Privacy Policy

Last updated: March 2026

MaltaCat AI ("we", "us", "our") is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and the laws of Malta. This policy explains what data we collect, why we collect it, and your rights as a data subject.

1. Who we are

MaltaCat AI is an AI-powered receptionist and customer engagement platform based in Malta. For data protection enquiries, contact us at admin@maltacat.org.

2. Data we collect

When you interact with our services — whether by phone call, website chat, or the management console — we may collect:

Contact information you provide (name, phone number, email address)
Conversation transcripts and audio recordings of calls handled by the AI assistant
Technical identifiers such as IP addresses and session tokens
Usage data such as timestamps, call duration, and outcomes (e.g. callback requests, appointments)
Account credentials for console users (email and hashed password)

3. How we use your data

To operate the AI receptionist service on behalf of our business clients
To capture and store lead details and conversation outcomes for authorised console users
To improve service quality and diagnose technical issues
To comply with legal obligations

We process personal data on the basis of legitimate interests (operating the service) and, where required, consent or contractual necessity.

4. Data sharing

We do not sell or share personal data with third parties for marketing purposes. Data may be shared with:

OpenAI — for AI processing of voice and text (subject to OpenAI's data processing terms)
Our business clients — who access conversation outcomes via the console under their own data controller responsibilities
Infrastructure providers — for hosting and email delivery, all operating within the EU

5. Data retention

Conversation transcripts and lead data are retained for as long as the client account is active, or for a maximum of 24 months, whichever is shorter, unless a longer retention period is required by law. Account data is deleted upon request or account closure.

6. Your rights

Under GDPR, you have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request erasure of your data ("right to be forgotten")
Object to processing or request restriction of processing
Lodge a complaint with the Office of the Information and Data Protection Commissioner (IDPC) of Malta

To exercise any of these rights, contact us at admin@maltacat.org.

7. Cookies

We use session cookies strictly necessary for authentication. No tracking or advertising cookies are used. By using this site, you consent to essential cookies as disclosed in our cookie notice.

8. Changes to this policy

We may update this policy from time to time. The date at the top of this page indicates the most recent revision. Continued use of the service following any changes constitutes acceptance of the updated policy.