Last Updated: April 24, 2026
Legal, Terms of Service & Privacy Policy
1. Terms of Service
Welcome to Isturya AI. These terms govern your use of our AI receptionist, digital marketing automation, and communication tools. By accessing our services, you agree to these terms. We provide AI-powered communication solutions including automated call handling, lead routing, and marketing automation. These services rely on cutting-edge AI processing and third-party SaaS integrations.
- Users must maintain secure credentials and provide accurate business information.
- Acceptable use includes legitimate business communications; any use for harassment, spam, or illegal activities is strictly prohibited.
- We utilize third-party SaaS providers for hosting and processing. While we maintain high uptime, we are not liable for outages caused by third-party infrastructure.
- Liability is limited to the fees paid during the preceding month. Terms are governed by the laws of Texas, USA.
2. TCPA & Compliance
Compliance with the Telephone Consumer Protection Act (TCPA) is a joint responsibility. As the technology provider, Isturya AI facilitates communications, but the user remains the legal 'sender' of messages. Users must obtain prior express written consent before using our tools for automated outreach or SMS marketing.
- For SMS, users must honor 'STOP' requests immediately.
- For voice calls, an automated opt-out mechanism must be provided.
- Isturya AI is not responsible for misuse or failure to maintain records.
- Professional compliance requires clear opt-in and opt-out flows at all times.
3. Call Recording & AI Disclosure
Our services include the recording and transcription of calls for quality assurance and AI processing purposes. In many jurisdictions, you are required to disclose that a call is being recorded. Users are responsible for configuring appropriate greetings that notify callers of recording according to local laws.
- Calls and messages may be recorded and transcribed for service delivery.
- Users must obtain consent where required by state or federal law.
- When an AI agent is responding, it must be clearly disclosed to the caller.
- Transparency is maintained through automated disclosures and AI-identity prompts.
4. Privacy Policy
We take data privacy seriously. Data is processed for service delivery, AI modeling, and analytics. We share data with trusted third-party SaaS providers necessary for hosting and AI computation. We do not sell your data to third-party marketers and maintain high security standards.
- Collected Data: Names, phone numbers, transcripts, and analytics.
- Data Use: Service delivery, AI processing, and marketing optimization.
- User Rights: You may request access, deletion, or correction of your data at any time.
- Retention: We retain data only as long as necessary for the provision of services.
5. Cookies & Tracking
We use cookies and similar tracking technologies to enhance your experience and analyze our performance. These tools help us understand how you interact with our platform and allow us to optimize our service delivery and marketing efforts accordingly.
- Essential cookies for platform security and functionality.
- Analytics tools for performance tracking and user flows.
- Tracking pixels for marketing optimization and attribution.
- You can manage your cookie preferences through your browser settings.
6. Data Processing Agreement
For business clients, Isturya AI acts as the Data Processor, and the Client acts as the Data Controller. We process personal data only on documented instructions from the Controller and maintain rigorous security measures to prevent unauthorized access or data breaches.
- Roles: Customer = Controller, Isturya AI = Processor.
- Scope: Processing for call handling, scheduling, and lead management.
- Subprocessors: Limited list of trusted cloud and AI service providers.
- Notifications: Immediate notification of any confirmed data breach.
Last Updated: April 24, 2026
Additional Legal Information
Communications Policy & TCPA Compliance
All users of the Company's AI marketing and communications tools must strictly adhere to the Telephone Consumer Protection Act (TCPA) and related telecommunications regulations. As a service provider, we facilitate your communications but do not assume responsibility for the underlying compliance status of your contact lists.
Prior Express Written Consent
Users are required to obtain prior express written consent from any individual before initiating SMS, calls, or automated outreach through our platform. This consent must be clearly documented and explicitly state that the recipient agrees to receive automated marketing communications.
Opt-Out Mechanisms & Requirements
- SMS Opt-Out: Recipients must be able to stop communications by replying 'STOP' or similar keywords. These requests must be honored immediately.
- Voice Opt-Out: Automated calls must provide a clear mechanism for the recipient to opt-out of future communications.
- Automated Synchronization: Our system will automatically blacklist numbers that have opted out, but it remains the user's primary responsibility to reconcile these against their external CRM systems.
Provider Disclaimer
The Company acts solely as a technology provider. We do not provide legal advice regarding the legality of your specific outreach campaigns. The Company shall not be held liable for any misuse of the platform that leads to TCPA violations, fines, or legal action. It is recommended that you consult with legal counsel to ensure your outreach strategies meet all local and federal regulations.
Call Recording & AI Disclosure
We prioritize transparency in all communications. This section outlines our practices regarding the recording of interactions and the utilization of Artificial Intelligence to provide our services.
Interaction Recording
- All calls and messages handled by our platform may be recorded and transcribed for quality assurance, training, and service optimization.
- Users are responsible for disclosing the recording of calls to all parties and obtaining necessary consent as required by applicable state and federal laws.
- Our platform provides automated tools to assist with disclosure, but ultimate compliance remains the responsibility of the account holder.
AI Utilization Disclosure
- Artificial Intelligence may respond directly to customers via voice or text to provide immediate assistance and scheduling services.
- The use of AI in customer interactions must be clearly disclosed where required by law.
- Our AI is designed to augment human operations, and transcripts are made available to human representatives to ensure continuous quality and accurate data processing.
Cookies & Tracking
We use cookies and similar tracking technologies to analyze trends, administer the website, track users’ movements around the website, and to gather demographic information about our user base as a whole.
Essential & Analytical Cookies
We use essential cookies to maintain site security and functionality. Analytical tools and tracking pixels are employed to monitor site performance and optimize the user journey, ensuring our AI receptionist solutions are meeting your business needs efficiently.
Marketing Optimization
We use pixels and performance tracking tools to measure the effectiveness of our marketing campaigns. This helps us ensure that our AI marketing solutions are being shown to the right business owners at the peak of their interest.
Managing Your Preferences
Most web browsers allow you to control cookies through their settings preferences. However, please note that if you limit the ability of websites to set cookies, you may worsen your overall user experience, as it will no longer be personalized to you.
Data Processing Agreement
This Data Processing Agreement ("DPA") is an integral part of the service agreement between you (the "Controller") and our company (the "Processor"). It outlines the technical and organizational measures we implement to protect your data.
1. Roles and Scope
The Customer acts as the data controller, and the Company acts as the data processor. We process personal data only on documented instructions from the controller for the purposes of providing AI receptionist and marketing automation services.
2. Subprocessors
Controller acknowledges and agrees that Processor may use third-party subprocessors to fulfill its obligations. We maintain a list of all subprocessors and ensure they are bound by data protection obligations as restrictive as those in this DPA.
3. Data Protection Measures
We implement appropriate technical measures to ensure security, including encryption of data at rest and in transit, access controls, and regular vulnerability assessments.
4. Breach Notification
In the event of a personal data breach, Processor will notify Controller without undue delay, providing relevant details to help the Controller fulfill their regulatory obligations.
5. Data Deletion
Upon termination of services, we will delete or return personal data to the Controller in accordance with the terms of the main service agreement, unless prohibited by applicable law.