Privacy Policy

Last updated: July 30, 2026

Vandio is operated by Sitovai Agency (Business ID 3638129-8, Finland). This policy describes what we process when you use the Service, and when your customers interact with your AI phone agent.

1. Data we process about you (the business)

  • Account data: name, email, login credentials.
  • Business profile: hours, services, prices, FAQs, tone, language, and contact details you configure (or import from your website).
  • Billing data: handled by Stripe — we never see full card numbers.

2. Data processed when the AI handles calls

When someone calls your AI number (or the AI places an outbound call), we process on your behalf:

  • Caller phone number, call time, and duration.
  • Call audio, its transcript, and an AI-generated summary.
  • Booking details the caller provides (name, phone number, requested service and time).
  • For outbound campaigns: your lead lists, consent records, do-not-call entries, and a compliance decision log.

For this data you are the data controller and we act as your processor. You are responsible for informing your callers about AI answering and call recording where required by the laws that apply to your business.

3. Sub-processors

  • Supabase — database and authentication (data hosting)
  • Vercel — application hosting
  • Vapi (incl. Deepgram and ElevenLabs) — voice AI: speech-to-text, AI responses, text-to-speech
  • Twilio — telephony carrier and SMS
  • Anthropic — AI processing for setup import, call review, and assistant responses
  • Stripe — payments
  • Resend — transactional email

4. Retention and deletion

Call records, transcripts, and bookings are retained while your account is active so your dashboard history works. When you delete your account (or ask us to), we delete your organization's data from our systems within 30 days, except where retention is legally required (e.g. bookkeeping records).

5. Your rights

Under the GDPR you can request access, correction, deletion, or export of your personal data, and lodge a complaint with your supervisory authority (in Finland: the Data Protection Ombudsman). For requests concerning a call you made to one of our customers' businesses, contact that business — we will assist them in fulfilling the request.

6. Contact

Sitovai Agency, Finland (Business ID 3638129-8) — support@sitovaiagency.com