Trust, transparency, and data security.

Every voice assistant deployed by Xiran clearly identifies itself as an AI assistant from the very first interaction. We never use deceptive framing or attempt to trick callers into believing they are speaking with a biological human.

We operate under European General Data Protection Regulation (GDPR / RGPD) principles:

• Client Role: Your business remains the legal Data Controller (Responsable del Tratamiento). You define what information is gathered and the legitimate purpose for processing.
• Xiran Role: Xiran operates solely as the technical Data Processor (Encargado del Tratamiento) processing call data strictly according to your operational instructions.
• Data Processing Addendum (DPA): Pending confirmation / Pendiente de confirmar — Standard bilateral DPA contract terms are currently in formal legal review and will be provided for client signature prior to commercial deployment.
• Cloud Data Storage Region: Pending confirmation / Pendiente de confirmar — Target infrastructure deployment in EU data centers (Frankfurt / Ireland regions) undergoing final security review.

Call recording provides quality assurance, auditability, and precise booking records. We enforce strict consent handling:

• Inbound Calls: An upfront announcement informs the caller at the beginning of the call that the conversation may be recorded for quality and appointment confirmation purposes.
• Exact Recording Disclosure Wording: Pending confirmation / Pendiente de confirmar — Standard bilingual preamble script is undergoing jurisdictional compliance validation for specific European telephony requirements.
• Outbound Speed-to-Lead: Xiran dials only individuals who actively submitted a web inquiry form or requested a callback on your website. We never execute unsolicited cold calling or dial scraped databases.

Your customer relationships and conversation history belong strictly to you:

• No Model Training: Your callers’ conversations, contact details, and voice recordings are never used to train public foundational AI models.
• Zero Monetization: We do not sell, rent, or commercialize your customer records or telemetry to third parties under any circumstances.
• Portability: You can export your call logs, transcripts, and booking records at any time.

In full accordance with GDPR Article 17 (Right to Erasure), you or your callers may request complete deletion of contact information, conversation transcripts, and audio recordings.

• Immediate Deletion: Requests submitted to agents@xiran-ai.com are permanently purged from active operational databases within 5 business days.
• Default Log Retention Period: Pending confirmation / Pendiente de confirmar — Standard 30-day rolling log retention policy subject to configurable client data retention schedules.