Sayra Book a demo

Sayra Limited

Privacy Policy

Privacy Policy

Last updated: 18 October 2026

1. Who we are

Sayra Limited ("Sayra", "we", "us") is a company registered in Saint Lucia, with its registered address at 20 Micoud Street, Castries, Saint Lucia. We provide AI phone agents ("voice agents") to businesses. You can contact us about privacy at hello@callsayra.com.

This policy explains how we handle personal data when you call or receive a call from a business that uses Sayra, when you use our client portal at orders.callsayra.com, when you visit callsayra.com, and when you deal with us as a business contact.

2. Our role

  • Callers to our clients' businesses. When you call a business that uses Sayra (for example, a restaurant taking phone orders), or that business calls or texts you through Sayra, the business is responsible for your data (the "controller"). Sayra processes that data on the business's behalf and on its instructions (as a "processor"). For questions about how a business uses your data, contact that business. We will help them respond.
  • Website visitors, portal users and business contacts. For visitors to callsayra.com, staff of our clients who use our portal, and people we deal with in the course of our own business, Sayra is the controller.

3. AI assistant calls

Calls handled by Sayra are answered or made by an AI assistant, not a person. Callers are told at the start of the call that they are speaking to an AI assistant. Calls may be recorded and transcribed so the order or request can be processed, checked and improved.

4. Personal data we process

On behalf of client businesses (callers and call recipients)

  • Phone number (caller ID)
  • Name
  • Delivery address
  • Order details and other information you give during the call
  • Call audio recordings
  • Call transcripts
  • Content of SMS messages sent to you (for example, order confirmations, payment links and status updates)

As controller

  • Portal users: name, work email address, password (stored in hashed form), the business you work for, and records of your sessions and actions in the portal.
  • Website visitors: technical information such as IP address, browser type and pages visited, held in server logs.
  • Business contacts: name, job title, business contact details and our correspondence with you.

5. Payments

Sayra does not take payments and does not store card numbers. Where a business sends you a payment link through Sayra, the link takes you to that business's own payment provider, and your payment is handled under that provider's terms and privacy policy.

6. How and why we use personal data

  • To answer and make calls for client businesses, take and confirm orders, and pass order details to the business.
  • To send SMS messages on a client business's behalf, such as order confirmations, payment links and status updates.
  • To let client staff review calls, transcripts and orders, and correct errors.
  • To keep our services secure, prevent misuse, and fix technical problems.
  • To manage our relationship with clients, including billing and support.
  • To meet legal, accounting and regulatory obligations.

When we act for a client business, we use caller data only on that business's instructions and for the purpose of providing our service to it. We do not sell personal data and do not use it for advertising.

7. Legal basis

Where Sayra is the controller, we process personal data where it is necessary to perform a contract with you or your employer, to comply with a legal obligation, or for our legitimate interests in running and securing our business, or with your consent where the law requires it. Where Sayra is a processor, the client business is responsible for having a lawful basis for the processing, including any consent needed for outbound calls and SMS messages.

8. Who we share data with

  • The client business you called or that contacted you.
  • Telephone carriers (for example, Digicel) that carry calls and SMS messages.
  • Service providers (sub-processors) that help us run the service, including cloud hosting providers (Amazon Web Services, in the United States), voice AI platform providers (such as Vapi), speech-to-text and text-to-speech providers, and large language model providers. They may only use the data to provide services to us.
  • Professional advisers, such as lawyers and accountants, where needed.
  • Authorities, where we are required by law or to protect rights, safety or property.
  • A buyer or successor if our business is reorganised, sold or merged, subject to this policy.

A current list of our sub-processors is available to clients on request.

9. International transfers

Our servers are in the United States and some of our service providers are located outside Jamaica and Saint Lucia. This means personal data will be transferred to and stored in other countries. Where data protection laws restrict transfers outside a country, such as the Jamaica Data Protection Act, 2020, we rely on safeguards permitted by those laws, such as contractual commitments from our providers to protect the data, or other grounds the law allows.

10. How long we keep data

  • Call recordings and transcripts: 90 days by default, then deleted. A client business may agree a shorter period with us.
  • Order records: for as long as we provide the service to the client business, and after that as long as needed for legal and accounting purposes.
  • Portal session records: 14 days.
  • System and website logs: a reasonable short period needed for security and troubleshooting.
  • Business contact and billing records: as long as needed for our relationship and our legal and accounting obligations.

11. Cookies

Our client portal uses session cookies that are strictly necessary to keep users signed in and secure. We do not use advertising or cross-site tracking cookies.

12. Security

We use reasonable technical and organisational measures to protect personal data, including encrypted connections, access controls and limited staff access. No system is completely secure. If a personal data breach occurs, we will notify affected client businesses without undue delay so they can meet their own obligations, and we will notify regulators and affected individuals where the law requires us to. Under the Jamaica Data Protection Act, 2020, controllers must report qualifying breaches to the Information Commissioner within 72 hours of becoming aware of them.

13. Your rights

Depending on the law that applies to you, you may have the right to:

  • be told whether we process your personal data and get a copy of it, with a description of the purposes and recipients;
  • have inaccurate data corrected;
  • ask us to stop or not begin processing that is likely to cause you substantial damage or distress;
  • stop your data being used for direct marketing;
  • object to decisions that significantly affect you and are based solely on automated processing;
  • withdraw consent where processing is based on consent.

If your request is about a call with a client business, we will pass it to that business, which is responsible for responding, and we will help it do so. For other requests, email hello@callsayra.com. We may need to verify your identity before acting on a request.

14. Complaints

Please contact us first so we can try to resolve your concern. You may also complain to the data protection authority where you live, for example:

  • Jamaica: the Information Commissioner (Office of the Information Commissioner), under the Data Protection Act, 2020.
  • Saint Lucia: the Data Protection Commissioner, under the Data Protection Act, 2011.

15. Laws that apply

We aim to comply with the Jamaica Data Protection Act, 2020 and the Saint Lucia Data Protection Act, 2011. Our clients operate in Jamaica and other Caribbean countries, and other data protection and telecommunications laws may also apply where a client business or caller is located.

16. Children

Our services are for businesses and are not directed at children. Client businesses are responsible for handling any calls from minors in line with the law.

17. Changes to this policy

We may update this policy from time to time. We will post the updated version on this page with a new "Last updated" date and, where changes are significant, tell our clients directly.

18. Contact

Sayra Limited
20 Micoud Street, Castries, Saint Lucia
Email: hello@callsayra.com
Website: callsayra.com