Sign up free. Your first $2 is on us.

Privacy Policy

Last updated: 20 April 2026

This Privacy Policy describes how Eksporto atradimai, MB (registration no. 304526374, registered address: Rasos g. 17-1, Domeikavos k., LT-54359 Kauno r., Lithuania) ("Aibilo", "we", "us", or "our") collects, uses, and shares information when you use our website at aibilo.io and our outbound calling platform at app.aibilo.io (collectively, the "Service").

By using the Service you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the Service.

1. Data We Collect

Account Data

When you register for an account we collect your name, email address, company name, and a hashed password. We do not store plain-text passwords.

Call Data

When you use the platform to make outbound calls we may collect and store:

  • Call audio recordings (if the recording feature is enabled)
  • Call transcriptions generated from those recordings
  • Call metadata: destination phone numbers dialled, call duration, timestamps, and call outcomes

Call recordings and transcriptions are stored on your behalf. You, as the account operator, are responsible for informing called parties about recording in accordance with applicable law.

AI Autonomous Caller Data

If you use the AI Autonomous Caller feature, we process:

  • Contact lists you upload (names, phone numbers, and any additional fields you provide)
  • AI campaign configuration data (prompts, instructions, scripts)
  • AI call interaction logs and outcomes

Contact list data is used solely to execute your configured campaign. We do not use it for any other purpose.

Usage Data

We collect information about how you interact with the Service, including login activity, feature usage patterns, and session logs, for the purpose of operating and improving the platform.

Payment Data

Billing is handled by a third-party payment processor. We do not store your full card details. We retain billing records (amounts charged, dates) as required by law.

Technical Data

We and our service providers may collect your IP address, browser type, device identifiers, and cookie data. See our Cookie Policy for details.

Google Services Integration

If you choose to connect your Google account to Aibilo, we use Google services, including Google Calendar, only to provide the integration features you request.

Google Calendar integration allows Aibilo to synchronize appointments with your primary Google Calendar. Aibilo may create, update, or delete calendar events when related appointments are created, updated, or deleted in Aibilo.

Calendar events may include appointment details such as title, description, date and time, time zone, and invited guest email addresses. We may also receive basic Google account information, such as your email address, to identify the connected account.

We store only the information needed to keep the integration connected and synchronized, such as calendar connection data and calendar event references. You can disconnect your Google account at any time, after which Aibilo stops synchronizing appointments with your Google Calendar.

We do not use Google user data for advertising, sell Google user data, use Google Calendar data to train AI models, or view unrelated calendar activity. We protect Google user data using appropriate technical and organizational security measures.

Aibilo’s use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.

2. How We Use Your Data

  • Provide and operate the Service — processing calls, storing recordings, running AI campaigns
  • Billing — calculating per-minute charges and processing payments
  • Service communications — sending transactional emails such as invoices, alerts, and security notifications
  • Platform improvement — analysing aggregated, anonymised usage data to improve features
  • Legal compliance — retaining records as required by applicable law
  • Marketing — only with your explicit consent, which you may withdraw at any time

3. Legal Basis for Processing (GDPR)

We process your personal data on the following legal bases:

  • Contract performance — to provide the Service you have signed up for
  • Legitimate interests — fraud prevention, platform security, service improvement
  • Legal obligation — retaining financial records, responding to lawful authority requests
  • Consent — marketing communications (you may withdraw at any time)

For call recordings and transcriptions, you (the account operator) are the data controller in respect of called parties' data, and we act as your data processor. You are responsible for establishing your own legal basis for recording.

4. Third-Party Processors and Subprocessors

Telnyx LLC

Outbound telephony infrastructure, call routing, and call recording storage are provided by Telnyx LLC. Call audio and metadata are transmitted through and may be stored on Telnyx infrastructure. Telnyx has its own privacy practices; see telnyx.com/privacy-policy. Telnyx telephony rates are independently set and may change at any time; Aibilo is not responsible for fluctuations in Telnyx pricing.

