Privacy policy.

This policy covers two groups:

• Studio owners: who subscribe to Frontara and use the dashboard.
• Callers and customers: who interact with Frontara by phone, SMS, or through customer portals.

From studio owners

• Name, email address, and phone number
• Business information (studio name, address, hours, services)
• Payment information, processed securely via Stripe
• Dashboard usage and settings

From callers and customers

• Phone number via caller ID
• Name, if provided during a call or booking
• Call recordings and transcripts
• Booking details (class, date, time)
• SMS messages exchanged with the system

Children's data

For businesses that serve children, like dance studios, we may store a child's first name and age only, as provided by a parent or guardian during the booking process. We do not:

• Collect data directly from children
• Collect more than the minimum needed for booking (name and age)
• Use children's data for marketing or any purpose beyond the booking service
• Share children's data with third parties for their own purposes

Parents or guardians may request access to, correction of, or deletion of their child's data at any time by contacting privacy@frontara.ca.

We collect and process data solely to provide the Frontara AI receptionist service. This includes:

• Answering calls and handling bookings on behalf of your studio
• Sending SMS confirmations and notifications
• Providing call logs, transcripts, and summaries in the dashboard
• Recognizing repeat callers for a better experience
• Improving the service through aggregated, anonymized analytics

We use the following third-party services to operate Frontara. Each processes data only as needed to provide their part of the service:

• Twilio: Phone calls and SMS delivery
• Vapi: Voice AI processing
• OpenAI / Anthropic: Language understanding and response generation
• ElevenLabs: Text-to-speech voice synthesis
• Supabase: Database hosting
• Vercel: Web application hosting
• Stripe: Payment processing

• Call recordings: stored for 30 days, then automatically deleted.
• Call logs and transcripts: retained while your subscription is active.
• Account and business data: retained while your subscription is active, plus 90 days after cancellation.
• After deletion: all data is permanently removed. We do not keep backups of deleted data.

We take reasonable measures to protect your data, including:

• Encryption in transit (TLS / SSL) for all connections
• Row-level security on our database
• Access controls limiting who can view data internally
• Secure authentication for all portals

Under Canadian privacy law (PIPEDA) and applicable regulations, you have the right to:

• Access: the personal data we hold about you.
• Correct: inaccurate or incomplete data.
• Delete: your data, subject to legal retention requirements.
• Export: your data in a portable format.
• Withdraw consent: at any time by cancelling your subscription.

To exercise any of these rights, email privacy@frontara.ca.

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the dashboard. The "last updated" date at the top of the page reflects the most recent revision.

Questions or concerns about your privacy? Reach us at privacy@frontara.ca.