Legal

Privacy Policy

Zvani answers a business's phone with an AI agent, can place calls on its behalf and shows the business what was said. This policy explains what personal data is involved, who decides about it, who else sees it and how long it is kept.

1. Who is responsible

Zvani is operated by LOFTION SIA, registration number 40203660739, Gunāra Astras iela 8B, Rīga, LV-1082, Latvia, info@zvani.lv.

Two different roles apply:

  • If you called a business that uses Zvani, or a business's agent called you, that business is the controller of your call. It decides why the call is recorded and how long it is kept, and must tell you so. We process the call only on its instructions, under a Data Processing Agreement. Ask that business about your data; if you write to us, we pass your request on.
  • If you are our customer, use the Zvani panel or app, or contact us, LOFTION SIA is the controller of your data, as described below.

2. What happens during a call

The business decides — and is responsible for — how its callers are told that they are speaking with an AI and that the call is recorded; Zvani agents can say both at the start of the call if the business turns this on. The conversation is processed live by an AI model to understand the caller and answer; the call is recorded and transcribed, and the transcript is summarised and scored so the business can see what happened and follow up. If the caller called before, the agent may see short summaries of earlier calls from the same number so they do not have to repeat themselves. Recordings are deleted automatically after 90 days; transcripts and summaries stay until the business deletes them or closes its workspace. Neither we nor our AI providers use calls to train AI models.

3. Data about our customers and their staff

DataWhyLegal basisHow long
Account: name, email, password (hashed), role, sign-in times, Google or Microsoft identity if you sign in with themTo give you access and secure your accountContractWhile the account exists
Acceptance of our terms: version, time, IP address, browserTo prove what was agreedLegitimate interest; legal obligationAs long as claims under the contract can be made
Billing: company or personal name, address, registration and VAT numbers, invoices, balance historyTo take payment, invoice and keep accountsContract; legal obligationAs accounting law requires (up to 5 years after the year ends)
Mobile app: device token, notification settings, languageTo send the push notifications you chooseContractUntil you sign out or delete the account
Technical logs: IP address, browser, errors, failed sign-insTo keep the service secure and fix faultsLegitimate interestA few weeks
Messages you send us, the contact form: name, email, company, phone, messageTo answer you and, if you ask, arrange a demoLegitimate interest; steps before a contractUp to 2 years after the last contact

We send service email (sign-in links, invitations, balance warnings, alerts you set up). We do not send marketing email without your consent, do not sell data and do not make decisions about you by automated means alone.

4. Who else sees the data

Only the providers that help us run Zvani, each bound by contract: hosting, AI models, telephony, email and push notifications. The full list, with locations, is on the Subprocessors page. Messages from the contact form reach our team by email and in a Telegram chat. Payments are handled by Stripe as an independent controller. We disclose data to authorities only when the law requires it.

5. Where the data is stored

Our servers, database, recordings and backups are in the European Union. Some providers, mainly AI and telephony, may process data in the United States; such transfers rely on the EU–US Data Privacy Framework or the European Commission's Standard Contractual Clauses.

6. The mobile app

The Zvani app shows a business's calls to its staff. It stores your sign-in, language choice and the email you last signed in with on the device, and uses Firebase Cloud Messaging to deliver notifications. It contains no advertising or tracking. You can delete your account in the panel under your profile.

7. Cookies

We use only cookies and browser storage that are strictly necessary: to keep you signed in, to protect sign-in with Google or Microsoft, and to remember your language and display choices. No analytics or advertising cookies. Details are on the Cookies page.

8. Security

Data is encrypted in transit, each customer's data is separated, access is limited by role and API keys and passwords are stored only as hashes. The measures are listed in Annex 2 of the Data Processing Agreement.

9. Your rights

You may ask for access to your data, a copy in a portable format, correction, erasure, restriction, or object to processing based on legitimate interest. You can delete your own account in the panel. Write to info@zvani.lv; we answer within one month. If you are a caller, the business you called answers for your call data.

You may also complain to the Latvian Data State Inspectorate (Datu valsts inspekcija), dvi.gov.lv, or the authority where you live.

10. Changes

If this policy changes in a way that matters, we tell customers by email and in the panel before the change takes effect. The date at the top shows the version in force.