Privacy Policy

Last Updated: September 3, 2026

1. Introduction

SIA "Canarics" (reg. 40203741245, "we", "our") operates the Canarics voice AI and sales intelligence platform. We are based in Riga, Latvia, and operate in compliance with the General Data Protection Regulation (GDPR).

2. Data Collection & Usage

We process data on behalf of our enterprise customers to provide voice AI and call analytics services:

• Identity Data: Manager and agent names, emails, and phone numbers used to create and authenticate accounts.
• Contact Data: Customer phone numbers and linked CRM contact records, accessed only to route calls and log activities. We do not sell or share contact lists.
• Voice Data: Calls captured by the customer's telephony provider are processed to generate transcripts and AI summaries.
• Usage Data: Call duration, timestamps, and scoring metadata for analytics and billing.

3. Pipedrive Marketplace App & Free Trial

If you install the Canarics app from the Pipedrive Marketplace, the following applies:

• OAuth access: We store the access and refresh tokens Pipedrive issues on install, together with your Pipedrive name, email, and company name, to operate your account and trial.
• Deal data: During the free trial we read your deals (titles, contact and organization names, values, status) solely to personalize the demo calls you explicitly request to your own phone. In the paid product, we read and write the CRM records needed to run the calling campaigns you configure.
• Trial calls: Demo calls are placed only to the phone number you enter yourself, are AI-generated, and are capped in number. We store the target number, call recordings, transcripts, and AI summaries of these calls.
• Revocation: Uninstalling the app in Pipedrive revokes our access. To also delete stored tokens and trial data, email us — see Section 9.

4. Cookies & Advertising Measurement

canarics.com uses cookies only after you consent via the cookie banner:

• Before consent (and if you decline), advertising and analytics storage stay disabled. Google may receive cookieless, aggregated pings (Google Consent Mode) that do not identify you.
• After consent, we use the Google tag (Google Ads) to measure whether our advertising works — for example, whether a visit led to a click through to our Pipedrive Marketplace listing.
• Your choice is stored in your browser and can be changed by clearing this site's browser data, which shows the banner again.

5. Data Processing (Sub-processors)

We use trusted third-party providers to process your data. By using Canarics, you authorize data transfer to:

• Cloud infrastructure: Hosting, database, and AI processing in an EU region of a major cloud provider.
• Carrier partners: Licensed telecom carriers that place and receive calls for the Canarics AI voice agent.
• Your telephony provider: The carrier you configure. Calls originate and terminate on their infrastructure.
• Your CRM: Only if you connect your account. Summaries and deal stages sync to the systems you authorize.
• Email delivery provider: Transactional emails (account and trial notifications).
• Advertising measurement: On canarics.com only, and only with your cookie consent (see Section 4).

The current list of sub-processors is available on request. We do not use your data to train AI models, and we never sell it.

Legal bases. We process data to perform our contract with you (service delivery, billing), on our legitimate interest (service security, abuse prevention, product improvement), and on your consent where required (cookies, CRM connections). You may withdraw consent at any time.

International transfers. Service data is processed in the EU. Where a sub-processor processes limited data outside the EEA, the transfer is protected by an adequacy decision or Standard Contractual Clauses.

6. Data Retention & Audio Privacy

Audio Recordings: Audio files are decrypted in memory and streamed to secure storage for processing. Plaintext copies are deleted after the transcript is generated. Encrypted originals follow your telephony provider's retention policy.

Transcripts: Text summaries and scores are stored securely in your tenant until you delete them or close the account.

7. Encryption

All data is encrypted in transit (TLS) and at rest. Calls handled by the AI voice agent are carried over encrypted media connections and their recordings are stored encrypted at rest.

Where the customer's telephony provider supports encrypted recording delivery, each customer is additionally provisioned with an isolated OpenPGP keypair: recording downloads are PGP-encrypted end-to-end, and private keys are stored encrypted at rest and only decrypted in-memory during processing.

8. Your Rights (GDPR)

Under GDPR, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data ("Right to be Forgotten").
• Withdraw consent for CRM integrations and cookies at any time.
• Lodge a complaint with your supervisory authority (in Latvia: Datu valsts inspekcija).

9. Account Deletion

To request deletion of your account and all associated data, please contact sales@canarics.com. We will process your request within 7 business days.

10. Contact Us

Data Controller: SIA "Canarics" (Reg. 40203741245)
Location: Riga, Latvia
Email: sales@canarics.com