Privacy Policy

PremiumClients.ai ("we", "us", "our") operates the Aria AI voice agent platform. This Privacy Policy explains how we collect, use, store, and protect your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and applicable data protection laws.

This policy applies to all users of our website, platform, and voice agent services across the European Union and European Economic Area.

The data controller responsible for your personal data is: PremiumClients.ai, registered in Cyprus (EU). Contact: [email protected]. Data Protection Officer: [email protected].

Account Data: When you register, we collect your name, email address, company name, phone number, and billing information necessary for providing our services.

Voice Call Data: Our AI voice agent processes call recordings, transcripts, caller phone numbers, call duration, timestamps, and appointment scheduling details on behalf of our clients (data controllers).

Usage Data: We automatically collect IP addresses, browser type, device information, pages visited, and interaction patterns for service improvement and security purposes.

Communication Data: When you contact us via our website form, we collect the information you provide including name, email, company, industry, and any message content.

Contract Performance (Art. 6(1)(b) GDPR): Processing necessary to provide our AI voice agent services, manage your account, and fulfill our contractual obligations.

Legitimate Interests (Art. 6(1)(f) GDPR): Processing for service improvement, security monitoring, fraud prevention, and business analytics where our interests do not override your rights.

Consent (Art. 6(1)(a) GDPR): Where we process data based on your consent, such as for marketing communications and non-essential cookies. You may withdraw consent at any time.

Legal Obligation (Art. 6(1)(c) GDPR): Processing necessary to comply with EU and national legal requirements, including tax, accounting, and regulatory obligations.

We process your personal data to: provide and operate the Aria AI voice agent platform; process voice calls, generate transcripts, and schedule appointments; manage your account and subscription; process payments through our payment processor (Stripe); send transactional emails related to your account; provide customer support; improve our services and AI capabilities; ensure platform security and prevent fraud; comply with legal obligations.

We do not use personal data for automated decision-making that produces legal effects, nor do we engage in profiling as defined under Article 22 GDPR.

We share personal data only with trusted third-party processors who are contractually bound to process data solely on our instructions and in compliance with GDPR. Our current sub-processors include: LiveKit Inc. (voice infrastructure and real-time communication), Stripe Inc. (payment processing), SendGrid/Twilio (transactional email delivery), and cloud infrastructure providers operating within the EU.

We do not sell, rent, or trade your personal data to any third party for their own marketing purposes.

We prioritize processing and storing data within the EU/EEA. Where data must be transferred to processors outside the EEA (e.g., for payment processing via Stripe), we ensure adequate protection through: EU Standard Contractual Clauses (SCCs) as approved by the European Commission; adequacy decisions by the European Commission; or supplementary technical and organizational measures.

All voice data is processed and stored on servers located within the European Union.

We retain personal data only for as long as necessary: Account data is kept for the duration of your subscription plus 30 days for data portability. Call recordings and transcripts are retained for 90 days unless the client specifies a different period. Analytics and usage data is retained for 12 months. Billing records are kept for 7 years as required by EU tax law.

Upon account deletion or contract termination, we securely delete or anonymize all personal data within 30 days, except where retention is legally required.

You have the following rights regarding your personal data: Right of Access (Art. 15) — obtain a copy of your data and information about how it is processed. Right to Rectification (Art. 16) — correct inaccurate or incomplete data. Right to Erasure (Art. 17) — request deletion of your data ("right to be forgotten"). Right to Restriction (Art. 18) — restrict processing in certain circumstances. Right to Data Portability (Art. 20) — receive your data in a structured, machine-readable format. Right to Object (Art. 21) — object to processing based on legitimate interests. Right to Withdraw Consent (Art. 7(3)) — withdraw consent at any time for consent-based processing.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

If you believe your data protection rights have been violated, you have the right to lodge a complaint with your national Data Protection Authority or the Office of the Commissioner for Personal Data Protection in Cyprus.

We use cookies and similar technologies on our website. For detailed information about the cookies we use, their purposes, and how to manage your preferences, please refer to our Cookie Policy.

We implement appropriate technical and organizational measures to protect your personal data, including: encryption in transit (TLS 1.3) and at rest; strict access controls and authentication; regular security assessments and penetration testing; audit logging of all data access; incident response and breach notification procedures.

While we employ industry-standard security measures, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security of your data.

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child under 16, we will take steps to delete it promptly.

We may update this Privacy Policy to reflect changes in our practices or legal requirements. Material changes will be communicated via email or a prominent notice on our platform at least 30 days before they take effect.

For questions, requests, or complaints regarding this Privacy Policy or our data processing practices, contact us at: [email protected].

Data Protection Officer: [email protected]. PremiumClients.ai, Cyprus, European Union.