Last updated: September 2026

Cedri Inc. ("Cedri", "we", "us", "our") is committed to protecting the privacy of our users and their customers. This Privacy Policy explains how we collect, use, and safeguard personal information in alignment with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws including Quebec’s Law 25.

Information We Collect

Business information: Name, address, phone, email, business hours, services offered
Customer call data: Phone numbers, call recordings, transcripts, booking details
Account data: Email, name, password (securely hashed), billing information
Usage data: Call logs, booking history, analytics
Setup and account activity: From the moment you start setup, the steps you take in Cedri (for example which screen you were on and for how long, or a website scan that did not work), with your device, browser and approximate location (city and province, worked out from your internet connection, never your precise position), so we can find and fix what goes wrong. We also keep how you found us: the site that sent you to cedri.ca, the first page you opened, any campaign or referral code in the link, and your answer if you tell us how you heard about Cedri
Calls to our demo line: If you call our demo line, your phone number and a summary of the call, kept six months

How We Use Information

Provide AI-powered call handling and booking services
Send appointment confirmations and reminders via SMS
Send one follow-up text after you call our demo line, about setting up your own receptionist (reply STOP to opt out)
Generate analytics and performance reports
Find and fix problems in setup, sign-in and payment
Process billing and payments
Improve our service quality and reliability

Voice Data & Call Recordings

Cedri answers calls using an AI-powered virtual receptionist on behalf of your business. Live call audio and its recordings are processed and stored by our voice infrastructure provider, located in the United States; they are retained according to your plan and can be deleted at any time. The transcript of a call is generated by that provider, so a copy of it sits with them alongside the audio as well as in our Canadian database; deleting a call from your dashboard clears our copy and asks the provider to delete theirs. This voice data is not used to train third-party models. To check that the receptionist is really helping your callers, each call’s transcript is also reviewed automatically by an AI service under the same safeguards, and authorized Cedri staff may listen to a recording or read a transcript to check quality or fix a problem. When you try the demo, on this website or by calling our demo line, the conversation is recorded and transcribed so we can check that the demo works and improve it; for a demo on this website we keep only your general area (province), the kind of device and the page you were on, not who you are. For a demo in our app we keep your general area and which version of the app it was, and we can tell it came from the same phone as other things the app noted before you signed in (for example a sign-in that did not work), still without knowing who you are.

Data Storage & Security

Your account data, bookings, customer records, and call transcripts are stored on secure servers in Canada (ca-central-1) using industry-standard encryption, with all transfers over TLS 1.2+ . To operate the AI receptionist, certain call processing (speech-to-text, AI response generation, voice synthesis, and telephony) is performed in real time by trusted service providers located in the United States, under contractual and technical safeguards. Personal information may therefore be processed outside Quebec and Canada during a call. We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.

Data Sharing

We do not sell, rent, or trade your personal information. We may share data with trusted service providers who assist in operating our platform, subject to strict confidentiality agreements. We may also disclose information when required by law or to protect our rights.

Data Retention

We retain your data for as long as your account is active or as needed to provide our services. You may request deletion of your data at any time. Upon account termination, we will delete your data within 30 days, except where retention is required by law.

Your Rights

Under PIPEDA and applicable provincial laws, you have the right to:

Access your personal information held by us
Request correction of inaccurate information
Request deletion of your personal information
Withdraw consent for data processing
File a complaint with the Office of the Privacy Commissioner of Canada

To exercise these rights, contact us at privacy@cedri.ca.

Who Is Responsible

Under Quebec’s Law 25 the person responsible for the protection of personal information at Cedri Inc. is Zaza Bozan, Founder and President. Reach that role directly at privacy@cedri.ca.

If Something Goes Wrong

If personal information in our care is lost or accessed without authorization and the incident presents a risk of serious injury, we will notify the affected business without unreasonable delay, and notify the Commission d’accès à l’information du Québec and the Office of the Privacy Commissioner of Canada where the law requires it. We keep a register of confidentiality incidents as Law 25 requires.

A data processing agreement and the current list of our subprocessors are available to any customer on request at privacy@cedri.ca.

Visitors to This Website

Separately from anything to do with a Cedri account, we measure traffic to this website so we can see which pages people actually read. Each page view records the page address, the site that referred you, and a general idea of country and province, browser, operating system and device type. It sets no cookies, it does not use your IP address to build a profile, it does not identify you, and it does not follow you to other websites. There is no advertising on this site and we run no advertising or marketing trackers. This measurement is aggregate: we can tell that a page was read, not who read it. If you create an account during the same visit, we keep how that visit began (see “Setup and account activity” above). Until then that note stays in your own browser tab and is erased when you close it.

Sharing a Calendar Feed

A business using Cedri can create a calendar feed: a private web link that its own booking or practice-management software subscribes to. Anyone holding that link can read that business’s upcoming bookings, including customer names, phone numbers, appointment times and job addresses. The link is not listed anywhere, is not indexed by search engines, and can be revoked at any time from the dashboard, which immediately stops it working. No feed exists unless the business creates one, and only that business can create, see or revoke it. Treat the link like a password.

Sending Bookings to Another System

A business using Cedri can ask us to send each new, moved or cancelled booking to a web address it chooses, so the booking appears in the software it already runs. When it does, we send that system the booking time, the service, and the customer’s name, phone number, email and job address where we hold them. We send only to the address that business set, only over an encrypted connection, and each message is signed so the receiving system can confirm it came from us. What happens to the information after it arrives is governed by that business and the software it chose, not by us. The business can turn this off at any time, which stops it immediately.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on our website with a revised "Last updated" date.

Contact

For privacy inquiries: privacy@cedri.ca