Privacy Policy

1. Introduction & Scope

emii.ai (“emii”, “we”, “us”, or “our”) is an AI receptionist and voice assistant platform operated by EMII PTY LTD, an Australian company. We provide businesses with intelligent, always-on AI agents capable of handling inbound calls, answering enquiries, booking appointments, and managing customer interactions.

This Privacy Policy explains how we collect, use, store, share, and protect personal information in connection with the emii.ai platform and website. It applies to business clients who sign up to use emii.ai (“Clients”), as well as individuals who interact with an emii-powered agent as a caller or end user (“Callers”).

By using the emii.ai platform, you agree to the practices described in this policy. If you do not agree, please discontinue use of our services.

2. Information We Collect

We collect the following categories of information:

Account Data

Information provided by Clients when creating and managing their emii.ai account, including business name, contact name, email address, phone number, and billing details (processed securely via our payment provider).

Call Data

When emii handles a call on behalf of a Client, we may collect and store call recordings, transcripts, caller contact details (such as name and phone number where provided), call summaries, and AI-generated outcomes such as appointment details or action items. This data is collected to deliver the service and provide Clients with a record of interactions.

Business Knowledge

Clients may provide internal documentation, FAQs, website content, pricing information, and other materials used to train and configure their emii agent. This information is treated as confidential and used solely to power the Client’s specific AI agent.

Usage Data

We collect standard technical data about how Clients interact with the emii.ai dashboard, including IP addresses, browser type, pages visited, and session duration, for the purposes of platform security, performance monitoring, and product improvement.

3. How We Process Data - Third-Party Sub-Processors

To deliver the emii.ai service, we engage the following sub-processors. Each sub-processor is bound by data processing agreements consistent with applicable privacy laws.

• Vapi- We use Vapi for voice infrastructure and real-time voice processing. Call audio is routed through Vapi’s platform to enable the AI agent to hear, understand, and respond to callers.
• Google Gemini - We use Gemini as the underlying large language model to generate intelligent, context-aware responses during conversations.
• CRM & Calendar Integrations - With Client authorisation, emii connects to third-party systems including Google Calendar, Microsoft Outlook, and industry-specific CRM or booking platforms to schedule appointments and log call outcomes. Data shared with these platforms is governed by their respective privacy policies.

We do not sell personal data to third parties and do not share data with sub-processors beyond what is necessary to deliver the contracted service.

4. Data Storage and Security

We store Client and call data in enterprise-grade data centres. Where possible, we prioritise infrastructure located within Australia to support compliance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

We implement the following security measures to protect your data:

• End-to-end encryption for data in transit and encryption at rest
• Access controls and role-based permissions limiting data access to authorised personnel only
• Regular security assessments and vulnerability monitoring
• Secure authentication including multi-factor authentication (MFA) for Client accounts

Despite these measures, no system is completely secure. In the event of a data breach that is likely to cause serious harm, we will notify affected individuals and, where required, the Office of the Australian Information Commissioner (OAIC) in accordance with the Notifiable Data Breaches (NDB) scheme.

5. AI Training & Data Usage

Client data, including business knowledge and call recordings, is used onlyto train and improve the Client’s specific, configured emii agent. We do not use Client or Caller data to train our core platform models or to improve any general-purpose AI models, including those operated by our sub-processors.

Aggregated, de-identified usage statistics (with no personally identifiable information) may be used internally to improve platform performance and reliability.

6. Consent and Compliance

emii.ai provides the technical infrastructure for AI-powered call handling. It is the sole responsibility of each Client (the business using emii.ai) to:

• Inform their callers that they are interacting with an AI agent and not a human representative
• Obtain any legally required consent before recording calls, in compliance with applicable telecommunications and privacy laws (including the Telecommunications (Interception and Access) Act 1979 in Australia)
• Maintain a compliant privacy notice on their own website or business materials that discloses the use of AI call handling

emii.ai is not liable for a Client’s failure to comply with consent and disclosure obligations applicable in their jurisdiction.

7. Your Rights

Under the Australian Privacy Principles, individuals have the right to access, correct, or request deletion of personal information we hold about them. To exercise these rights, or if you have a privacy complaint, contact us at [email protected]. We will respond within 30 days.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Where changes are material, we will notify Clients via email or a notice in the dashboard. Continued use of the platform after the effective date of any update constitutes acceptance of the revised policy.

9. Contact

For privacy enquiries, please contact us at [email protected].

Effective date: 29 March 2026