Payment Processor

Stripe, Inc. processes subscription billing on our behalf. Stripe may process your billing information (name, email, card details) solely for payment purposes. See stripe.com/privacy.

Analytics

Google Analytics (Google LLC) processes anonymised usage data to help us understand how visitors use the platform. IP anonymisation is enabled. See policies.google.com/privacy.

Google Calendar / Google APIs

If you connect Google Calendar, Google LLC processes calendar event data as necessary to provide the calendar synchronization feature. This may include appointment details that are sent to your Google Calendar when events are created, updated, or deleted.

We require all subprocessors to maintain appropriate data protection standards. A full subprocessor list is available on request.

5. Call Recording and Transcription

If you enable call recording, recordings and transcriptions are stored on your behalf. You acknowledge that:

  • Recording laws vary by jurisdiction. You are solely responsible for complying with applicable recording consent laws in every jurisdiction where your calls terminate.
  • In many jurisdictions (including EU member states and several US states) you must inform the called party that the call is being recorded.
  • Aibilo provides the technical capability; compliance with recording laws is your responsibility.

6. AI Autonomous Caller

The AI Autonomous Caller is a feature that allows you to configure an AI agent to make outbound calls to a contact list. In relation to data privacy:

  • You are the data controller for the contact list you upload and all personal data therein.
  • We process that data only to execute your campaign configuration.
  • AI call interactions may be recorded and transcribed as with standard calls.
  • You are responsible for ensuring you have appropriate legal basis (consent or legitimate interest) to contact each individual via an automated AI system.
  • We do not use your contact list data to train AI models or for any purpose beyond your configured campaign.

7. Data Retention

  • Account data — retained for the duration of your subscription and deleted within 30 days of account termination on request.
  • Call recordings and transcriptions — retained for the period configured by your account administrator (default: 1 year). You may delete them earlier at any time.
  • Call metadata — retained for 12 months for billing reconciliation, then deleted.
  • Billing records — retained for 7 years as required by Lithuanian accounting law.
  • Google Calendar connection data — retained while the Google Calendar integration remains connected. When the integration is disconnected, we remove the stored Google Calendar connection from our systems. Calendar event references may be retained as part of appointment records unless the related appointment or account data is deleted.

8. Your Rights Under GDPR

If you are located in the European Economic Area, you have the following rights:

  • Access — obtain a copy of the personal data we hold about you
  • Rectification — correct inaccurate data
  • Erasure — request deletion of your data ("right to be forgotten")
  • Restriction — restrict how we process your data in certain circumstances
  • Portability — receive your data in a structured, machine-readable format
  • Objection — object to processing based on legitimate interests
  • Withdraw consent — withdraw consent for marketing at any time without affecting prior processing

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with the Lithuanian State Data Protection Inspectorate (vdai.lrv.lt) or another EU supervisory authority.

9. California Residents (CCPA)

If you are a California resident, you have the right to know what personal information we collect, the right to delete your personal information, and the right to opt out of the sale of personal information. We do not sell personal information. To exercise your rights, contact us using the details in Section 14.

10. International Data Transfers

Telnyx and other subprocessors may process data outside the European Economic Area, including in the United States. Where such transfers occur we rely on appropriate safeguards such as Standard Contractual Clauses approved by the European Commission. You may request a copy of the relevant transfer mechanisms by contacting us.

11. Security

We implement appropriate technical and organisational measures to protect your data, including encryption in transit (TLS) and at rest, access controls, and regular security reviews. In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the relevant supervisory authority as required by GDPR.

12. Children

The Service is not directed at persons under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us immediately.

13. Changes to This Policy

We may update this Privacy Policy from time to time. For material changes we will notify you by email or through the platform at least 30 days before the changes take effect. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of the Service after the effective date constitutes acceptance of the updated policy.

14. Contact

For privacy-related questions, data subject requests, or to report a concern:

  • Email: [email protected]
  • Company: Eksporto atradimai, MB
  • Address: Rasos g. 17-1, Domeikavos k., LT-54359 Kauno r., Lithuania