Privacy policy

Data controller

Dewul is operated by Samic Ventures LLC, a Wyoming limited liability company. Privacy inquiries: info@dewul.com.

What we collect

• · Account email address.
• · Password hash (we never see or store the plaintext).
• · Organization name and onboarding details (industry, country, language).
• · Call transcripts produced by the AI receptionist.
• · Booking details collected on calls (customer name, phone, service, scheduled time, notes).
• · Usage data: minutes consumed per billing period, audit log of administrative actions.

How we use it

• · To operate the receptionist on your behalf and route inbound calls.
• · To classify call topics, sentiment, language and emergency status.
• · To embed your FAQs and documents so the receptionist can answer from them.
• · To bill you and detect abuse.
• · To send transactional email (sign-in, password reset, booking confirmations, escalations) — never marketing.

Call recording & AI disclosure

Calls answered by the AI receptionist begin with a spoken disclosure that the caller is speaking with an AI assistant and that the call may be recorded. This disclosure is mandatory and cannot be disabled by the business. Where the law of the caller's or business's jurisdiction requires all-party consent to record, continuing the call after this disclosure constitutes consent; callers who do not consent may hang up or ask to speak with a person. Businesses using Dewul are responsible for any additional notices their local law requires.

Subprocessors

We share data with a small number of vendors strictly to deliver the service:

• · Telephony & messaging — phone-number provisioning, voice call routing, recording storage, transcription, SMS.
• · Speech & language AI — transcription, voice synthesis, and call classification / summaries, under no-training-on-customer-data terms.
• · Cloud hosting — runs the application and stores its data.
• · Email delivery — transactional email only (never marketing).
• · Payments — subscription billing; full card numbers are handled by the payment processor, never by Dewul.

All providers operate in the United States. The current itemized list of named providers is available on our Subprocessors page and on request.

Retention

• · Call audio recordings: 90 days, then permanently deleted.
• · Call transcripts (turn-by-turn): 90 days, then permanently deleted. AI call summaries: retained for the life of the account.
• · Booking and CRM data: retained for the life of the account; deleted within 7 days of account closure.
• · Audit logs: 12 months for the active account; deleted with the account.
• · Webhook event payloads: 30 days for replay and debugging.

Your rights

You can request access to your data, deletion of your account and all associated records, or a portability export (machine-readable JSON) by emailing info@dewul.com. Requests are honored within 30 days. Deletion requests are irreversible — we'll confirm by email before purging.

GDPR & CCPA

For end-caller data, our business customers are the controller and Dewul is the processor — see our Data Processing Agreement. For EU/UK residents, our legal bases are performance of contract and legitimate interests; international transfers rely on the Standard Contractual Clauses. For California residents (CCPA/CPRA): we do not sell or share personal information, we do not use it for cross-context behavioral advertising, and you may exercise your rights to know, delete, and correct by emailing us. We do not discriminate against you for exercising any privacy right.

Cookies

We use strictly-necessary cookies only (sign-in and security). No tracking or advertising cookies. See our Cookie Policy.

Security

Passwords are stored as bcrypt hashes (cost 12). Application traffic is HTTPS-only, the database is not publicly reachable, and access is least-privilege. All vendor connections use TLS.

Changes

We'll post a notice on this page (and, for material changes, email account owners) at least 14 days before any change takes effect.