Legal

Privacy Policy

How Autoza AI collects, uses, and protects your data.

Last updated: April 2026

01

Introduction

Autoza AI (“we”, “our”, “us”) provides an automated AI phone-call management platform integrated with monday.com and Retell AI. This Privacy Policy explains how we collect, use, store, and protect your information when you install and use our application.

By installing or using Autoza AI you consent to the data practices described here. We are committed to handling your data with transparency, minimum collection, and strong encryption.

02

Information we collect

Account information

  • monday.com account ID and workspace slug
  • Company name (from monday.com workspace)
  • Notification email you provide during onboarding

API credentials (encrypted)

  • monday.com OAuth access tokens
  • Retell AI API keys (only if you BYOK)
  • Stored AES-256-GCM encrypted at rest

Board data

  • Board, item, and column values from boards you authorise
  • Subitem schedules (call times, frequencies, timezones)
  • Phone numbers and names from People columns

Call data

  • Call ID, type, employee name, phone number, status, duration
  • AI summary, transcript references, dynamic context variables
  • Retry queue entries (no PII beyond the above)

We do not collect: personal browsing data, IP addresses for analytics, marketing identifiers, or any data outside the boards you authorise the app on.

03

How we use your information

Authenticate your monday.com account via OAuth2
Read board and subitem data to schedule and initiate calls
Initiate phone calls to numbers you have configured
Provision and manage AI voice agents on Retell AI
Send dispatch email notifications when employees are late or absent
Display call history, AI summaries, and statistics inside the app

We do not use your data for advertising, profiling, AI training, or any purpose outside the core functionality above. We will never contact you for marketing purposes unless you explicitly opt in.

04

Free-trial data handling

About the 100-call free trial

When you choose "Start with 100 free calls" during onboarding, your tenant uses our shared Retell AI account and shared calling number to make calls.

Specifically, during the trial:

  • We provision a separate Retell AI agent on our shared Retell account for your tenant. The agent is tagged with your tenant_id so call results route only to you.
  • Outbound calls are placed from our shared phone number. The recipient's caller ID will display this number, not yours.
  • We log call metadata (number, duration, status, AI summary) to your tenant. Retell AI processes the audio per their privacy policy at retellai.com/privacy-policy.
  • We meter your trial usage (current count vs. limit) so the trial auto-pauses once the cap is reached.
  • When you upgrade and connect your own Retell AI key, we immediately stop using the shared account for your future calls and switch to a freshly-provisioned agent on your own account.

We do not share your call data, transcripts, board data, or notification emails with other trial tenants. Tenants are isolated at the database level — the only thing shared is the Retell account and the calling phone number.

05

Data security

Encryption at rest

All sensitive credentials (monday.com OAuth tokens, Retell API keys) are encrypted with AES-256-GCM before being written to the database.

Encryption in transit

All HTTP traffic is forced to TLS 1.2+ via HSTS. Database connections use SSL.

Database isolation

Self-hosted PostgreSQL on our private VPS (United States). Tenant data is row-level isolated by tenant_id and never returned across tenants.

JWT-verified requests

Every API request from the monday.com iframe is verified server-side using a signed monday.com session token.

06

Third-party services

We do not sell or share your data with third parties, and we do not use any analytics, advertising, or tracking services. Data is only transmitted to the following services as required for core functionality:

monday.com
api.monday.com / auth.monday.com
Read and write the board data you authorise, manage webhooks, and exchange OAuth authorization codes for access tokens.
Retell AI
api.retellai.com
Provision AI voice agents and initiate phone calls. BYOK customers use their own key; trial users share ours.
Gmail SMTP
smtp.gmail.com
Send dispatch email notifications (late/absent employee alerts) from our configured sender.

Our database is self-hosted on our own private VPS (United States) and is not a third-party service. The only external SDK loaded in the browser is the official monday-sdk-js library, required to communicate with the monday.com iframe. No third-party scripts, pixels, or analytics tools are loaded in the browser.

07

Data retention & deletion

During active use

Call logs, board mappings, and tenant configuration are retained for the lifetime of your account so you can review historical reporting.

Upon uninstall

When you uninstall Autoza AI from monday.com, all your tenant data — including encrypted credentials, board mappings, agent records, and call logs — is permanently deleted within 10 days.

For trial users: when you upgrade to your own Retell account we atomically delete the trial-agent record from our database. The agent itself remains on our shared Retell account but is orphaned (no calls will ever be placed through it again).

08

Your rights

Access
You may request a copy of all data we hold about your account.
Deletion
You may request deletion at any time by emailing us or by uninstalling from monday.com.
Portability
You may request an export of your call logs and configuration data in JSON format.
Pause
You can pause automation from settings without uninstalling. This stops new call data collection.
09

Children's privacy

Autoza AI is a B2B workplace tool intended for use by businesses and their employees. We do not knowingly collect any personal information from children under 16. If you believe we may have collected such information, please contact us immediately and we will delete it.

10

Contact us

For privacy inquiries, data requests, or questions about this policy, email support@autoza.tech. We respond within 5 business days.

Have a privacy question?

We respond to every privacy and data request within 5 business days.

support@autoza.tech