data.
• Right to erasure — request deletion of your data ("right to be forgotten").
• Right to restriction — limit how we process your data.
• Right to data portability — receive your data in a machine-readable format.
• Right to object — object to processing based on legitimate interests.

To exercise any of these rights, email privacy@genesis-optimisation.com. We will respond within 30 days. You also have the right to lodge a complaint with your national data protection authority.

We implement appropriate technical and organisational measures including AES-256-GCM encryption for sensitive credentials, TLS in transit, access controls, and regular security reviews. No system is perfectly secure; in the event of a breach we will notify affected users and relevant authorities as required by law.

We use only essential session cookies required for authentication. We do not use tracking or advertising cookies.

We may update this policy periodically. We will notify you by email at least 14 days before significant changes take effect. Continued use of the service after that date constitutes acceptance.

Genesis Optimisation
Email: privacy@genesis-optimisation.com