Platform Privacy Policy

FinnleyAI is a product of Magmaxis Corporation (“Magmaxis,” “we,” “us,” or “our”), a Delaware corporation. This Privacy Policy explains how we collect, use, disclose, and protect personal information in connection with the FinnleyAI platform, dashboard, telephony service, and related services (collectively, the “Services”) used by our business customers (“Customers”).

Scope. This policy governs the Services only. It is incorporated by reference into the FinnleyAI Platform Terms of Service or your order form. It does not cover the FinnleyAI marketing website, which has its own, separate Website Privacy Policy.

A note on the two kinds of people we interact with. FinnleyAI is an AI-powered voice receptionist used by businesses (“Customers”). When we handle information about our Customers and their authorized users, we act as a data controller (or “business” under applicable state privacy laws). When FinnleyAI answers calls on behalf of a Customer and processes information about that Customer’s callers (“Caller Data”), we act as a service provider / data processor on the Customer’s behalf and under the Customer’s instructions. Sections 1–8 primarily address Customer data; Section 9 addresses Caller Data.

1. Information We Collect

Information you provide to us:

Account information: name, business name, email address, phone number, job title, and password or authentication credentials.
Billing information: payment card details and billing address (processed by our payment processor; we do not store full card numbers).
Configuration data: business hours, call-handling instructions, escalation contacts, calendars, knowledge-base content, and other information you provide to configure your AI receptionist.
Communications: support requests, sales inquiries, feedback, and survey responses.

Information collected automatically:

Usage data: dashboard activity, feature usage, log data, IP address, browser type, device identifiers, and pages visited.
Cookies and similar technologies: the platform dashboard uses a cookie or equivalent token to keep you signed in and to remember in-app preferences. You can control this through your browser settings, though disabling it will prevent you from staying logged in.

Information from third parties:

Telephony metadata from our telephony providers (e.g., caller ID, call duration, carrier information).
Information from integrations you connect (e.g., your PSA/ticketing tool, property management platform, field service software, or calendar), only as authorized by you.

2. How We Use Information

We use Customer information to:

Provide, operate, maintain, and secure the Services;
Set up and configure your AI receptionist according to your instructions;
Process payments and manage billing;
Communicate with you about your account, service updates, and (with your consent where required) marketing;
Monitor, troubleshoot, and improve the Services, including quality assurance review of system performance;
Detect and prevent fraud, abuse, and security incidents;
Comply with legal obligations.

AI model training. We do not use Customer content or Caller Data to train generalized AI models.

We do not sell personal information. We share information only with:

Subprocessors and service providers that help us deliver the Services, under contracts limiting their use of the data. These include telephony and communications providers, speech-to-text and text-to-speech providers, large language model providers, cloud hosting providers, and payment processors. A current list of subprocessors is available upon request.
Your integrations, at your direction (e.g., writing a ticket into your PSA or an appointment into your calendar).
Professional advisors such as lawyers, auditors, and insurers where necessary.
Legal and safety recipients when required by law, subpoena, or legal process, or where necessary to protect the rights, safety, or property of Magmaxis, our Customers, or others.
Corporate transactions: in connection with a merger, acquisition, financing, or sale of assets, subject to confidentiality protections.

4. Data Retention

We retain Customer account information for as long as your account is active and as needed to comply with legal, tax, and accounting obligations. Call recordings and transcripts are retained per Customer configuration, after which they are deleted or de-identified, unless a longer period is required by law or agreed with the Customer. You may request deletion of your account data as described in Section 7.

5. Security

We implement administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit and at rest, access controls, audit logging, and network security controls. No system is perfectly secure, and we cannot guarantee absolute security. If we become aware of a breach affecting your personal information, we will notify you as required by applicable law.

6. International Data Transfers

Our Services are hosted in the United States. If you access the Services from outside the United States, you understand that your information will be transferred to and processed in the United States, which may have different data protection laws than your jurisdiction.

7. Your Privacy Rights

Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of your personal information, to opt out of certain processing, and to not be discriminated against for exercising these rights. Residents of California, Colorado, Connecticut, Virginia, Utah, and other states with comprehensive privacy laws may exercise these rights by contacting us at legal@magmaxiscorp.com. We will verify your request and respond within the time required by applicable law. If we deny your request, you may appeal by replying to our decision.

Note for callers: If your information was collected when you called a business that uses FinnleyAI, that business controls your data. Please direct requests to that business; we will assist them in fulfilling verified requests as their service provider.

8. Children’s Privacy

The Services are not directed to children under 18, and we do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us at legal@magmaxiscorp.com and we will delete it.

9. Caller Data (Processed on Behalf of Our Customers)

When FinnleyAI answers a call for a Customer, we may process on the Customer’s behalf:

Audio of the call and derived transcripts;
Caller identity details the caller provides or that are derived from caller ID (name, phone number, company, account or ticket identifiers);
The content of the caller’s request (e.g., a maintenance issue, an appointment request, an IT support issue);
Call metadata (time, duration, routing, outcomes).

We process Caller Data solely to provide the Services to the Customer — answering, routing, transcribing, scheduling, creating tickets, and related functions — and for security, debugging, and quality assurance as permitted by our agreement with the Customer. Each Customer is responsible for providing any legally required notices to its callers, including call recording and AI/automated-agent disclosures.

10. Call Recording and AI Disclosures

Calls handled by FinnleyAI may be recorded and transcribed. Consent requirements for recording vary by jurisdiction (some states, including Florida and California, require all-party consent). Our Customers are responsible for enabling appropriate disclosures and obtaining any required consents for their callers. FinnleyAI is designed to be upfront that a caller is speaking with an AI assistant when asked, and Customers should confirm this is sufficient for the disclosure requirements in their jurisdiction before relying on it as their sole disclosure mechanism.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through the Services before the changes take effect. Your continued use of the Services after the effective date constitutes acceptance of the updated policy.

12. Contact Us

Magmaxis Corporation Email: legal@magmaxiscorp.com

If you have questions, concerns, or complaints about this Privacy Policy or our data practices, contact us and we will respond promptly.