Legal

Privacy policy

Version 1.1 · 5 August 2026 · English only for now

loquaro is a product of Developers Alliance LLC, company ID 422735632, 10 Giorgi Kuchishvili St, Tbilisi, Georgia (“we”). This policy explains how data is handled in the three places you might meet us: the loquaro.com website, the live demo at /talk, and the calling service we operate for business clients. Questions go to [email protected].

The website

loquaro.com sets no cookies and runs no third-party analytics or trackers; our content-security policy allows the browser to load resources only from loquaro.com itself. The web server keeps standard access logs — IP address, requested page, browser type — used only to run and protect the service, on our own infrastructure. Access logs are kept for 30 days and then deleted.

The live demo

When you start a demo conversation, your microphone audio streams to our server and on to Google’s Gemini API to generate the agent’s replies in real time. Demo audio is not stored — it exists only for the duration of the conversation. The demo requires no account and attaches no identity to the conversation. We use Gemini’s paid tier, whose terms mean your conversation is not used to train models. Still, treat the demo as what it is — a public test line — and don’t share personal or financial details in it.

The calling service

When loquaro makes or answers calls for a business client, the client decides whom to call and why; we process call data on the client’s behalf and instructions. That data is: the contact details and account facts the client provides (such as name, phone number, amounts and dates), the recordings and transcripts created during calls, and each call’s outcome.

The client is the controller of that data and we are its processor. The client decides whom to call and on what legal basis, and is responsible for the recording notice and for what the greeting says, following the rules of its own market. We build the script together with the client and the client approves it before any call goes out. One rule is ours and not configurable: asked directly, the agent never claims to be human.

• Each client’s deployment runs on a server dedicated to that client, in a region chosen by the client’s policy — Azerbaijan, Georgia, the EU, or elsewhere as required.
• Recordings and transcripts are kept the way the client’s policy allows and deleted on the client’s schedule.
• Call conversations are never used to train models.
• When a client’s agreement ends, their data is returned or deleted on the schedule set in that agreement and the deployment is decommissioned.

If you received a call from an agent we operate, the company the call was made for is named in the call itself. Requests about your data — access, correction, deletion — go to that company, and we support it in fulfilling them. You can also write to us directly and we will route your request.

What the agent does not decide

The agent holds a conversation and records what happened. It does not score, rank or profile the people it calls, and it makes no decision that has a legal effect on anyone — it cannot approve or refuse credit, set a penalty, settle a dispute or take a payment. It follows the script the client approved, reports the outcome, and every decision that follows is made by people at the client. What the agent may and may not say is set out in the AI transparency statement.

Children

loquaro is sold to businesses and neither this website nor the demo is meant for children. We do not knowingly collect data about children. The demo stores nothing, so there is nothing held from a conversation with it; if you believe we hold data about a child in any other form, write to [email protected] and we will delete it.

Why we are allowed to process this data

• Website access logs: our legitimate interest in running the site and protecting it from abuse.
• The live demo: you start the conversation yourself, and it runs only while it is open. Nothing is stored afterwards.
• Email you send us: our legitimate interest in answering you, and the steps leading to a contract if you are asking about buying.
• The calling service: we act on the client’s documented instructions under our agreement with them. The legal basis for the call itself is the client’s to establish, not ours.

Subprocessors

We use a small number of vendors to run the service. Last updated: 5 August 2026.

Client deployments can run on other hosting providers at the client’s request; any such provider is named in that client’s agreement. When we add or replace a subprocessor, we update this table and tell every client with an active deployment before the change takes effect, so they have the chance to object.

Where data goes

We are established in Georgia, and the vendors above process data in Germany, the United States, and whichever region a client’s deployment is set to. That means personal data crosses borders, and here is what covers it.

• Our agreements with the vendors above incorporate the European Commission’s standard contractual clauses, which cover transfers of personal data out of the European Economic Area.
• Georgia is not covered by an EU adequacy decision, so data reaching us from the EEA relies on those same clauses rather than on adequacy.
• A client whose policy requires data to stay in one region gets a deployment in that region, and we will say plainly before signing if a requirement cannot be met.

Your rights and the supervisory authority

Developers Alliance LLC operates under the Law of Georgia on Personal Data Protection. You can ask us at any time what data we hold about you, and to correct or delete it, by writing to [email protected]. You also have the right to lodge a complaint with the Personal Data Protection Service of Georgia. Where calls are made for a client in another market, that market’s calling and data rules apply to the client’s calling program. We go through those rules with the client before the first call and write what they require into the script and the agreement.

Security and breaches

How we protect this data is described on the security page. Those practices are self-attested — we have not yet undergone third-party certification — and they are contractually committed to clients.

If a breach affects personal data we hold, we tell the affected client without undue delay and no later than 72 hours after we become aware of it, with what we know at that point and what we are doing about it. We would rather send an early notice with gaps in it than a late one that is complete.

If you believe you have found a security vulnerability in loquaro.com or the loquaro service, please report it privately to [email protected] (see security.txt) — we will acknowledge it and keep you informed while we fix it.

Changes

When this policy changes materially, the version number and date at the top change with it.