Privacy Policy

1. Introduction

Kurenai LLC ("Kurenai," "we," "us," or "our") operates the Kurenai AI Voice Receptionist platform, accessible at kurenai.ai and deployed on behalf of restaurant businesses (our "Customers"). This Privacy Policy explains how we collect, use, disclose, and safeguard information in connection with our services.

By using Kurenai, you ("you," "your," or "User") agree to the practices described in this Privacy Policy. If you do not agree, please discontinue use of our services immediately.

This Privacy Policy applies to:

• Visitors to kurenai.ai (the "Website")
• Restaurant businesses that subscribe to Kurenai ("Customers")
• Individuals who call a phone number powered by Kurenai ("Callers")
• Individuals who receive SMS messages sent through Kurenai ("SMS Recipients")

2. Information We Collect

2.1 Information Provided by Customers

When a restaurant business subscribes to Kurenai, we collect:

• Business name, address, phone number(s), and hours of operation
• Account credentials (username, hashed password)
• Billing information (processed by third-party payment processors; we do not store raw card numbers)
• Menu data, online ordering links, reservation platform credentials, and operational configurations
• Staff contact information for escalation and notification purposes

2.2 Information Collected Automatically from Callers

When an individual calls a phone number managed by Kurenai on behalf of a Customer, we automatically collect:

• Caller phone number (via Twilio caller ID)
• Call timestamp, duration, and status
• Audio of the call, which is transcribed in real time using automated speech recognition
• Full call transcript stored as structured text in our database
• Intent classification (e.g., reservation request, ordering inquiry, FAQ)
• Outcome of the call (e.g., reservation booked, SMS link sent, transferred to staff)
• AI-generated post-call analysis including sentiment assessment, complaint flags, and follow-up recommendations

2.3 SMS Data

When Kurenai sends an SMS message to a Caller on behalf of a Customer, we collect and store the recipient phone number, timestamp, message content (ordering link, reservation confirmation, or directions), delivery status, and any inbound SMS replies.

2.4 Reservation Data

When a Caller books a reservation through Kurenai, we collect guest name, phone number, requested date/time/party size, special notes, confirmation number, reservation status, and any cancellation or modification requests.

2.5 Technical and Usage Data

We automatically collect IP addresses, browser type, session data, pages visited, actions taken, API request logs, and sanitized server-side error logs for users accessing the admin dashboard.

3. How We Use Your Information

3.1 To Provide the Service

• Answer incoming calls on behalf of Customer restaurant locations
• Process reservation requests and communicate with OpenTable or direct reservation systems
• Send SMS messages containing ordering links, reservation confirmations, or directions
• Generate AI responses using large language model providers (currently Groq / Llama 3.3 70B)
• Log and display call history, transcripts, and analytics in the Customer admin dashboard

3.2 For AI Processing

Call transcripts and conversation context are transmitted to our AI processing provider (Groq, Inc.) to generate real-time responses. Kurenai does not use your call content to train AI models and does not sell transcripts to third parties for AI training purposes.

3.3 For Quality and Safety

Post-call AI analysis to identify complaints, compliments, and urgent follow-ups; detecting calls requiring human staff attention; monitoring system performance; and investigating suspected abuse or fraud.

3.4 For Communications

Sending Customers account notifications, billing confirmations, service updates, support responses, and onboarding guidance.

4. How We Share Your Information

We do not sell personal information. We share information only in the following circumstances:

4.1 With Third-Party Service Providers

• Twilio, Inc. — Phone call handling, SMS delivery, call recording, and webhook processing
• Groq, Inc. — AI inference for real-time call responses. Transcripts are not retained by Groq for model training under our agreement
• Railway (Railway Corp) — Cloud hosting and deployment infrastructure
• OpenTable — Reservation booking and availability lookup. Data shared is limited to guest name, phone, party size, date, and time
• PostgreSQL (via Railway) — Encrypted database storage for all call logs, transcripts, reservations, and configurations

4.2 With Customers

Call transcripts, Caller phone numbers, SMS logs, and reservation data collected on behalf of a Customer are accessible to that Customer through their admin dashboard. Customers are responsible for their own use of this data and must comply with applicable privacy laws.

4.3 For Legal Compliance

We may disclose information if required by law, court order, or governmental authority, or if necessary to protect our rights, prevent fraud, or respond to an emergency involving risk to persons.

4.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, personal data may be transferred as part of that transaction. We will provide notice before personal data becomes subject to a different privacy policy.

5. Call Recording and Transcript Disclosure

Kurenai records and transcribes telephone calls as a core function of the service.

• Call transcripts are retained for the duration of the active subscription plus 90 days after termination
• Transcripts are accessible to the subscribing Customer and to Kurenai staff for support purposes
• Kurenai does not sell, license, or publish call transcripts to any third party for marketing or commercial purposes

6. SMS Communications

• SMS messages are sent only to Callers who have interacted with the AI during a call session
• SMS messages contain only transactional content (ordering links, reservation confirmations, directions)
• Kurenai does not send unsolicited marketing SMS messages to Callers
• Recipients may reply STOP to opt out of future SMS messages from a given restaurant's Kurenai number

7. Data Retention

• Call logs and transcripts: Active subscription + 90 days
• Reservation records: Active subscription + 180 days
• SMS logs: Active subscription + 90 days
• Customer account data: Active subscription + 30 days after cancellation
• Admin access logs: 12 months
• AI post-call analysis: Active subscription + 90 days

Upon written request, Customers may request deletion of their data prior to these retention periods.

8. Data Security

Kurenai implements industry-standard security measures including:

• HTTPS/TLS encryption for all data in transit
• Encrypted PostgreSQL database with connection pooling and access controls
• Twilio webhook signature validation to prevent unauthorized call injection
• Rate limiting on all public-facing endpoints
• Secure session management with HttpOnly, Secure, and SameSite cookie attributes
• CSRF protection on all authenticated forms
• Environment-based secret management; no API keys stored in source code

While we take reasonable precautions, no method of transmission or storage is 100% secure.

9. Your Rights and Choices

Depending on your jurisdiction, you may have the right to access, correct, delete, or port your personal data, or to object to or restrict processing. To exercise these rights, contact us at info@kurenai.ai. We will respond to verified requests within 30 days.

10. Children's Privacy

Kurenai is not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, contact us immediately at info@kurenai.ai.

11. International Data Transfers

Kurenai is based in the United States. If you access our services from outside the United States, your information may be transferred to and processed in the United States. By using our services, you consent to this transfer.

12. Third-Party Links and Integrations

Kurenai integrates with third-party services including OpenTable, Toast, and Owner.com. These integrations are governed by the respective third parties' privacy policies. Kurenai is not responsible for the privacy practices of these third parties.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify Customers of material changes by email or through the admin dashboard at least 14 days before the change takes effect. Continued use of Kurenai after the effective date constitutes acceptance of the updated policy.

14. Contact Us