Privacy policy

• Business customers: the trades businesses that use Kaj, and the owners, staff and team members they add.
• Their customers: people who call, text or message a business that uses Kaj. For this information the business decides why it is collected, and Kaj handles it on the business's behalf.
• Visitors: people who use this website, its forms or a Kaj demo line.

• Account details: business name, address, service area, hours, prices, and the names, phone numbers and email addresses of the people who sign in.
• Conversations: calls, texts and messages with a business's customers, including phone numbers, names, addresses, the job described, photos sent, call transcripts and summaries, and call recordings when the business turns recording on.
• Jobs and records: visits, quotes, job costs, notes and the customer history a business imports or creates.
• Connected accounts: calendar information from a Google account the business connects (see below), and messages from a connected Facebook Page, Instagram account or WhatsApp number.
• Website forms: the name, company, phone number, email and details you type into a form on this site.
• Technical information: sign-in sessions, device and browser type, and logs we need to run and secure the service. Logs do not hold message text or full phone numbers.

• To answer calls, texts and messages for a business, take down the job, give prices from the business's own price list and book visits.
• To tell the business owner about new leads, urgent calls and their schedule, and to send the reports they ask for.
• To send booking confirmations, reminders and the follow-ups a business turns on, always with a way to opt out by replying STOP.
• To set up, support, secure and improve the service, and to reply to people who contact us.

We do not sell personal information, and we do not use it for advertising. We do not use a business's data, or its customers' data, to train AI models.

A business can connect its Google Calendar to Kaj from Settings in the Kaj app. When it does, Kaj asks Google for permission to:

• See and edit events (calendar.events), so Kaj can add a booked visit to the calendar and change or remove it when the visit moves or is cancelled.
• See when the calendar is busy (calendar.freebusy), so Kaj only offers customers times the business is free.
• See the list of calendars (calendar.calendarlist.readonly), so the owner can pick which calendar Kaj books into.

Kaj reads busy and free times, not the content of the business's other events. It writes only the visits it books. The events it adds hold the visit time, the job, and the customer's first name, phone number and address, so the business can do the job.

Google user data is used only to provide these calendar features to the business that connected it. It is not sold, not used for advertising, not used to train AI models, and not shared with anyone except as needed to provide the service, to comply with the law, or with the business's permission. People at SensaAI do not read it except to fix a problem the business asks us to fix, for security, or as the law requires.

Kaj's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We keep the Google permission (an encrypted refresh token) until the business disconnects. Pressing Disconnect in Settings deletes it from Kaj and asks Google to revoke it. You can also remove Kaj's access at any time from your Google Account's security settings.

We share information only with the service providers that run Kaj, and only what each one needs:

• Railway: hosting, database and file storage.
• Telnyx: phone numbers, calls and text messages.
• Vapi, with its speech and voice providers, and OpenAI: AI phone calls.
• Anthropic: the AI that reads and writes messages and reads photos.
• Google: calendars a business connects, business listings and staff sign-in.
• Meta: messages through a connected Facebook Page, Instagram account or WhatsApp number.
• Resend: emails such as sign-in links and invites.
• Slack: our team's notice when someone sends a form on this website.

Some providers process information outside Canada, including in the United States. We may also share information if the law requires it, to protect someone's safety, or as part of a sale or merger of SensaAI, under this policy.

We keep a business's information while it uses Kaj. Call recordings are deleted after 14 days unless the business sets a different period, and photos after one year unless the business sets a different period. When a business leaves, we delete its account and its customers' information, except what the law requires us to keep. A business can ask us to delete one customer's photos and records at any time.

Information is encrypted in transit. Every request is limited to one business's data, so one business never sees another's. Connected account tokens are encrypted at rest. Only people at SensaAI who need access to run or support the service have it, and their access is logged.

• Reply STOP to any Kaj text to stop texts from that business. Reply START to receive them again.
• Ask the business you contacted, or us, to see, correct or delete the information Kaj holds about you.
• Disconnect a Google, Facebook, Instagram or WhatsApp account from Kaj at any time.

We answer requests within 30 days. If you are a business's customer, we may pass your request to that business, because it is in charge of your information.

Kaj is for businesses and is not meant for children under 16. We do not knowingly collect their information.

If we change this policy, we update the date at the top, and we tell businesses using Kaj about important changes before they take effect. Questions, requests or complaints: email team@sensaai.ca. You can also contact the Office of the Privacy Commissioner of Canada. See also our terms of service.