Privacy Policy

At Annamal.ai, your privacy matters to us. This Privacy Policy explains what information we collect, how we use it, and the steps we take to keep it safe. We aim to be transparent and straightforward no complicated legal jargon.

1. Information We Collect

We collect information in the following ways:

• Account information your name, email address, and password when you register.
• Usage data pages visited, features used, session duration, and interactions with AI agents.
• Chat and prompt content messages and inputs you send to our AI agents, which are necessary to generate responses.
• Preferences and settings agent configurations, story preferences, and notification settings you choose.
• Payment information billing details processed securely through our payment provider. We do not store full card numbers on our servers.
• Device and technical data IP address, browser type, operating system, and similar technical identifiers collected automatically.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and improve the Annamal.ai platform.
• Process your messages and inputs through our AI systems to generate relevant responses and content.
• Personalise your experience for example, remembering your story preferences.
• Send transactional emails such as account verification and billing notifications.
• Monitor platform health, diagnose issues, and prevent abuse.
• Comply with legal obligations.

We do not sell your personal information to third parties for advertising purposes.

3. AI Processing & Large Language Models

Annamal.ai uses large language model (LLM) technology to power its AI agents. When you send a message or prompt to an agent, the text of that message is processed by our AI systems to generate a response.

To help us personalise and improve your experience, we may also pass relevant context such as your saved preferences (e.g. story genre and mood) along with your message when generating a response.

We take reasonable steps to minimise the amount of personal data sent to AI processing systems. We recommend that you avoid including sensitive personal information (such as financial details, passwords, or government ID numbers) in your chat messages.

Audio stories are generated using a text-to-speech system. The story text is processed to produce an audio file, which is then stored securely in your account.

4. Data Security

We take reasonable and industry-standard measures to protect your data. This includes:

• Encryption of data in transit using TLS/HTTPS.
• Secure, access-controlled storage for your account data and generated content.
• Time-limited, signed URLs for audio and file access these links expire automatically.
• Regular security reviews of our infrastructure.

No system is completely immune to risk, but we are committed to protecting your information and will notify you promptly in the unlikely event of a data breach that affects your account.

5. Data Retention

We retain your account information and generated content for as long as your account is active. If you close your account, we will delete or anonymise your personal data within a reasonable period, except where we are required to retain it for legal or regulatory purposes.

Chat history and generated stories may be retained to provide continuity of service and allow you to access past content. You may request deletion of specific content by contacting us.

6. Sharing of Information

We do not sell, rent, or trade your personal information. We may share it in limited circumstances:

• Service providers trusted third-party vendors (such as cloud infrastructure, payment processors, and email delivery services) that help us operate the platform. These providers are bound by confidentiality agreements and may only use your data as directed by us.
• Legal requirements if required by law, court order, or to protect the safety of our users or the public.
• Business transfers in the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction.

7. Cookies and Tracking

We use cookies and similar technologies to keep you logged in, remember your preferences, and understand how the platform is used. You can control cookie settings through your browser; however, disabling certain cookies may affect functionality.

We do not use third-party advertising trackers or sell your browsing behaviour to ad networks.

8. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data (“right to be forgotten”).
• Object to or restrict certain types of processing.
• Receive a copy of your data in a portable format.

To exercise any of these rights, please contact us at info@annamal.ai. We will respond within a reasonable timeframe.

9. Children’s Privacy

Annamal.ai does not knowingly allow children to create their own account, and most of the Service is not directed at children. However, one feature — the Bedtime Story Agent — lets an adult account holder enter information about a child (such as a name and age range) so that generated stories can be personalised. See Section 10.2 below for exactly what is collected, how it is used, and the current limitations of our consent process for that feature.

If you are a parent or guardian and believe a child has interacted with the Service directly, or that information about a child has been provided to us inappropriately, please contact us at info@annamal.ai and we will address it.

10. AI Agent-Specific Disclosures

Annamal.ai offers several AI-powered agents, each with different data practices depending on what it does. This section describes exactly what each agent collects, who it is shared with, and where relevant what protections are not yet in place, so you can make an informed choice about using it.

