This Privacy Policy explains how NEDZO LLC, a Delaware limited liability company ("Nedzo," "we," "us," or "our"), collects, uses, shares, and protects personal information. It covers our websites, including nedzo.ai (the "Site"), the Nedzo application, our APIs, and all related products and services (together, the "Services").
Nedzo is a platform businesses use to run AI voice, SMS, email, and chat agents. The Services are built for business use. Terms in capitals that this policy does not define, such as "Account," "Customer Content," "Customer Communications," and "Aggregated Data," have the meanings given in our Terms of Service.
Our Two Roles
When Nedzo decides how data is used. For information about our customers, their users, people who visit the Site, and people who contact us or apply for a trial, Nedzo decides why and how the information is used. Under laws such as the GDPR, Nedzo is the "controller" of this information.
When Nedzo processes data for a customer. When a business uses Nedzo to talk to its own callers, leads, patients, or clients, that business decides why and how their information is used. This includes call audio, recordings, transcripts, messages, contact lists, and data our agents collect during a conversation. For this information, Nedzo is a "processor" or "service provider" and acts only on the customer's instructions and under our agreement with that customer.
If you spoke with an AI agent that a business runs on Nedzo, that business is responsible for your information. Its privacy notice applies, and you should send privacy requests to that business. If you contact us, we will pass your request to the business and help it respond.
Information We Collect
Information You Give Us
- Account information: your name, email address, phone number, company name, job title, password, and the details of each workspace you create.
- Billing information: your billing name, billing address, and plan details. Payments are handled by our payment processor, Stripe. Nedzo does not store full card numbers.
- Communications: information you share when you book a call, contact support, answer a survey, or join a webinar.
Information We Collect Automatically
When you visit the Site or use the Services, we automatically collect information about your device. This includes your web browser, IP address, time zone, the pages you view, the sites or search terms that referred you, and how you interact with the Site. We call this "Device Information." We collect it using these technologies:
- "Cookies" are data files placed on your device that often include an anonymous unique identifier. To learn more about cookies and how to disable them, visit http://www.allaboutcookies.org.
- "Log files" record actions on the Site and Services, including your IP address, browser type, internet service provider, referring and exit pages, and date and time stamps.
- "Web beacons," "tags," and "pixels" record information about how you browse the Site.
Customer Content and Customer Communications
When a customer uses the Services, Nedzo processes on the customer's behalf:
- Call audio, call recordings, and transcripts.
- SMS, email, web chat, WhatsApp, Facebook Messenger, and Instagram messages.
- Contact lists, phone numbers, and email addresses the customer uploads or connects.
- Information collected during a conversation, such as a caller's name, contact details, the reason for the call, and booked appointment times.
- Prompts, scripts, knowledge base documents, and workflow settings.
We process this information as described in "Our Two Roles" above.
Information From Integrations and Partners
When a customer connects a third-party service, such as GoHighLevel, Pipedrive, Google Calendar, Calendly, Cal.com, Slack, Zapier, Make, or n8n, we receive the information that service sends us, at the customer's direction. We may also receive information from advertising and analytics partners, as described below.
How We Use Information
We use the information we collect to:
- Provide, run, and support the Services, including placing and answering calls, sending messages, booking appointments, and syncing data with connected services.
- Create and manage Accounts, process payments, and send invoices and service notices.
- Keep the Services secure, and detect and prevent fraud, abuse, and violations of our Terms of Service.
- Measure and improve the Site and the Services, including with Aggregated Data.
- Communicate with you, and, where the law allows and in line with your preferences, send you information about our products and services.
- Comply with the law and enforce our agreements.
AI and Your Data
Nedzo runs its agents using AI models from third-party providers. We use OpenAI, Anthropic, and Moonshot AI (Kimi) for language models, Deepgram for speech-to-text, and ElevenLabs and Telnyx for text-to-speech. Telnyx also carries our calls. These providers process Customer Content only to deliver the Services.
We do not use Customer Content to train AI models. Our contracts with our AI providers prohibit them from training their models on it.
We may create and use Aggregated Data, which cannot identify a customer or any person, to run and improve the Services.
Call Recording and Transcripts
Customers choose whether calls are recorded and transcribed. Laws in some places require everyone on a call to consent to recording. Under our Terms of Service, each customer is responsible for giving any required notices and getting any required consents before Nedzo records, transcribes, or sends a communication on its behalf. This includes consents required by the Telephone Consumer Protection Act and the CAN-SPAM Act.
Advertising and Conversion Tracking
We use advertising and analytics technologies from third parties, including Meta Platforms, Inc. ("Meta") and Google, to measure our advertising, understand how people use the Site, and improve our marketing.
We may share certain information with Meta through the Meta Pixel and the Meta Conversions API. This can include contact information you give us (such as your email address or phone number, which may be hashed before it is sent), your IP address, browser and device information, advertising identifiers, and actions you take on our websites or Services, such as submitting a form, creating an account, starting a trial, or making a purchase. Meta may process this information under its own privacy terms.
We use Google Analytics to understand how visitors use the Site. You can read how Google uses information at https://www.google.com/intl/en/policies/privacy/ and opt out of Google Analytics at https://tools.google.com/dlpage/gaoptout.
