Privacy Policy

About Zonobly

Zonobly Inc. ("Zonobly", "we", "us", or "our") is a Canadian artificial intelligence operations platform that provides AI-powered voice agents, SMS automation, and workflow tools to small and medium-sized businesses. Zonobly Inc. is incorporated federally under the Canada Business Corporations Act (CBCA), Corporation Number 1805676-5, CRA Business Number 769388976 RC0001, and operates in compliance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation.

Information we collect

We collect information you provide directly (account details, business info, payment data) and information generated through your use of the service (call logs, transcripts, usage metrics).

How we use it

To operate the AI voice agent, deliver booked appointments, send notifications, process payments, and improve the product.

A valid payment card is required at signup, including for the 14-day free trial. Card details are collected and stored by Stripe, not by Zonobly. Unless you cancel before the end of day 14, your card is charged automatically when the trial ends and each month thereafter — see the Free Trial & Automatic Renewal section of the Terms of Service.

Sharing

We do not sell personal information. We share information with trusted third-party service providers solely as necessary to operate and secure our platform:

• Cloud Infrastructure & Hosting — storing account records, call logs, and application data securely.
• Telecommunications & SMS — routing phone calls and delivering automated text notifications.
• Voice Processing & Speech Recognition — converting spoken audio into text and generating natural-sounding voice responses during calls.
• AI Language Processing — understanding caller intent and generating automated conversational responses.
• Payment Processing — securely processing subscription payments under PCI-DSS standards.
• Transactional Email — sending account updates, receipts, and system notifications.

All third-party service providers are contractually restricted to using this information only to provide their specific service to us, and are prohibited from using it for any other purpose.

Data residency

Zonobly is a Canadian company, and all customer business records — including customer and appointment details, call transcripts, and any connected third-party account credentials — are stored at rest exclusively in our Canadian database. However, delivering a real-time AI phone conversation requires momentarily routing call audio and transcripts through our AI infrastructure partners (voice processing, speech-to-text, the underlying language model, and text-to-speech), which — consistent with the rest of the industry — operate on U.S.-based infrastructure; email delivery is also handled by a U.S.-based provider. Limited internal system data, such as authentication records and diagnostic/error logs used to operate and troubleshoot the platform, is also processed and stored through U.S.-based infrastructure supporting our application platform. Data processed or stored in the United States may be subject to lawful access requests by U.S. authorities. We transfer personal information to these providers under contractual protections and only as needed to operate the service, consistent with PIPEDA's accountability requirements. If you have questions about cross-border data storage, contact privacy@zonobly.com.

Use of your data for AI training. We do not sell your data, use it for advertising, or use it to train any model of our own. We cannot, however, promise that none of our providers ever uses it to improve their models, and we would rather tell you that plainly than imply a guarantee we cannot enforce. Our AI language provider's commercial terms prohibit training on customer content, and our telecommunications provider does not use message or call content for model training unless a customer enables it. Our voice-agent orchestration provider's privacy policy states that call recordings, transcripts, and logs may be retained to help train and improve AI models. Our web-search provider's terms permit it to use queries submitted through its API for model training. Our text-to-speech provider takes a licence to use submitted content to improve its services by default. Our speech-to-text and transactional email providers do not publish a public position on the question. Where a provider offers a no-training or reduced-retention setting we turn it on, and we will state here when that changes. If your business needs contractual no-training commitments across the whole call path, write to privacy@zonobly.com before you start taking live calls. We can name the specific provider behind any category above on request.

Data protection and security measures

Zonobly applies technical and organizational safeguards to protect personal information, including sensitive categories of data such as health-related information handled on behalf of clinic customers:

• Encryption at rest. Third-party account credentials (for example, connected Google Calendar, QuickBooks, or other integration accounts) are stored using AES-256 encryption. Plaintext credentials are never stored.
• Encryption in transit. All data transmitted to and from Zonobly's services is encrypted using industry-standard TLS.
• Data isolation. Customer and business records are logically isolated at the database level so that one business's data can never be accessed by another business.
• Audit logging. Access to and changes made to sensitive health-related data are logged, including the identity of the accessing party and which fields were changed, to support accountability and incident response.
• Retention and deletion. Personal information is retained only for as long as necessary for the purposes described in this policy and is deleted or securely removed according to defined retention schedules.
• Payment data. Subscription payments are processed by Stripe in accordance with PCI-DSS standards; Zonobly does not store full payment card numbers.

Google Workspace API data use

Where Zonobly integrates with Google Workspace APIs (such as Google Calendar), the use of any raw or derived user data received from those APIs will adhere to the Google User Data Policy, including its Limited Use requirements.

Your rights

You may request access, correction, or deletion of your data at any time by emailing privacy@zonobly.com.

Contact Us

Zonobly Inc.
Corporation Number: 1805676-5
CRA Business Number: 769388976 RC0001
Privacy Officer
Email: privacy@zonobly.com
Website: zonobly.com
Ontario, Canada