Privacy Policy & Data Processing Notice
How Lokam Technologies Inc. collects, processes, encrypts, and retains voice recordings, chat messages, and account information.
1. Scope and Introduction
This Privacy Policy describes our practices regarding information processed through our marketing website (lokam.si) and our conversational AI platform (app.lokam.si). We adhere strictly to the principle of Data Minimization under the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).
2. Information We Process
- Workspace Customer Account Data: Name, work email address, hashed passwords, billing address, and organization membership roles.
- Conversational Telephony & Audio Data: Live incoming and outgoing audio streams processed via WebRTC or SIP BYOC trunks. Audio is processed transiently in memory to perform speech reasoning and is never utilized to train third-party foundation models without explicit contractual consent.
- Customer Messaging Data: Inbound and outbound WhatsApp Cloud API messages, interactive button callbacks, and web assistant interactions.
3. Automated PII Redaction & Encrypted Credential Storage
Lokam deploys automated real-time privacy filtering on conversational transcripts. Credit card numbers and Social Security Numbers are automatically masked before persistence in our database. All third-party carrier keys and integration credentials (Twilio, Stripe, Salesforce) are encrypted at rest with enterprise-grade protection.
4. Data Retention and Erasure
Workspace administrators maintain full control over conversation logs and vector knowledge documents. Workspaces can configure automated purging rules (e.g. 30, 60, or 90 days). You may request total erasure of account and call logs by contacting privacy@lokam.si.
5. Subprocessors and Cloud Infrastructure
Lokam hosts its core processing clusters in enterprise Tier-3+ facilities located in Frankfurt (Germany), Northern Virginia (USA), and Singapore. Certified infrastructure partners provide encrypted media relays, conversational AI compute, and speech synthesis services under signed enterprise DPAs and SOC 2 Type II compliance standards.
6. Contact Our Data Protection Officer (DPO)
If you have questions regarding data privacy or wish to exercise your rights under GDPR Articles 15–22, please reach out to: