Privacy Policy
This policy explains how MF Automations LLC collects, uses, and shares information through mfautomations.ai and our AI operator services. It covers two different relationships, and the distinction matters: information about you, our customer, and information about End Users who interact with an AI Operator that our customer deployed.
1. Our two roles
As controller. For information about our own customers and website visitors — account details, billing, support correspondence — we decide how and why it is processed, and this policy governs.
As processor. When an AI Operator handles a call, message, or email on a customer's behalf, that customer decides what is collected and why. We process it under their instructions and under our Data Processing Addendum. If you are an End User and want your information accessed or deleted, contact the business you were dealing with; we will support their response, and we will forward requests we receive directly.
2. Information we collect
Information you provide
- Account and business details — name, business name, email, phone, address.
- Billing information, processed by Stripe. We do not store full card numbers.
- Configuration for your AI Operator — scripts, business hours, knowledge content, escalation contacts.
- Support requests and correspondence.
Information collected automatically from the website
- Log data — IP address, browser and device type, pages viewed, timestamps.
- Essential cookies only. See our Cookie Notice.
Information collected by an AI Operator, on our customer's behalf
- Voice recordings and transcripts of inbound and outbound calls, where recording is enabled.
- Message content and metadata — SMS, MMS, email, and chat, including phone numbers, addresses, timestamps, and delivery status.
- Contact and interaction records — names, contact details, appointment and job details, and whatever else a caller volunteers during a conversation.
- Derived data — summaries, intents, and task outcomes generated from the above.
Recordings and transcripts can contain anything a caller chooses to say. We do not intentionally collect health, financial, biometric, or other sensitive categories; we do not use voice recordings to build voiceprints or perform speaker identification; and we do not use them to train general-purpose models. Customers deploying an AI Operator in a regulated context must configure it accordingly and must not send us sensitive data without a separate written agreement.
3. How we use information
- To provide, operate, secure, and improve the Services.
- To process payments and manage subscriptions.
- To send transactional messages — receipts, onboarding, operator alerts, service notices.
- To respond to support requests.
- To detect, investigate, and prevent fraud, abuse, and unauthorized access.
- To comply with legal obligations and to establish or defend legal claims.
We do not use End User content for advertising, and we do not use it to train general-purpose AI models.
4. How we share information
Subprocessors and service providers. We share data with vendors who help us run the Services — telephony carriers, speech and language model providers, payment processing, and hosting. Each is bound by contract to process only on our instructions. The current list is published at Subprocessors.
At your direction. With systems you connect, such as your CRM, calendar, or email.
Legal. Where required by law, subpoena, or court order, or to protect the rights, property, or safety of MF Automations, our customers, or the public. Where legally permitted, we will notify the affected customer before disclosing their data.
Business transfers. In connection with a merger, acquisition, or sale of assets, with notice.
We do not sell personal information, and we do not share it for cross-context behavioral advertising.
No mobile information — including phone numbers collected for SMS and consent to receive text messages — will be sold, rented, or shared with third parties or affiliates for marketing or promotional purposes. Phone numbers are disclosed to messaging providers and carriers solely to deliver the messages you asked for. Text-message originator opt-in data and consent are not shared with any third party for any other purpose.
5. Retention
| Data | Default retention |
|---|---|
| Call recordings (audio) | 90 days, then deleted. Configurable per customer, including off. |
| Transcripts and summaries | Life of the account, then deleted per the DPA. |
| Message content | Life of the account. |
| Contact and interaction records | Life of the account. |
| Billing and tax records | As required by law. |
| Security and access logs | Up to 12 months. |
| After account termination | Deleted or anonymized within 30 days, except where law requires retention. |
6. Security
We use TLS for data in transit, encryption for stored credentials and sensitive data, role-based access controls, and least-privilege access to production systems. No system is perfectly secure. See our Security Overview.
7. Your privacy rights
Depending on where you live, you may have the right to access, correct, delete, or receive a portable copy of your personal information, to opt out of sale or targeted advertising (we do neither), to limit use of sensitive information, and to appeal a denial. Residents of California, Colorado, Connecticut, Virginia, Texas, Oregon, Montana, and other states with comprehensive privacy laws have these rights under their state statute.
To exercise them, email [email protected] or write to the address below. We will verify your identity and respond within the period your law allows — generally 45 days. We do not discriminate against you for exercising a right, and you may use an authorized agent.
If your request concerns a call or message with a business that uses our Services, direct it to that business; they control that data and we act on their instructions.
8. Automated decision-making
AI Operators generate responses and can take configured actions such as booking or routing. They do not, on our own initiative, make decisions producing legal or similarly significant effects about you. Where a customer configures such a workflow, that customer is responsible for the disclosures and human-review rights their law requires.
9. Text messaging
If you opt in to receive text messages from us or from a business using our Services, message frequency varies, message and data rates may apply, and you can reply STOP to opt out or HELP for help at any time. Full terms are in our Messaging Terms. Consent to receive text messages is never a condition of purchase.
10. Children
The Services are not directed to anyone under 18, and we do not knowingly collect their personal information. If you believe we have, contact us and we will delete it.
11. Changes
We will post material changes here with a new effective date and, for account holders, notify by email at least 14 days in advance.
12. Contact
MF Automations LLC · Attn: Privacy
233 NE 27th St, Miami, FL 33137
Email: [email protected]
Phone: (305) 965-9624
MF Automations LLC · 233 NE 27th St, Miami, FL 33137 · [email protected] · (305) 965-9624