Where the law requires it, we ask for your consent before we use these technologies or send data for advertising. These advertising and analytics technologies apply to the Site and our marketing. We do not use Customer Content or Customer Communications for advertising.
How We Share Information
We share information only as described in this policy:
- Service providers and subprocessors that help us run the Services, such as cloud hosting, telephony carriers, messaging and email delivery, AI model providers, payment processing, and customer support tools. They may use information only to provide services to us. Our current list of subprocessors is in our Trust Center at trust.nedzo.ai/subprocessors.
- Services a customer connects. When a customer connects an integration, we send it the information the customer directs us to send.
- Advertising and analytics partners, as described in "Advertising and Conversion Tracking."
- Legal and safety reasons. We may share information to comply with the law, respond to a subpoena, search warrant, or other lawful request, or protect the rights, property, and safety of Nedzo, our customers, or others.
- Business transfers. If Nedzo is involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that deal.
- With your consent or at your direction.
We do not sell personal information for money. Under some US state laws, using advertising technologies such as the Meta Pixel can count as "selling" or "sharing" personal information for cross-context behavioral advertising. To opt out, email support@nedzo.ai. We also treat a Global Privacy Control signal from your browser as an opt-out.
Health Information
Some customers use Nedzo in healthcare. When a customer that is a covered entity under HIPAA signs a Business Associate Agreement with Nedzo, we handle protected health information as a business associate under that agreement. Every Nedzo plan can sign a Business Associate Agreement. To request one, email support@nedzo.ai. Customers must not send protected health information through the Services until a Business Associate Agreement is in place.
Security
Nedzo is SOC 2, HIPAA, ISO 27001, and GDPR compliant, and we monitor our controls continuously through Sprinto. We use administrative, technical, and physical safeguards to protect information, including encryption in transit and at rest, and access controls. No system is perfectly secure, so we cannot guarantee absolute security. Our Trust Center at trust.nedzo.ai shows our security controls and policies.
If you believe your Account or information has been compromised, contact us right away at security@nedzo.ai.
International Transfers
Nedzo is based in the United States. We and our service providers process information in the United States and Canada, and may process it in other countries where our providers operate. Customer Content from customers in the European Economic Area and the United Kingdom is stored in-region. Our subprocessors may process it outside the region to deliver the Services, under the safeguards below. When we transfer personal information out of the European Economic Area, the United Kingdom, or Switzerland, we use safeguards the law recognizes, such as the European Commission's Standard Contractual Clauses.
Legal Bases for Processing
If you are in the European Economic Area, the United Kingdom, or Switzerland, we process your personal information on these legal bases:
- Contract: to provide the Services and manage your Account.
- Legitimate interests: to secure, measure, and improve the Site and the Services, and to market our Services to businesses, where those interests are not outweighed by your rights.
- Consent: for advertising cookies and pixels where the law requires consent. You can withdraw consent at any time.
- Legal obligation: to comply with the law.
Data Retention
We keep personal information only as long as we need it for the purposes in this policy:
- Account and billing information: for as long as your Account is active. We delete it within 90 days after your Account closes, except records we must keep longer for legal, tax, and accounting reasons.
- Customer Content and Customer Communications: according to the customer's settings and our agreement with the customer. After an Account ends, we delete this information within 90 days, unless the law requires us to keep it.
- Device Information: for up to 90 days.
Your Privacy Rights
Depending on where you live, you may have the right to:
- Access the personal information we hold about you and get a copy of it.
- Correct personal information that is wrong or incomplete.
- Delete your personal information.
- Object to or restrict certain processing, and withdraw consent you gave.
- Receive your information in a portable format.
- Opt out of the "sale" or "sharing" of personal information, and of targeted advertising.
- Not be treated differently for using these rights.
To use these rights, email support@nedzo.ai. We will verify your request and respond within the time the law requires. You may use an authorized agent where the law allows. If you are in the European Economic Area or the United Kingdom, you also have the right to complain to your local data protection authority.
If your information came to Nedzo through one of our customers, for example because you spoke with an AI agent a business runs on Nedzo, please send your request to that business. We will help it respond.
Do Not Track and Global Privacy Control
We do not change how the Site collects and uses data when your browser sends a Do Not Track signal. We do honor Global Privacy Control signals. When your browser sends one, we treat it as a request to opt out of the sale or sharing of your personal information.
Children
The Services are not intended for anyone under 18, and we do not knowingly collect personal information from children. If you believe a child has given us personal information, contact us and we will delete it.
Changes to This Policy
We may update this Privacy Policy to reflect changes to our practices or for legal, operational, or regulatory reasons. We will change the "Last Updated" date at the top. If we make material changes, we will tell customers by email or in the Services before the changes take effect.
Contact Us
If you have questions about this Privacy Policy or our privacy practices, or want to make a complaint, contact us:
NEDZO LLC Attn: Privacy 254 Chapman Rd, Ste 208 #15526 Newark, Delaware 19702 United States Email: support@nedzo.ai Security: security@nedzo.ai