12North Labs Inc. (“12North”, “we”, “us”) makes an AI receptionist that answers phone calls for trade and service businesses. This statement explains what personal information we collect, why we collect it, who we share it with, how long we keep it and the choices you have.
It covers our website at www.12north.ai, the 12North app at console.12north.ai, and the calls 12North answers for businesses.
We handle information about two groups of people, and our role differs for each.
These are the owners and team members who hold 12North accounts. We decide how their account information is used, and this statement governs it.
These are the people who phone a business that uses 12North. We handle caller information on that business’s behalf and follow its instructions. The business decides what happens to the information. If you called a business and have a question about your information, you can ask the business or write to us. We will help the business respond.
Call recording is off unless the business turns it on. While recording is off, our voice provider keeps no audio and no transcript of the call. When a business turns recording on, callers hear the business’s recording notice at the start of the call, and our voice provider keeps the recording and transcript. 12North does not copy transcripts into its own database.
Our systems log requests and security events. We keep notifications from our voice provider about each call for 30 days, so we can confirm that call records are complete.
Our website does not set advertising or tracking cookies. Cloudflare, which hosts the site, may count visits using statistics that do not rely on cookies. The site loads its fonts from Google Fonts, so your browser contacts Google’s servers when you visit.
We do not sell personal information, and we do not use it for targeted advertising. We do not use call information to train AI models.
Callers speak with an AI receptionist, not a person. Our voice provider turns the caller’s speech into text, a language model decides on a reply, and the provider speaks the reply. The receptionist follows the settings and wording the business chooses.
The receptionist can make mistakes. Owners can see the record of every call, and a caller can always ask to leave a message for the business.
Several of our providers operate in the United States. Your information may therefore be stored or processed outside your province or country. Where that happens, the laws of that country apply, and its authorities may be able to access the information.
When a business closes its account, we delete its business and call information. We keep only what the law requires us to keep or what we need to show an agreement. Copies in backups are removed as those backups expire.
Information travels over encrypted connections. Access to customer data is limited to the people and systems that need it. We check that call notifications really come from our voice provider before acting on them.
No system is perfectly secure. If a breach creates a real risk of significant harm, we will notify the people affected and the authorities as the law requires.
You can ask to see the personal information we hold about you, to correct it, or to delete it. You can also withdraw your consent to uses that depend on it, although the service may then be unable to help you. We reply within 30 days.
Callers can make these requests to the business they called or to us. When we hold the information for a business, we pass the request to that business and help it respond.
We follow the Personal Information Protection and Electronic Documents Act and, for people in Québec, the Act respecting the protection of personal information in the private sector as amended by Law 25. You can complain to the Office of the Privacy Commissioner of Canada or, in Québec, to the Commission d’accès à l’information.
Depending on your state, including California, you may have the right to know what we collect, to correct it and to delete it. We will not treat you differently for using these rights. We do not sell or share personal information for cross-context behavioural advertising.
When a business connects Google Calendar, 12North reads free and busy times so it can offer open slots, and creates or updates the events for the bookings it makes. 12North’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
We do not use Google user data for advertising, and we do not sell it. People at 12North do not read it unless the business asks us to, it is needed for security, or the law requires it.
12North is a service for businesses. It is not directed at children, and we do not knowingly collect information from children except when a child phones a business that uses 12North.
When we change this statement, we post the new version here with a new effective date. If a change materially affects how we use customers’ information, we tell account holders by email or in the app before it takes effect.
Our privacy officer handles questions, requests and complaints about personal information. Write to privacy@12north.ai.
12North Labs Inc.