Privacy Policy

Chiti (“we,” “us,” or “our”) provides an AI-native autonomous administrative engine that helps professional service firms — such as law firms and CPA practices — manage client intake, communications, and scheduling. This Privacy Policy describes how we collect, use, disclose, and protect information when you interact with our services, including when you communicate via voice or SMS with firms using our platform.

When professional service firms use Chiti to communicate with prospects and clients, we process data strictly as a service provider. We may process:

• Contact Information: Phone numbers (required for voice and SMS routing), names, and email addresses.
• Intake Details: Practice area inquiries, appointment preferences, and high-level situation summaries provided by callers.
• Voice and SMS Data: Call transcripts and SMS logs to facilitate intake routing and provide intelligence briefings to the firm.

Crucial distinction for Professional Services: Chiti is designed not to solicit highly sensitive legal evidence or financial account numbers. Our AI guardrails are trained to defer complex or sensitive matters to the human professional.

This section describes how Chiti handles SMS and voice communications on behalf of our client firms. These are transactional communications only — you will never receive marketing, promotional, or advertising messages from Chiti.

• Consent: You provide consent to receive communications when you supply your phone number to a firm via their website, inbound call, or intake form.
• Opt-Out: You may reply STOP to any SMS to cease text communications.

We use the information collected solely to:

• Deliver Services: Facilitate autonomous intake, schedule consultations, and route escalations to firm staff.
• Ensure Compliance: Maintain records required by telecom regulations (TCPA, CTIA).
• Improve System Guardrails: Analyze anonymized patterns to improve AI compliance boundaries (e.g., ensuring the AI appropriately defers legal/tax questions).

We never use client intake data for marketing, profiling, behavioral advertising, or secondary commercial purposes. We do not sell data.

We recognize the sensitive nature of professional services. We retain data only as long as necessary:

• Call Transcripts: Retained for 30 days (or as configured by the firm administrator) for quality assurance and intake briefing, after which they are automatically purged.
• Account Data: Retained until deletion is requested by the firm.

Privilege Note: For questions regarding attorney-client privilege or specific firm data retention, callers must contact the specific law or accounting firm directly.

We protect information using:

• Industry-standard encryption (TLS 1.3) for data in transit and AES-256 for data at rest.
• Strict access controls limiting data visibility to authenticated firm administrators.

California residents may have additional rights under the California Consumer Privacy Act (CCPA), including the right to know, delete, and opt out of the sale of personal information. As noted above, Chiti does not sell personal information. To exercise your rights, please contact us at hello@usechiti.com.

If you are located in the European Economic Area, United Kingdom, or Switzerland, you may have rights under the General Data Protection Regulation (GDPR) or equivalent local laws. Chiti processes personal data in its role as a data processor on behalf of our client firms, which serve as data controllers. Please direct data subject requests to the relevant firm first, or contact us at hello@usechiti.com.

We may update this Privacy Policy from time to time. When we do, we will revise the Effective Date at the top of this page. Continued use of services following posted changes constitutes acceptance of those changes.

Questions about this Privacy Policy? Reach us at: hello@usechiti.com