Privacy Policy

This policy applies to:

• Customers: businesses and individuals who create a Demofi account
• Visitors: people who interact with an AI Concierge session deployed by a Demofi customer
• Website visitors: people who visit trydemofi.com

2.1 Account Information When you create an account, we collect your name, email address, company name, and password (hashed). If you sign in with Google, we receive your name and email from Google.

2.2 Configuration Data Information you provide to configure your AI Concierge, including your company website URL, talking points, FAQs, objection handling scripts, sales methodology, and any documents or text you upload to the Knowledge Base.

2.3 Session Data When an AI Concierge session occurs, we collect: visitor email address (if provided), session duration, conversation transcripts, session recordings (video of the AI avatar), and session source (Demo Link or Widget).

2.4 Prospect and Outreach Data If you use our outbound features, we process prospect names, email addresses, job titles, company names, and LinkedIn URLs sourced through Apollo.io or uploaded by you. We also track email delivery, open, and click events.

2.5 Usage and Analytics Data We collect data about how you use the Service, including pages visited, features used, minutes consumed, session counts, and actions taken in the dashboard.

2.6 Technical Data IP address, browser type, device type, operating system, referring URL, and cookies or similar tracking technologies.

2.7 Payment Information Payment card details are collected and processed by Stripe. We do not store full card numbers. We receive transaction confirmations, subscription status, and billing history from Stripe.

We use your information to:

• (a) Provide, operate, and maintain the Service
• (b) Personalize and configure AI Concierge personas on your behalf
• (c) Process payments and manage subscriptions
• (d) Send transactional emails (session follow-ups, billing receipts, usage alerts)
• (e) Send outreach emails on your behalf when you use our campaign features
• (f) Detect and prevent fraud, abuse, and security incidents
• (g) Analyze usage patterns to improve the Service
• (h) Train and improve AI models using anonymized, aggregated session data
• (i) Comply with legal obligations
• (j) Communicate with you about product updates, new features, and relevant offers

To power AI Concierge sessions, we transmit relevant configuration data and conversation input to third-party AI providers:

• Anam (anam.ai) — AI avatar video and conversation infrastructure
• OpenAI / GPT — language model powering conversation intelligence
• Firecrawl — website scraping for knowledge base generation
• Anthropic Claude — content analysis and knowledge extraction

These providers process data under their own privacy and security commitments. We select providers that maintain industry-standard security practices. Data sent to AI providers includes your configured persona prompt and real-time conversation content. It does not include your payment information or account credentials.

We do not sell your personal information. We share data only with:

• (a) Service providers who help us operate the platform, including Anam, Resend, Stripe, Apollo.io, Supabase, Cloudflare, and analytics providers — each bound by confidentiality obligations
• (b) You, when you request access to or export of your data
• (c) Law enforcement or government authorities when required by applicable law, court order, or to protect our legal rights
• (d) Successors in the event of a merger, acquisition, or sale of assets — you will be notified before your data is transferred and becomes subject to a different privacy policy

AI Concierge sessions may be recorded. Recordings capture the AI avatar's video and audio only — visitor video and audio are not recorded by Demofi. Conversation transcripts capture text from both the visitor and the AI avatar.

If you are a Demofi customer, you are responsible for notifying your website visitors that AI sessions may be recorded and transcribed. You should include appropriate disclosures in your website's privacy policy.

When you use our outbound email features, you are the sender of record. You are responsible for complying with all applicable email laws including CAN-SPAM, GDPR, and CASL. Demofi provides the infrastructure; you control the recipient list and message content.

• Account and configuration data: retained for the duration of your account and deleted within 30 days of account closure upon request
• Session transcripts and recordings: retained while your account is active; available for export at any time
• Prospect data: retained until you delete it or close your account
• Payment records: retained as required by law (typically 7 years)
• Anonymized analytics data: may be retained indefinitely

You may request deletion of your personal data at any time by contacting us at arash@trydemofi.com.

We implement industry-standard security measures including:

• Encryption in transit (TLS/HTTPS for all data)
• Encrypted data storage
• Access controls and authentication
• Regular security reviews

No system is completely secure. You use the Service at your own risk. If you believe your account has been compromised, contact us immediately.

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate personal data
• Request deletion of your personal data
• Export your data in a portable format
• Object to or restrict certain processing
• Withdraw consent (where processing is based on consent)

To exercise any of these rights, contact us at arash@trydemofi.com. We will respond within 30 days.

If you are located in the European Economic Area, we process your personal data under the following legal bases:

• Contract performance (providing the Service you subscribed to)
• Legitimate interests (security, fraud prevention, product improvement)
• Legal obligation (compliance with applicable laws)
• Consent (marketing communications — you may withdraw at any time)

For cross-border data transfers outside the EEA, we rely on Standard Contractual Clauses or other appropriate safeguards as required by GDPR.

California residents have the right to know what personal information we collect, request deletion, opt out of sale (we do not sell personal information), and not be discriminated against for exercising these rights. To submit a request, contact arash@trydemofi.com.

We use cookies and similar technologies for:

• Authentication (keeping you logged in)
• Preferences (remembering your settings)
• Analytics (understanding how the Service is used via Google Analytics)
• Referral tracking (attributing signups to referral links)

You can control cookies through your browser settings. Disabling cookies may affect Service functionality.

We use Google Analytics 4 (GA4) to collect anonymized usage data. You can opt out of GA4 tracking using Google's opt-out browser add-on.

The Service is not directed to children under 16. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, contact us and we will delete it.

If you are interacting with an AI Concierge on a third-party website powered by Demofi, that website's operator is responsible for the deployment. Your conversation may be recorded and transcribed. Your email address, if provided, will be stored by the website operator via Demofi's platform. Please review that website's own privacy policy for information about their data practices.

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice in the Service at least 14 days before changes take effect. Your continued use of the Service after the effective date constitutes acceptance of the updated policy.

For privacy questions, data requests, or concerns: