Privacy Policy

1. Introduction

This Privacy Policy explains how LamyaAI, a product of Lenga Technologies Limited (a company incorporated in the Republic of Zambia), collects, uses, shares, and protects personal data when you use our AI phone agent platform, websites, and related services (the “Service”). We are committed to protecting personal data in accordance with the Data Protection Act No. 3 of 2021 of Zambia and other applicable laws.

By using the Service, you agree to the practices described in this policy. This policy should be read together with our Terms of Service.

2. Information We Collect

2.1 Information you provide

• Account information: name, business name, email address, phone number, and billing details.
• Configuration content: the scripts, prompts, knowledge, phone numbers, and settings you create for your AI agents.
• Communications: messages, support requests, and feedback you send to us.

2.2 Call data

As a voice platform, we process data relating to the calls your agents place and receive, including:

• Call metadata: phone numbers, timestamps, duration, direction, and call status;
• Call audio and transcripts: recordings and text transcripts generated during calls, where enabled;
• Information shared during calls: details that call participants provide while speaking with an agent.

2.3 Information collected automatically

• Usage data: features used, actions taken, and time spent in the Service;
• Device and log data: IP address, browser and device type, and system logs;
• Cookies: session and analytics cookies as described in section 11.

3. How We Use Information

• To provide, operate, and maintain the Service;
• To place and receive calls, generate transcripts and analytics, and provision phone numbers;
• To process top-ups and payments and to maintain your account balance;
• To provide support and respond to your requests;
• To monitor, secure, and improve the Service and to detect and prevent fraud and abuse;
• To comply with legal obligations and enforce our Terms.

4. Legal Basis for Processing

We process personal data where we have a lawful basis to do so under the Data Protection Act No. 3 of 2021, including: performance of our contract with you; your consent; our legitimate interests in operating and securing the Service; and compliance with legal obligations. Where processing relies on consent, you may withdraw that consent at any time.

5. Call Recordings and Consent

Where you enable recording or transcription, you (not LamyaAI) are responsible for providing notice to, and obtaining any required consent from, the people your agents call. In relation to your call recipients and customers, you act as the data controller and LamyaAI acts as your data processor, processing that data only to provide the Service and on your instructions.

6. How We Share Information

We do not sell personal data. We share it only as needed to run the Service, including with:

• Telephony providers that carry your calls and supply phone numbers;
• Speech and language AI providers that perform speech recognition, synthesis, and language processing;
• Payment and mobile-money providers (including Airtel Money, MTN MoMo, Zamtel Money, and card processors) to process top-ups and payments;
• Infrastructure and analytics providers that host and help us monitor the Service;
• Authorities where required by law or valid legal process, and parties to a merger or business transfer.

These providers are permitted to use the data only for the purposes of providing their services to us.

7. Data Security

We use appropriate technical and organisational measures to protect personal data, including encryption of data in transit, access controls, and monitoring. No system is completely secure, and we cannot guarantee absolute security. If a personal data breach occurs, we will notify affected users and the relevant authorities as required by applicable law.

8. Data Retention

We retain personal data for as long as your account is active or as needed to provide the Service, and thereafter only as required to meet legal, accounting, or reporting obligations, resolve disputes, and enforce our agreements. Call recordings and transcripts are retained according to your account settings and instructions. When data is no longer required, we delete or anonymise it.

9. International Transfers

Some of our providers may process data outside Zambia. Where personal data is transferred across borders, we take steps to ensure it is protected in accordance with the Data Protection Act No. 3 of 2021 and appropriate safeguards.

10. Your Rights

Subject to applicable law, you have the right to access, correct, update, or request deletion of your personal data; to object to or request restriction of certain processing; to data portability; and to withdraw consent where processing is based on consent. To exercise these rights, contact us using the details in section 13. We will respond within the timeframes required by law.

11. Cookies

We use essential cookies for authentication and platform functionality, and analytics cookies to understand and improve how the Service is used. You can control cookies through your browser settings, though disabling some cookies may limit functionality.

12. Children’s Privacy

The Service is intended for businesses and is not directed to children. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can take appropriate action.

13. Contact Us

For privacy questions or to exercise your rights, please reach us through our contact page. LamyaAI is operated by Lenga Technologies Limited, incorporated in the Republic of Zambia.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version with a new effective date and, where changes are material, provide additional notice through the Service. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.