InstaRefer Privacy Policy
Effective Date: Sep 01, 2026
1. Who We Are
InstaRefer ("InstaRefer," "we," "us," or "our") is a service operated by SAAAZ, INC. (dba) InstaRefer, a California corporation operating as a web-based service. InstaRefer provides AI-powered call and chat answering services to local businesses "Business Clients," and, through those services, may interact with the Business Client's own customers and callers ("End Users").
This Policy explains what personal data we collect, why, how it's used, and what rights you have — whether you're visiting our website, a Business Client evaluating our services, or an End User calling or messaging a business that uses InstaRefer.
2. Two Roles We Play
- As a Controller: for data about our own website visitors, Business Clients, and their authorized representatives (e.g. account contact info, billing details), we determine how and why that data is used and are directly responsible for it.
- As a Processor: for data about a Business Client's End Users (callers, chat visitors) collected through the AI agent on that Business Client's behalf, we process that data according to the Business Client's instructions and our agreement with them. The Business Client is generally the controller of their own customers' data.
3. What We Collect
From Business Clients:
- Business name, address, hours, services, pricing policies, and other operational details provided during onboarding/audit
- Contact information for authorized representatives
- Account and billing information
From End Users (callers/chat visitors to a Business Client's AI agent):
- Name, phone number, and any information volunteered during a call or chat (e.g. vehicle details, requested service, address)
- Call audio and/or transcripts, where recording is enabled (see Section 6)
- Metadata such as call time, duration, and outcome
Automatically, from our own website:
- Standard technical data (IP address, browser type, pages visited)
4. How We Use This Data
- To operate the AI agent: answering calls/chats, looking up information (e.g. real-time inventory/pricing), producing tickets and summaries for the Business Client
- To improve the accuracy and guardrails of the service
- To communicate with Business Clients about their account
- To comply with legal obligations
We do not sell personal data. We do not use End User data collected on behalf of a Business Client for InstaRefer's own marketing purposes without separate consent.
5. Third Parties We Share Data With (Subprocessors)
To operate the service, we rely on:
- Telephony/voice infrastructure providers to connect and route calls
- AI voice/agent platform providers to power the conversational agent
- Underlying AI model providers to generate responses
- The Business Client's own systems (e.g. their website's inventory/pricing search) when the agent looks up real-time information on the caller's behalf
Each of these providers is bound by their own data protection obligations. We do not share End User data with unrelated third parties or for advertising purposes.
6. Call Recording and AI Disclosure
Calls handled by an InstaRefer AI agent may be recorded and/or transcribed for the purpose of generating service summaries for the Business Client. Where required by law (including California Penal Code § 632, a two-party/all-party consent state), callers are notified at the start of the call that it may be recorded.
Callers interacting with an AI agent are informed, if they ask or press the point, that they are speaking with an AI assistant rather than a person.
7. Data Retention
We retain call transcripts and ticket data for as long as reasonably necessary to provide the service to the Business Client, or as otherwise agreed in our contract with them, and delete or de-identify it thereafter unless a longer period is required by law.
8. Your Rights (California Residents — CCPA/CPRA)
If you are a California resident, you have the right to know what personal data has been collected about you, request deletion, and opt out of the sale or sharing of personal data (InstaRefer does not sell personal data). To exercise these rights, contact us at instarefer.agent@gmail.com.
If you are an End User whose data was collected through a specific Business Client's AI agent, we may direct your request to that Business Client, as they are typically the controller of their own customer data.
9. Security
We use commercially reasonable technical and organizational measures to protect personal data, consistent with the security practices of our infrastructure providers. No system is completely secure, and we cannot guarantee absolute security.
10. Children's Privacy
Our services are not directed to children under 13, and we do not knowingly collect personal data from them.
11. Changes to This Policy
We may update this Policy from time to time. Material changes will be reflected by updating the "Last Updated" date above.
12. Contact Us
InstaRefer
instarefer.agent@gmail.com