Legal
Privacy Policy
Last updated July 26, 2026
Sempera builds and operates AI phone agents for businesses. That means we handle phone calls, and phone calls contain personal information. This policy explains what we collect, why, who we share it with, and what you can do about it.
We are a Canadian company operating under the federal Personal Information Protection and Electronic Documents Act (PIPEDA). Where a client's business is subject to additional rules, such as Ontario's Personal Health Information Protection Act (PHIPA) or Quebec's Law 25, those obligations are handled in our written agreement with that client, and this policy does not reduce them.
1. The two kinds of people in this policy
This distinction runs through everything below, so we make it first.
Visitors and prospects. People who use sempera.org, book a call with us, or email us. We are the organization responsible for that information.
Callers. People who phone a business that uses a Sempera agent. That business decides why the agent exists and what it asks. We handle callers' information on the business's behalf, under written contract, and only as they instruct. If you called a restaurant, clinic, or salon and spoke to an AI assistant, your privacy request should go to that business first. Contact us and we will help you reach them.
2. What we collect
From visitors and prospects
- Name, email, phone number, and business name, when you book a call or contact us
- What you tell us about your business during that conversation
- Basic server logs, including IP address and browser type, kept for security and reliability
We do not run advertising trackers, analytics pixels, or identity-resolution services on sempera.org. We do not buy personal information from data brokers, and we do not sell yours.
From callers, on behalf of our clients
- The audio of the call, where recording is enabled by the client
- A written transcript of the call
- Information the caller gives the agent, which typically means name, phone number, email address, and the reason for calling
- Call metadata such as time, duration, and the number dialled
3. Call recording and AI disclosure
Two commitments, and we hold them without exception.
Every Sempera agent identifies itself as an AI assistant at the start of the call. No agent pretends to be a person. If you ask whether you are speaking to a human, it will tell you the truth.
Where a call is recorded, the agent says so before the conversation begins. Canadian law permits recording a call where one party consents, but PIPEDA requires knowledge and consent for collecting personal information in the course of commercial activity. We therefore disclose recording up front rather than relying on the narrower criminal-law standard. A caller who does not want to continue can hang up or ask for a person.
Recording is off by default on every agent we build. It is enabled only when a client asks for it, and the retention period is set to the client's written instruction.
4. Why we use it
| Purpose | What it covers |
|---|---|
| Delivering the service | Answering calls, capturing messages, booking appointments, passing leads to the client |
| Quality and accuracy | Reviewing transcripts to fix an agent that misheard, misrouted, or answered wrongly |
| Support | Investigating a problem a client reports |
| Security and abuse prevention | Detecting fraud, spam, and misuse of the platform |
| Legal obligations | Responding to lawful requests and meeting our own compliance duties |
We do not use client call content to train general-purpose AI models, and we do not use one client's data to improve another client's agent.
We do not sell personal information. We do not share it with advertisers.
5. Who we share it with
We use a small number of service providers to run the service. Each is bound by contract to use the information only to provide their service to us, and none of them may use it for their own purposes.
| Category | What they do | Where they process |
|---|---|---|
| Voice AI platform | Runs the conversation and produces the transcript | United States |
| Telecommunications carrier | Provides the phone numbers and carries the calls | Numbers provisioned in Canada, carrier processing in the United States |
| Cloud hosting and content delivery | Serves this website | Global edge network |
| Scheduling provider | Powers the booking tool on this website | United States |
| Payment processor | Bills client subscriptions, PCI-DSS compliant | United States |
Clients and prospective clients can ask us to identify these providers by name, under confidentiality, as part of their own due diligence. Write to us and we will send the current list.
We may also disclose information where we are legally required to, where it is necessary to investigate a serious breach of an agreement, or to a purchaser as part of a sale of the business, in which case the same protections carry over.
6. Where information goes, and what that means
Some of the providers above process information in the United States. Information stored or processed there may be accessible to United States courts and government agencies under their law, and we cannot contract that away. We tell you plainly rather than bury it.
Clients who require Canadian data residency should raise it before onboarding. We will tell you honestly whether we can meet the requirement for your configuration, and we will not launch a line that we cannot support.
7. How long we keep it
| Information | Retention |
|---|---|
| Call recordings | Set per client. 90 days where the client has not specified |
| Transcripts and captured lead details | For as long as the client's account is active, then deleted on request |
| Prospect and enquiry information | Up to 24 months from last contact |
| Server logs | 30 days |
| Records we must keep by law, such as invoices | As long as the applicable law requires |
When a client leaves, we delete or return their data on request. Say the word and we will confirm in writing when it is done.
8. Keeping it safe
Access to call content is limited to the people who need it to run or fix the service. Credentials are held in an encrypted store, never in files or code. Data is encrypted in transit. Client environments are separated so one client's configuration and data are not reachable from another's.
No system is perfectly secure, and we will not claim otherwise. If a breach creates a real risk of significant harm, we will notify affected individuals and the Office of the Privacy Commissioner of Canada as PIPEDA requires, and we will notify the affected client without delay.
9. Your rights
Under PIPEDA you can:
- Ask what we hold about you and get a copy
- Correct it if it is wrong
- Withdraw consent, subject to legal and contractual limits
- Complain, to us first and then to the Privacy Commissioner of Canada
Write to [email protected]. We respond within 30 days. We will ask you to verify your identity before releasing anything, because handing your information to the wrong person is its own privacy breach.
If your request is about a call you made to a business using a Sempera agent, see section 1: the business decides, and we will help you reach them.
10. Cookies and similar technology
sempera.org sets no advertising or analytics cookies. We do not run Google Analytics, advertising pixels, or visitor de-anonymization tools, and there is no cookie banner because there is nothing to consent to.
The one exception is our booking section, which embeds a third-party scheduling tool. That embed sets its own cookies so scheduling works, and they are governed by that provider's privacy policy. If you would rather not load it, book by emailing us instead.
If we ever add analytics we will update this section first, and we will honour browser Global Privacy Control signals.
11. Children
Sempera is a service sold to businesses and is not directed at children. We do not knowingly collect information from anyone under 16. If a caller turns out to be a child, the client's own policy for handling that applies, and we will delete the record on request.
12. Changes
We will post any change here with a new date at the top. If a change materially affects how we handle personal information, we will tell affected clients directly rather than relying on you to notice.
13. Contact
Privacy Officer, Sempera [email protected]
You may also contact the Office of the Privacy Commissioner of Canada at priv.gc.ca.