Privacy Policy — Frontis

Plain English summary: We collect only what we need to run the service. We do not sell your data. We do not share it with advertisers. Call recordings are stored encrypted and HIPAA-compliantly. You can request deletion at any time.

1. Who we are

Frontis AI, Inc. (“Frontis”, “we”, “us”) operates the Frontis AI receptionist platform. Contact us at hello@frontis.ai.

2. Information we collect

From practice owners (our customers)

Account information: name, practice name, email address, billing information (processed by Stripe — we never see your full card number)
Practice configuration: office hours, insurance plans, FAQ content, emergency contact numbers, scheduling software credentials
Usage data: call volumes, appointment bookings, dashboard activity, feature usage

From patient callers

Call recordings and transcripts: voice recordings and AI-generated transcripts of calls to your practice line
Caller information: phone numbers, names, appointment details, and information shared during the call
This data is Protected Health Information (PHI) under HIPAA and is handled accordingly

From website visitors

Standard web analytics (page views, referral sources, session duration) — no personally identifiable information without consent

3. How we use your data

To operate and improve the Frontis service
To send post-call summaries and dashboard reports to practice owners
To bill for the service via Stripe
To respond to support requests
To comply with legal obligations

We do not use your data for advertising, sell it to third parties, or use patient call data to train general AI models without explicit consent.

4. Data storage and security

Call recordings and transcripts are stored in encrypted, HIPAA-compliant infrastructure on Amazon Web Services (AWS). Data is encrypted at rest (AES-256) and in transit (TLS 1.3). Access is restricted to authorised Frontis personnel and the practice that owns the data. We retain call recordings for 90 days by default. Practice owners can request earlier deletion at any time.

5. HIPAA and Business Associate Agreements

Frontis operates as a Business Associate under HIPAA when handling Protected Health Information on behalf of dental practices. We sign a Business Associate Agreement (BAA) with every practice before going live — included at no extra cost on all plans.

6. Third-party services

Service	Purpose	Data shared
Vapi.ai	Voice AI infrastructure	Call audio, transcripts
ElevenLabs	Voice synthesis	Text to synthesise
Twilio	Phone provisioning and routing	Call metadata, audio
Stripe	Billing and payments	Name, email, billing address
AWS	Cloud storage and compute	Call recordings, transcripts
Resend	Transactional email delivery	Email address, call summary content

We maintain signed BAAs with all vendors who handle PHI.

7. Your rights

You may request access to, correction of, or deletion of your data at any time by emailing hello@frontis.ai. We will respond within 30 days.

8. Contact

Privacy questions: hello@frontis.ai

Your data.Handled with care.