Privacy Policy

Account data — email and authentication identifiers needed to create and secure your account.

Your business profile — the business details you enter (name, services, hours, location, links), so every tool works from one profile.

Your customers' contacts & messages — when you use the inbox, website chat, phone line or campaigns, we store the customer contacts and messages you capture so you can follow up. You are the controller of that data; we process it only to provide the service to you (see “Your customers' data” below).

SMS permission & campaign records — the permission state, when and how permission was collected, your proof note, opt-out time, the reviewed campaign audience, the exact message, the final four digits of each destination, delivery status, replies and outcomes. This keeps a record of what you approved, without treating an inbound enquiry as marketing consent.

Uploaded documents — files you add as knowledge are turned into searchable text so answers can draw on them; the original file is not kept.

Usage & metering — per-run token and cost records that power the run history you see in-product and accurate billing.

Billing data — processed by our payments processor; we store only the minimum needed to operate subscriptions and never store full card numbers.

Content you submit — prompts, inputs and connected-account data you provide to run a workflow or render, plus the generated outputs.

To operate, secure, meter and bill the products you use; to provide the durable, auditable run history; to prevent abuse; and to communicate service information. We do not sell personal data and do not use your content to train third-party foundation models.

When you capture your customers' contact details and messages through Frontage, you are their data controller and Airez AI is your processor. You are responsible for having a lawful basis and the consent you need to contact them, including express consent before sending marketing SMS or WhatsApp messages. Frontage holds back messages where SMS permission is unknown or withdrawn, keeps the permission record from the time you reviewed a campaign, checks eligibility again before delivery, and records STOP and START replies.

Airez AI runs on top of model providers (e.g. OpenAI, Anthropic, Google); a payments processor for billing; the messaging providers you connect, to send on your behalf; object storage for generated assets; and cookieless analytics. Content sent to a provider is processed under that provider's terms solely to fulfil your request.

Renders and workflow outputs are stored on object storage and served only via signed, expiring URLs. Traces are durable and portable so you can audit and export your own runs.

Account, profile and billing records are kept while your account is active and as required for legal and accounting obligations. You can edit or delete your business profile, knowledge and captured contacts in the product, and request deletion of your account data. SMS opt-out state is kept while the customer record remains, so later campaigns keep skipping that number; campaign approval and delivery records are kept with the workspace for audit and export. Trace retention follows your plan.

Subject to applicable law (including GDPR and CCPA), you may request access, correction, export or deletion of your personal data, and object to or restrict certain processing. Contact privacy@airezai.com and we will respond within the statutory period.

The marketing site uses privacy-first, cookieless analytics — no advertising trackers and no cross-site cookies — so no consent banner is required to browse it. The Frontage app sets a strictly-necessary session cookie only when you sign in.

Encryption in transit and at rest, least-privilege access, connected-account tokens kept encrypted and out of client code, each signed-in owner's data kept separate, rate limits on public endpoints, and metered AI usage you can see. More detail on the security page.

Some outputs (content, replies, phone and chat answers) are written by AI and may be imperfect — review them before you publish or send. Where an AI assistant speaks to your customers, it says that it is AI, in line with the EU AI Act.

Data may be processed in regions where we or our processors operate, with appropriate safeguards. The products are not directed to children under 16.

We will post material changes here with an updated date. Some products are in Beta and this policy may evolve as they reach general availability — changes will be dated and announced, never silent. Questions: privacy@airezai.com.