Privacy Policy

Effective July 14, 2026 · Andii is a product of 27 Colab (“we”, “us”).

Andii is an AI receptionist that answers phone calls, Instagram direct messages, and web booking requests on behalf of the independent businesses (“studios”) that use it. This policy covers both the studios who subscribe to Andii and their clients who interact with it.

What we collect

• Calls. When you call a studio that uses Andii, the call is answered by an AI assistant. Calls may be recorded and transcribed; the assistant discloses this at the start of every call. Recordings and transcripts are kept for a limited retention window set by the studio (90 days by default) and then deleted.
• Messages. If you message a studio’s Instagram account, Andii receives the message through Meta’s official API to answer it. If you text a studio or receive appointment reminders, we process those SMS through our telephony provider.
• Booking & client records. Name, phone number, email or Instagram handle, appointment history, and service notes the studio keeps about your visits.
• Payments. Deposits are processed by Stripe. We never see or store your card number — only the payment’s status.

How we use it

• To answer calls and messages and book appointments for the studio you contacted.
• To send appointment reminders and, with your consent, occasional messages from the studio (for example when a spot opens up). Reply STOP to any text to opt out; reply HELP for help. Message and data rates may apply. Message frequency varies.
• To operate, secure, and improve the service.

We do not sell personal information, and we do not use your conversations to advertise to you.

Mobile information & SMS

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text-messaging originator opt-in data and consent are never sold, rented, or shared with any third parties or lead generators. Mobile numbers are shared only with the subprocessors that operate the messaging service (our telephony provider, Twilio), and only to deliver the messages you asked for. Each studio that sends texts through Andii maintains its own SMS privacy policy and terms, linked from its booking page.

Who we share it with

Only service providers needed to run Andii: telephony (Twilio), messaging (Meta’s Instagram API), calendars (Google), payments (Stripe), AI processing (Anthropic), and our hosting providers. Each receives only what it needs. Your data belongs to the studio you interacted with; we process it on their behalf.

Instagram data

Andii accesses Instagram messages only for studio accounts that explicitly connected their professional Instagram account, only through Meta’s official API, and only to answer that studio’s own DMs. Disconnecting the account in the studio dashboard removes our access. To request deletion of Instagram-sourced data, use the contact below.

Your choices

• Opt out of texts at any time by replying STOP.
• Ask the studio (or us) to access, correct, or delete your client record.
• Request deletion of recordings, transcripts, or messages we hold about you.

Retention & security

Call recordings and transcripts are deleted after the studio’s retention window. Client records are kept while the studio remains a customer. Credentials and tokens are stored encrypted; access is limited and logged.

Children

Andii is not directed to children under 13 and we do not knowingly collect their data.

Changes & contact

We’ll post any changes to this page. Questions or data requests: privacy@27colab.com.