Privacy Policy

1. Introduction

Kurenai LLC ("Kurenai," "we," "us," or "our") operates the Kurenai AI Voice Receptionist platform, accessible at kurenai.ai and deployed on behalf of local businesses — restaurants, salons, clinics, and similar appointment-based businesses (our "Customers"). This Privacy Policy explains how we collect, use, disclose, and safeguard information in connection with our services.

By using Kurenai, you ("you," "your," or "User") agree to the practices described in this Privacy Policy. If you do not agree, please discontinue use of our services immediately.

This Privacy Policy applies to:

• Visitors to kurenai.ai (the "Website")
• Local businesses that subscribe to Kurenai ("Customers")
• Prospective customers who submit our online quiz or contact forms, or who request a demo ("Leads")
• Individuals who call a phone number powered by Kurenai ("Callers")
• Individuals who receive SMS or messaging communications sent through Kurenai ("Message Recipients")

2. Information We Collect

2.1 Information Provided by Customers

When a restaurant business subscribes to Kurenai, we collect:

• Business name, address, phone number(s), and hours of operation
• Account credentials (username, hashed password)
• Billing information (processed by third-party payment processors; we do not store raw card numbers)
• Menu data, online ordering links, reservation platform credentials, and operational configurations
• Staff contact information for escalation and notification purposes

2.2 Information Collected Automatically from Callers

When an individual calls a phone number managed by Kurenai on behalf of a Customer, we automatically collect:

• Caller phone number (via Twilio caller ID)
• Call timestamp, duration, and status
• Audio of the call, which is transcribed in real time using automated speech recognition
• Full call transcript stored as structured text in our database
• Intent classification (e.g., reservation request, ordering inquiry, FAQ)
• Outcome of the call (e.g., reservation booked, SMS link sent, transferred to staff)
• AI-generated post-call analysis including sentiment assessment, complaint flags, and follow-up recommendations

2.3 SMS Data

When Kurenai sends an SMS message to a Caller on behalf of a Customer, we collect and store the recipient phone number, timestamp, message content (ordering link, reservation confirmation, or directions), delivery status, and any inbound SMS replies.

2.4 Reservation Data

When a Caller books a reservation through Kurenai, we collect guest name, phone number, requested date/time/party size, special notes, confirmation number, reservation status, and any cancellation or modification requests.

2.5 Technical and Usage Data

We automatically collect IP addresses, browser type, session data, pages visited, actions taken, API request logs, and sanitized server-side error logs for users accessing the admin dashboard.

2.6 Lead and Marketing Data

When a prospective customer completes our online quiz/calculator, requests a demo, or submits a contact form on kurenai.ai (including at kurenai.ai/demo), we collect the information they provide — typically name, business name, business email address, phone number, and self-reported business details (business type, call volume, average ticket, and current booking system). We use this information to follow up about Kurenai's services, including by sending a series of informational and promotional emails.

3. How We Use Your Information

3.1 To Provide the Service

• Answer incoming calls on behalf of Customer restaurant locations
• Process reservation requests and communicate with OpenTable or direct reservation systems
• Send SMS messages containing ordering links, reservation confirmations, or directions
• Convert Caller speech to text and generate AI voice responses using speech-recognition and text-to-speech providers
• Generate AI responses using large language model providers (currently Groq, Inc. and/or Anthropic, PBC, depending on configuration)
• Log and display call history, transcripts, and analytics in the Customer admin dashboard
• Follow up with Leads about Kurenai's services, including sending informational and promotional email

3.2 For AI Processing

Call audio, transcripts, and conversation context are transmitted to our speech-recognition provider (Deepgram, Inc.), our text-to-speech provider (Amazon Web Services / Amazon Polly), and our large language model provider (Groq, Inc. and/or Anthropic, PBC) to generate real-time responses. Kurenai does not use your call content to train AI models and does not sell transcripts to third parties for AI training purposes. Under our agreements, these providers do not retain your content to train their models.

3.3 For Quality and Safety

Post-call AI analysis to identify complaints, compliments, and urgent follow-ups; detecting calls requiring human staff attention; monitoring system performance; and investigating suspected abuse or fraud.

3.4 For Communications

Sending Customers account notifications, billing confirmations, service updates, support responses, and onboarding guidance.

