Privacy Policy

We may collect the following types of information:

• Personal Information: Name, phone number, email address, and mailing address.
• Customer Information: Order details, purchase history, loyalty membership information, and other retail-related information you provide during calls.
• Payment Information: Payment card data processed in accordance with PCI DSS standards. We do not store raw card numbers.
• Communication Data: Call recordings, transcripts, SMS/text messages, and voicemails.
• Device Information: Phone number, carrier information, and device identifiers when you interact with our services.
• Usage Data: Information about how you interact with our services, including call times, durations, and service preferences.

When you opt in to receive SMS/text messages from Spriggan Assistant or retailers using our platform, we collect and process:

• Your mobile phone number
• Your consent status and opt-in/opt-out history
• Message content and delivery status
• Timestamps of messages sent and received

Message Types: You may receive order updates, pickup notifications, promotional offers, back-in-stock alerts, and other retail-related communications.

Opt-Out: You can opt out of SMS messages at any time by replying STOP to any message. Reply HELP for assistance. Message and data rates may apply. Message frequency varies based on your interactions.

We use the information we collect to:

• Provide AI-powered receptionist services to retail businesses
• Answer questions about store hours, inventory, and services
• Process and track orders on your behalf
• Send order updates, pickup notifications, and promotional messages via SMS/text or voice calls
• Facilitate communication between you and the retail business
• Process PCI-compliant payments
• Improve and optimize our services
• Comply with legal and regulatory requirements

Spriggan Assistant is fully committed to compliance with the Payment Card Industry Data Security Standard (PCI DSS). We implement all required controls for the secure handling of payment card data.

Personally Identifiable Information (PII): Any personal information we collect on behalf of retail businesses is handled with appropriate security controls. We implement administrative, physical, and technical safeguards to protect the confidentiality, integrity, and availability of customer data.

Data Minimization: We only collect and retain the minimum amount of personal information necessary to accomplish the intended purpose.

We implement industry-standard security measures to protect your information, including:

• Encryption of data in transit and at rest (AES-256)
• Tokenization of payment card data
• Secure, access-controlled data centers
• Regular security audits and vulnerability assessments
• Employee training on data privacy and security
• Multi-factor authentication for system access
• Audit logging of all data access

We retain your information for as long as necessary to provide our services and comply with legal obligations. Specifically:

• Customer Data: Retained in accordance with applicable regulations and our agreements with retail businesses
• SMS/Call Records: Retained for the duration of your relationship with the retail business plus any legally required retention period
• Payment Data: Tokenized data retained per PCI DSS requirements; raw card data is never stored
• Consent Records: Retained for as long as required to demonstrate compliance with applicable regulations

You have the following rights regarding your information:

• Access: Request access to the personal information we hold about you
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your information (subject to legal retention requirements)
• Opt-Out: Opt out of SMS/text messages by replying STOP
• Data Portability: Request a copy of your data in a portable format

To exercise any of these rights, please contact us at support@spriggan.ai

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. We encourage you to review this Privacy Policy periodically.

If you have any questions about this Privacy Policy or our privacy practices, please contact us: