Legal

Privacy Policy

Effective July 7, 2026 · TidalAI is operated by NURSEAPP LIMITED ("we", "us").

What TidalAI does

TidalAI provides an AI receptionist that answers a business's phone line, books appointments, takes messages, and sends related SMS and email notifications. We handle data for two groups of people: business owners who subscribe to TidalAI, and callers who phone a TidalAI-powered business.

Data we collect from business owners

• Account data: email address (used for magic-link sign-in), business name, address, phone numbers, services, hours, and staff names you configure.
• Billing data: handled by Stripe. We store your Stripe customer and subscription identifiers only — we never see or store card numbers.
• Usage data: call minutes and counts, used for plan metering and billing.

Data we handle for callers

• Call audio and transcripts: calls answered by the AI are recorded and transcribed so the business owner can review them. Transcripts are automatically scanned and sensitive numbers (such as payment card or government ID numbers) are redacted before storage.
• Booking details: name, phone number, requested service, and appointment time, stored so the business can honor the booking.
• Messages: if the AI takes a message, its contents are stored for the business owner.

Call recording notice: businesses using TidalAI are responsible for complying with call-recording consent laws in their jurisdiction. The AI identifies itself as an automated assistant at the start of each call.

Service providers we share data with

We share data only with processors needed to run the service: Supabase (database and authentication), Vapi and ElevenLabs (voice AI and speech synthesis), Twilio (telephony and SMS), Stripe (payments), Resend (transactional email), Sentry (error monitoring), and Railway (hosting). We do not sell personal data, and we do not use it for advertising.

Mobile app

The TidalAI mobile app stores your sign-in session securely on your device and communicates only with our servers. It contains no advertising or third-party tracking SDKs. Push notification tokens, if you enable notifications, are used solely to deliver activity alerts about your own business.

Retention and deletion

Account and call data are retained while your subscription is active. If you cancel, tenant data is archived and then deleted on a scheduled cleanup. You can request deletion of your account or of a specific caller's data at any time by emailing hello@tidalai.net — we honor requests within 30 days.

Security

Data is encrypted in transit (TLS) and at rest by our hosting providers. Access to production data is restricted to the operators of the service. Sensitive mutations are recorded in an append-only audit log.

Changes and contact

We will post any material changes to this policy on this page. Questions or requests: hello@tidalai.net.

Home · Terms of Service · Support