4. How We Share Your Information

We do not sell personal information. We share information only in the following circumstances:

4.1 With Third-Party Service Providers

• Twilio, Inc. — Phone call handling, SMS/messaging delivery, and webhook processing
• Deepgram, Inc. — Real-time automated speech recognition (transcription) of call audio
• Amazon Web Services, Inc. (Amazon Polly) — Text-to-speech voice synthesis for AI responses
• Groq, Inc. and Anthropic, PBC — AI inference for real-time call responses and post-call analysis. Content is not retained by these providers for model training under our agreements
• Cloudflare, Inc. (R2) — Encrypted storage of call recordings, where call recording is enabled by the Customer
• Browserbase, Inc. — Cloud browser infrastructure used to place, modify, and cancel reservations in Customer booking systems on the Customer's behalf
• Resend (Plaudit Design, Inc.) — Transactional and marketing email delivery (staff notifications and Lead follow-up email)
• Functional Software, Inc. (Sentry) — Application error monitoring; configured to exclude personal data
• Railway Corp. — Cloud hosting, deployment infrastructure, and managed PostgreSQL database storage for call logs, transcripts, reservations, leads, and configurations
• OpenTable — Reservation booking and availability lookup. Data shared is limited to guest name, phone, party size, date, and time

4.2 With Customers

Call transcripts, Caller phone numbers, SMS logs, and reservation data collected on behalf of a Customer are accessible to that Customer through their admin dashboard. Customers are responsible for their own use of this data and must comply with applicable privacy laws.

4.3 For Legal Compliance

We may disclose information if required by law, court order, or governmental authority, or if necessary to protect our rights, prevent fraud, or respond to an emergency involving risk to persons.

4.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, personal data may be transferred as part of that transaction. We will provide notice before personal data becomes subject to a different privacy policy.

5. Call Recording and Transcript Disclosure

Kurenai records and transcribes telephone calls as a core function of the service.

• Call transcripts are retained for the duration of the active subscription plus 90 days after termination
• Transcripts are accessible to the subscribing Customer and to Kurenai staff for support purposes
• Kurenai does not sell, license, or publish call transcripts to any third party for marketing or commercial purposes

6. SMS and Email Communications

6.1 SMS to Callers

• SMS messages are sent to Callers only after they provide consent during a call (for on-request links such as ordering or private-events links), or as a transactional follow-up to a call they placed (such as a missed-call reply or a reservation reminder)
• SMS messages to Callers contain transactional content — ordering or event links, reservation confirmations and reminders, directions, and a brief post-call satisfaction survey
• Kurenai does not send unsolicited promotional SMS marketing campaigns to Callers
• Recipients may reply STOP to opt out, or HELP for assistance, at any time; message and data rates may apply. See our SMS Consent Policy for full details

6.2 Email to Leads

• Prospective customers who submit our online forms may receive informational and promotional email about Kurenai's services
• Every such email includes a one-click unsubscribe link and our physical mailing address (CAN-SPAM Act)
• You may opt out at any time via that link or by emailing info@kurenai.ai

7. Data Retention

• Call logs and transcripts: Active subscription + 90 days
• Reservation records: Active subscription + 180 days
• SMS logs: Active subscription + 90 days
• Customer account data: Active subscription + 30 days after cancellation
• Admin access logs: 12 months
• AI post-call analysis: Active subscription + 90 days
• Call recordings (where enabled): Active subscription + 90 days
• Lead / marketing-contact data: Until you unsubscribe or request deletion, then removed within 30 days
• SMS/marketing consent and opt-out records: Retained up to 4 years for regulatory audit

Upon written request, Customers and Leads may request deletion of their data prior to these retention periods by emailing info@kurenai.ai.

8. Data Security

Kurenai implements industry-standard security measures including:

• HTTPS/TLS encryption for all data in transit
• Encrypted PostgreSQL database with connection pooling and access controls
• Twilio webhook signature validation to prevent unauthorized call injection
• Rate limiting on all public-facing endpoints
• Secure session management with HttpOnly, Secure, and SameSite cookie attributes
• CSRF protection on all authenticated forms
• Environment-based secret management; no API keys stored in source code

While we take reasonable precautions, no method of transmission or storage is 100% secure.

9. Your Rights and Choices

Depending on your jurisdiction, you may have the right to access, correct, delete, or port your personal data, or to object to or restrict processing. To exercise these rights, contact us at info@kurenai.ai. We will respond to verified requests within 30 days.

10. Children's Privacy

Kurenai is not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, contact us immediately at info@kurenai.ai.

11. International Data Transfers

Kurenai is based in the United States. If you access our services from outside the United States, your information may be transferred to and processed in the United States. By using our services, you consent to this transfer.

12. Third-Party Links and Integrations

Kurenai integrates with and relies on third-party services including OpenTable, Toast, Owner.com, and the service providers listed in Section 4.1. These integrations are governed by the respective third parties' privacy policies. Kurenai is not responsible for the privacy practices of these third parties.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify Customers of material changes by email or through the admin dashboard at least 14 days before the change takes effect. Continued use of Kurenai after the effective date constitutes acceptance of the updated policy.

14. Contact Us