Privacy Policy - Gnivil

Effective Date: March 27, 2026

1. Overview

Gnivil ("we," "our," or "us") operates a personal AI assistant service that may initiate phone calls on behalf of the account owner for appointment scheduling, service inquiries, and personal errands.

2. Consent for Voice Communications

By providing your phone number to our service, you expressly consent to receive voice calls initiated by our AI assistant on your behalf. These calls are made only when you explicitly request a specific action via your authenticated private channel.

Do Not Call Compliance

By providing consent, you agree that calls initiated on your behalf may be placed to numbers that may be on Do Not Call registries. However, all calls are initiated only upon your explicit request via authenticated private channel, not for marketing or promotional purposes.

How to Opt Out

You may opt out at any time by:

• Texting "STOP" to any number our service calls from
• Requesting termination via your private channel
• Emailing: privacy@gnivil.com

Once you opt out, no further calls will be initiated on your behalf.

3. Information We Collect

• Contact Information: Phone numbers you provide for outbound calls
• Call Records: Logs of initiated calls (timestamp, recipient, purpose)
• Call Content: If calls are recorded, recordings are stored encrypted for 30 days for quality assurance and compliance, then deleted
• Authentication Data: Credentials to verify your identity when requesting calls

4. How We Use Your Information

• To place phone calls on your behalf as explicitly requested (NOT for telemarketing or promotional purposes)
• To maintain call logs for your reference and service improvement
• To comply with legal obligations and Twilio regulatory requirements

5. Data Sharing

We do not sell or share your personal information with third parties for marketing purposes.

We may share data with:

• Twilio: Our telephony service provider (required to place calls)
• Legal Authorities: When required by law

6. Data Security

We store credentials in encrypted Google Secret Manager. Call logs are retained for 90 days and then automatically deleted unless required for legal compliance.

7. Your Rights

• Request a copy of your data
• Request deletion of your data
• Opt out of voice communications at any time

7.1 State-Specific Privacy Rights

If you are a California, Virginia, or Colorado resident, you have additional rights under state privacy laws, including the right to opt out of the "sale" or "sharing" of personal information. However, we do not sell or share your data for marketing purposes.

8. Single-User Service

This is a personal service operated by a single account owner. We do not engage in mass marketing, robocalling, or unsolicited communications. All calls are initiated only when the verified account owner explicitly requests a specific action.

9. Changes to This Policy

We may update this policy from time to time. The effective date will be updated accordingly.

10. Contact Us

For privacy-related questions or to exercise your rights:

• Email: privacy@gnivil.com
• Website: gnivil.com