Effective October 20, 2026
Privacy Policy
This policy explains how Elegant Tech LLC (Attendra, we) handles personal information: on this website, in the Attendra service, and on the calls Attendra answers for veterinary clinics.
1. Who we are
Elegant Tech LLC is a New York limited liability company that provides the Attendra service. The software is developed and supported for us by our affiliate, Elegant IT Limited.
2. Two roles
- For our customers' callers, we act for the clinic. When Attendra answers a clinic's phone, the clinic decides what information is collected and why, and we process it on the clinic's behalf as its service provider. If you called a clinic, the clinic's own privacy notice applies too, and the clinic is the best place to send requests about your information; we help it answer them.
- For our own customers and visitors, we decide. We are responsible for the account, billing and website information described below.
3. What we collect
| Whose | What |
|---|---|
| Callers to a clinic | Phone number; what is said on the call, as a transcript, and a recording only if the clinic turned recording on; name, pet's name and details, appointment and request details the caller gives; the outcome of the call. |
| Clinic staff | Name, work email, role, password (stored only as a secure hash), two-step sign-in settings, and what they do in the dashboard, kept in an audit log. |
| Account owners | Name, email, the clinic's name, phone number and time zone, billing status. Card details are collected and held by Stripe, not by us. For text registration: the business's legal name, tax ID, address and contact. |
| Website visitors | Standard server logs: IP address, browser and pages requested. The website has no advertising trackers. |
4. How we use it
- To answer calls for the clinic: find the caller's record, book and change appointments, take requests, send confirmations and route emergencies, as the clinic set it up.
- To run the clinic's account: sign-in, the dashboard, the weekly report, billing, phone numbers and support.
- To keep the service safe and working: security, fraud and abuse prevention, the audit log, and fixing problems.
- To improve the service, using aggregated and de-identified information about how it is used.
- To meet legal obligations.
We do not sell personal information, we do not use it for advertising, and we do not use clinics' or callers' information to train AI models.
5. AI and calls
Callers are always told that they are speaking with an AI assistant. The conversation is processed by OpenAI's models through OpenAI's API, which OpenAI states it does not use to train its models by default. The decisions that matter, such as identity checks, bookings and emergencies, are made by Attendra's own code under the clinic's rules. Call summaries and answers from a clinic's documents are produced by OpenAI's models and are not stored by OpenAI where its API lets us ask for that. Names, dates of birth and phone numbers are encrypted in our database.
6. Who we share it with
We share personal information only with the providers that run parts of the service for us, under contracts that limit their use of it, and when the law requires.
| Provider | What for |
|---|---|
| OpenAI | Speech and language processing on calls, call summaries, website import in setup |
| Twilio | Phone calls and text messages |
| Stripe | Payments and billing |
| Postmark | Account email: confirmations, reports, notices |
| Google Analytics | Counting visits to this website, never the dashboard or calls |
| Our hosting provider | Servers and encrypted backups, including Cloudflare for backup storage |
Clinics can also connect their own tools through webhooks and the API; what is sent there is the clinic's choice and is covered by the clinic's own arrangements. If our business is sold or merged, information may pass to the new owner under this policy.
7. How long we keep it
Transcripts, call summaries and call details are kept for the period the clinic sets, about 7 years by default and at least 30 days, and then deleted. Account information is kept while the account is open. After a subscription ends, we keep a clinic's data for 30 days so it can be exported, then delete it; encrypted backups are kept for 30 days and then deleted. Billing records are kept as tax law requires.
8. Security
- Connections are encrypted in transit.
- Names, dates of birth and phone numbers are encrypted in the application before they are stored, and each clinic's records are separated in the database itself.
- Dashboard access is by role, with optional two-step sign-in; API keys are scoped and expire.
- Every access to records is written to an audit log.
- Nightly backups are encrypted and kept off the server.
No system is perfectly secure. If a breach affects personal information, we will tell the affected clinics without undue delay and help them meet their own notification duties.
9. Where it is processed
The service runs on servers in the United States. Our providers may process information in other countries, and our support team may access systems from outside the United States, always under the protections in this policy and our contracts.
10. Your choices and rights
Depending on where you live, you may have the right to know what personal information we hold about you, to get a copy, to correct it, to have it deleted, and to object to or limit some uses. Callers should contact the clinic first, since we act for it; we help the clinic respond. Clinic staff and account owners can contact us directly. We will not treat you differently for using these rights. We may need to confirm your identity first.
11. California
In the last 12 months we collected the categories of personal information listed in section 3, for the purposes in section 4, and disclosed them only to the providers in section 6 for those purposes. We do not sell or share personal information for cross-context behavioural advertising, and we do not knowingly collect personal information of anyone under 16.
12. Children
The service is for businesses and is not directed at children. A child may call a clinic; their information is handled for the clinic like any caller's.
13. Cookies
The dashboard uses only the cookies it needs to keep you signed in. This website uses Google Analytics to count visits and see which pages help visitors: it sets Google's analytics cookies, and Google receives your browser's details and approximate location. We use no advertising features, and nothing from the dashboard or from calls is sent to it. You can block it in your browser or with Google's opt-out add-on. The "Book a demo" page is run by Cal.com under its own privacy policy.
14. Changes
We will post changes here with a new effective date, and email account owners about material changes at least 30 days before they take effect.
15. Contact
Elegant Tech LLC, New York, United States. For privacy questions and requests, write to us at hello@getattendra.com.