Privacy Policy — GoDentai

1. Who we are

GoDentai is a brand operated by Alessandro Buccini, a sole proprietorship registered in Italy at Via Antonio Vivaldi 11, 86170 Isernia (IS), VAT IT01018280949. For privacy matters we are the data controller. Contact: privacy@godentai.com.

2. What we collect

Depending on how you interact with us:

Lead forms (incl. Instagram/Facebook): when you submit a lead form on our Meta ads, on Instagram/Facebook, or on our site, we collect your name, email, phone number, practice name, approximate annual revenue, and whether you are the practice owner.
Demo bookings: when you book a demo via our online calendar, we collect your name, email, phone (optional), and practice name.
Calls & recordings: if you request a demo or talk to our AI receptionist (“Sophia”), the call may be recorded and transcribed to deliver and improve the service. You are notified at the start of any recorded call and may decline (see §6).
Text messages: the content of SMS you exchange with us, plus your number and timestamps (see §7).
Analytics: the Meta Pixel collects page views, button clicks, and interactions with the ROI calculator. IP address and User-Agent are hashed before transmission. The Pixel loads only as described in §5.
Cookies: technical cookies for session continuity; advertising cookies (Meta) for ad measurement — governed by your choice in our cookie banner (see §5).

3. Why we collect it

Lead qualification: to answer your demo request and present a tailored ROI calculation
Calls & messages: to respond to your inquiry, coordinate appointments, and follow up on an existing request
Ad measurement: to measure which Meta ads drive valuable leads (Conversions API)
Service delivery: if you become a customer, to deliver the AI receptionist service

Legal basis (GDPR): consent for advertising cookies, call recording, and SMS; legitimate interest (Art. 6.1.f) for security and basic analytics; contract performance (Art. 6.1.b) for service delivery.

4. Who sees your data

We share data only with vetted service providers acting on our behalf, by function:

Meta (Facebook/Instagram) — Pixel + Conversions API for ad measurement, and lead-form delivery. Privacy policy
Customer engagement platform — CRM, appointment booking, and voice/SMS messaging.
Telephony & SMS provider — call connectivity and text-message delivery.
AI / speech-processing provider — speech-to-text, language understanding, and response generation for the AI receptionist.
Hosting & infrastructure providers — website hosting, DNS, and security/CDN.

A full, named list of our sub-processors is available on request at privacy@godentai.com, and is provided to customers in the Business Associate Agreement.

International transfers. Several of these providers process data in the United States. Where we transfer personal data of EU/EEA/UK residents to the US, we rely on the European Commission’s Standard Contractual Clauses (SCCs) (and the UK Addendum) together with each provider’s Data Processing Agreement.

We do not sell your data. Ever. (On “sharing” for advertising under California law, see §10.)

5. Cookies & tracking

We use two categories of cookies:

Technical / necessary — always on; needed for the site and chat widget to work.
Advertising (Meta Pixel) — used for ad measurement and retargeting; controlled by your consent.

We use a geo-aware consent banner. If you visit from the EU/EEA, UK, or Switzerland, the Meta Pixel stays off until you click “Accept” (prior opt-in). Everywhere else the Pixel runs by default and you can opt out at any time from the banner. We also honor the Global Privacy Control (GPC) browser signal as an opt-out.

To change your choice later, clear your cookies for this site (which makes the banner reappear) or email privacy@godentai.com.

6. Call recording & voice data

Our AI receptionist may record and transcribe calls for service delivery, quality, and training. Because some US states require all-party consent, we provide a spoken notice at the start of the call; if you do not consent, you can say so or hang up, and you can request a non-recorded channel (email/SMS). Recordings and transcripts are processed by our telephony and AI providers (see §4) and retained as described in §8.

7. Automated calls & text messaging consent

By providing your phone number to GoDentai (Alessandro Buccini) — through our website chat widget, a booking form, a Meta/Instagram lead form, or verbally — you give your prior express consent to receive phone calls and AI-assisted (artificial or prerecorded voice) calls, including via automated dialing technology, at the number provided, for customer-care and marketing related to your inquiry. Consent is not a condition of any purchase. You may opt out at any time by telling us during a call, replying STOP to a text, or emailing privacy@godentai.com; we honor opt-out requests across both calls and texts within 10 business days.

By providing your mobile phone number to GoDentai (Alessandro Buccini) — through our website chat widget, a booking form, a Meta/Instagram lead form, or verbally — you give your express consent to receive customer-care and service-related text messages from us related to your inquiry (such as replies to your questions, appointment coordination, and follow-up on an existing request).

Message purpose: customer care and service notifications (no promotional content).
Message frequency: varies based on your interactions with us.
Msg & data rates may apply.
Opt-out: reply STOP at any time to stop receiving messages.
Help: reply HELP for assistance, or email privacy@godentai.com.

We never sell or share your mobile number or SMS consent with third parties for their own marketing. Mobile information is not shared with third parties for promotional or marketing purposes.

8. How long we keep it

Analytics events: 13 months (Meta default)
Leads & demo bookings (no follow-up): 90 days, then deleted
Call recordings & transcripts: 90 days for non-customers; for customers, only as long as needed for service delivery
Customer data: 10 years after contract end (Italian fiscal law)

9. Your rights (GDPR + CCPA)

You can:

Access the data we hold about you
Rectify or delete your data
Object to processing for marketing purposes
Withdraw consent (e.g. to call recording or advertising cookies) at any time
Request data portability
Lodge a complaint with a data protection authority (Garante Privacy in Italy)

To exercise any right, email privacy@godentai.com. We respond within 30 days. We will not discriminate against you for exercising any of these rights.

10. California privacy rights (CCPA/CPRA)

We do not “sell” your personal information for money. However, our use of the Meta Pixel and Conversions API may qualify as “sharing” for cross-context behavioral advertising under California law.

California residents can exercise the right to opt out of this “sharing” by:

selecting “Opt out” / “Reject” in our cookie banner;
enabling Global Privacy Control (GPC) in your browser (we honor it automatically); or
emailing privacy@godentai.com with “Do Not Sell or Share” in the subject.

You also have the rights to know, access, correct, and delete your information, and the right to non-discrimination. We do not use or disclose sensitive personal information for purposes that would trigger a separate right to limit.

11. Children’s privacy

Our website and service are intended for businesses and adults. We do not knowingly collect personal information from children under 16. If you believe a child has provided us data, email privacy@godentai.com and we will delete it.

12. HIPAA

If you become a customer, our AI receptionist (Sophia) handles Protected Health Information (PHI) on your behalf. We sign a Business Associate Agreement (BAA) at contract start. PHI is encrypted at rest, processed only on US servers, retained only as long as necessary for service delivery.

13. Changes

We may update this policy. Major changes are communicated via email to active customers and posted here. The "Last updated" date at the top reflects the latest revision.