Privacy Policy

1. Introduction

HostEcho.ai ("we," "our," or "us") is operated by Thriving Era Ltd, a company registered in the United Kingdom. We are committed to protecting your privacy and personal data.

2. Data We Collect

We collect the following types of information:

• Account Information: Email address, name, venue details
• WhatsApp Messages: Messages sent and received through your WhatsApp Business account
• Usage Data: Analytics on message volume, response times, and system performance
• Payment Information: Processed securely through Stripe (we do not store card details)

3. How We Use Your Data

Your data is used to:

• Provide and improve our AI receptionist service
• Process WhatsApp messages and generate AI responses
• Analyze system performance and optimize response quality
• Handle billing and subscription management
• Send service updates and support communications

4. AI Processing

Your WhatsApp messages are processed using OpenAI (GPT-4o-mini) and Google Gemini AI to generate responses. We use a hybrid AI strategy where OpenAI is primary and Gemini serves as a fallback. Messages are sent securely to these providers' APIs and are not used to train their models.

5. Data Storage

Your data is stored securely in PostgreSQL databases hosted by Neon Serverless Postgres. All data is encrypted at rest and in transit.

6. Your Rights (GDPR)

Under GDPR, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate data
• Erasure: Request deletion of your data
• Portability: Export your data in a machine-readable format
• Objection: Object to certain data processing activities

To exercise these rights, contact us at privacy@hostecho.ai

7. Data Retention

We retain your data for as long as your account is active. After account deletion, data is retained for 30 days before permanent deletion, unless required by law to retain longer.

8. Data Sharing

We do not sell your personal data. We share data only with:

• OpenAI: For AI processing (GPT-4o-mini)
• Google: For AI fallback processing (Gemini API)
• Twilio: For WhatsApp Business API integration
• Stripe: For payment processing
• Neon: For database hosting

9. Security

We implement industry-standard security measures including encryption, secure authentication, and regular security audits to protect your data.

10. Contact Us

For privacy-related questions or to exercise your rights, contact us at:

Email: privacy@hostecho.ai
Company: Thriving Era Ltd
Jurisdiction: United Kingdom