10.1 Naaledge (Chrome Extension)

The Naaledge Chrome extension lets a signed-in user chat with their organization’s AI agent from a browser side panel. It collects:

• The email and password you enter to sign in, sent to our authentication service to verify your identity. Your password itself is not stored by the extension.
• An access token and refresh token (JWT), and your account profile (user ID, account ID, email, name, role, status, permissions) stored in the browser’s local extension storage (chrome.storage.local) so you stay signed in.
• The text of the questions you type to the agent.
• A randomly generated session ID created when you open the side panel, used only to group the messages of one conversation together. It exists in memory for that session and is not saved to your device.

What we do not collect: the extension has no content scripts and cannot read the URL, title, content, or DOM of the pages you browse, and it does not access cookies from other websites or your general browsing history. It also does not use any analytics or tracking SDK.

Your chat questions are sent to our backend and forwarded to an internal agent service, which uses a third-party AI model provider to generate the response text.

10.2 Bedtime Story Agent

The Bedtime Story Agent generates personalised bedtime stories, optionally narrated as audio, based on information the account holder provides. It collects:

• A child’s name (labelled “Kids name”) and an age range you select, which can be as young as 0–3, entered by the adult account holder to personalise the story.
• Story preferences: mood, genre, language, narration voice, and story topics.
• The generated story text and, if you request narration, the generated audio file.
• An email address for scheduled story delivery. It defaults to the account holder’s own email but can be changed to any address.

Third parties involved in generating a story: the story prompt including the child’s name and age range is sent to OpenAI (model gpt-4o-mini) to generate the story text. The story text is sent to Google’s Gemini API to generate the narration audio. Generated audio is stored in Amazon S3, and story emails are sent via Amazon SES. Google Tag Manager is loaded across the site, including signed-in pages.

Secondary use: the child’s name entered for story personalisation is also sent to our internal customer-engagement system to track product usage. This is a separate use from story generation itself.

Public story sharing: if you use the “Share” feature on a story, we create a link that lets anyone who has it view the story text and audio without signing in. These links do not currently expire, and a shared story may contain the child’s name treat a share link as public once it’s created, and only share it with people you trust.

Retention: we do not currently have an automated deletion schedule for story text, story audio files, or the saved child/story preference data this information is kept until you ask us to delete it. To request deletion, contact us at info@annamal.ai.

Children’s data: entering a child’s name and age range is optional but required to personalise stories for that child. The product does not currently have an independent age-verification step or a separate parental-consent flow beyond the account holder choosing to enter this information. By providing a child’s information, the account holder confirms they are the child’s parent or legal guardian (or otherwise authorised to provide it) and is responsible for the accuracy and appropriateness of anything entered on the child’s behalf.

10.3 IVR (Phone/Voice) Agent

When a phone call is handled by our IVR Agent, we collect:

• The calling number (caller ID) and the business number that was dialed.
• A transcript of the conversation and an AI-generated summary.
• Answers to any intake questions the business has configured.
• If a booking is completed, your name, phone number, and the appointment time.
• If the business connects a calendar, OAuth tokens used to check availability and create events.
• Internal session metadata used to maintain the call.

We do not record or store the audio of calls handled live by the AI agent. That audio is streamed in real time to Google’s Gemini Live service to understand you and generate the agent’s spoken response, and is discarded once the call ends we do not keep a recording of these calls.

Voicemail is different: if a call goes unanswered outside business hours, the voicemail message is recorded and stored directly by our telephony provider (Twilio or Exotel, whichever is configured for that number) on their own systems. We do not access, download, or keep a copy of that recording ourselves. Voicemail recordings are governed entirely by that provider’s own policy: Twilio Privacy Notice or Exotel Privacy Policy, depending on which provider handles the number you called.

Disclosure: our IVR Agent does not currently play a notice at the start of a call stating that the call is being handled by an AI or that a voicemail may be recorded. If you directly ask whether you are speaking with an AI, the agent will answer honestly.

Retention: we do not currently have an automated deletion schedule for call metadata, transcripts, booking records, or calendar tokens this information is kept until you ask us to delete it. To request deletion, contact us at info@annamal.ai.

11. Third-Party Links

Our platform may contain links to third-party websites or services. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies independently.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the effective date at the top of this page. For significant changes, we will notify you via email or a prominent notice on the platform. Continued use of the Service after changes are posted constitutes your acceptance of the updated policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, please reach out to us at info@annamal.ai. We are happy to help.