Privacy Policy

This Privacy Policy explains how CyberFruit Lab - FZCO (operating as "CousCous", "we", "us", or "our") collects, uses, stores, and discloses information when you use our website, products, and AI agents — including the AI Call Operator, AI Dispatcher, and AI Estimator. By using the services, you agree to the practices described in this policy.

We sell software and AI agents to home-services operators (HVAC, electrical, plumbing). This policy covers both the operator who buys our services and the operator's customers who interact with the AI agents over phone, SMS, or other channels we deploy on the operator's behalf.

2.1 Information you provide directly

When you sign up, request a demo, or contact us, we collect the information you submit — including your name, business name, email address, phone number, role, the trades you operate in, and any details you provide about your business or job book.

2.2 Operator business data

To run our AI agents we ingest business data the operator authorizes us to access — including but not limited to: job histories, dispatch logs, technician schedules, pricing books, service catalogs, customer records (name, address, phone, service history), call recordings, SMS history, and CRM or field-service-management exports.

2.3 End-customer interaction data

When the AI Call Operator answers a call or the AI Dispatcher / AI Estimator handles a follow-up, we collect the audio of the call, an automatic transcript, derived intent and lead-quality signals, the caller's phone number, and any structured fields the caller provides (address, equipment type, urgency, preferred appointment window).

2.4 Usage data

We collect technical usage data — pages visited, features used, device/browser metadata, IP address, timestamps, and diagnostic logs — to operate, secure, and improve the services.

We use the information described above to:

• Provide, operate, and maintain the services — including answering inbound calls, ranking the dispatch queue, and drafting estimates.
• Train and tune the AI models that power the agents on your account, including building operator-specific call scripts, pricing logic, and dispatch heuristics.
• Send transactional communications about your account, billing, and product changes.
• Detect and prevent fraud, abuse, telecom-policy violations, and security incidents.
• Comply with our legal and contractual obligations and enforce our Terms of Service.
• Conduct internal analysis and publish aggregated, de-identified research and benchmarks (for example, industry response-time medians) that do not identify any individual operator or end customer.

Because our AI agents handle phone calls and SMS, telecom-specific rules apply.

4.1 Call recording

When the AI Call Operator answers a call, the audio is recorded and transcribed by default. Recording is required to deliver the service (training the agent, building dispute evidence, producing dispatch and estimate context).

4.2 Consent and disclosure

We configure the agent to play a recording disclosure at the start of every call. As the operator, you are responsible for ensuring your deployment complies with all applicable two-party-consent laws and SMS regulations (including TCPA in the United States) in the jurisdictions you operate in. You authorize us to record and store calls on your behalf and represent that you have a lawful basis to do so.

4.3 Inbound caller rights

An inbound caller whose call was handled by our AI agent on behalf of an operator may request a copy or deletion of the recording and transcript. Send the request to hi@couscous.ai. We will route the request to the operator who is the data controller for the recording and assist with the response.

Information is processed at our operating locations and at the locations of the subprocessors listed below. By using the services, you consent to the transfer of your information across borders, including to the United States and to other jurisdictions where our subprocessors operate. We rely on standard contractual safeguards where required by applicable law.

We use a small number of well-known infrastructure and AI providers to operate the services. Categories include:

• Cloud hosting and edge networking (e.g., Cloudflare).
• Telephony and SMS (e.g., Twilio) — for inbound/outbound calls, recordings, and messaging.
• Speech-to-text and large-language-model providers (e.g., OpenAI, Anthropic) — for transcription and the conversational logic inside the AI agents.
• Email and notification providers — for transactional email.
• Payment processors (e.g., Stripe) — for setup fees and subscription billing.
• Analytics and product instrumentation — for performance monitoring, error reporting, and product usage.

We share data with these providers only as needed to deliver the services and under data-processing terms. A current list of named subprocessors is available on request at hi@couscous.ai.

We apply administrative, technical, and physical safeguards designed to protect information from unauthorized access, use, alteration, and disclosure. These include encryption of data in transit and at rest, scoped access controls, audit logging, secret rotation, and continuous infrastructure monitoring. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

Our website uses cookies and similar technologies to enable core functionality, remember preferences, and measure aggregate site performance. You can modify your browser settings to manage cookie preferences; doing so may affect certain functionality.

Depending on where you live, you may have the following rights with respect to your personal information:

• Access — request a copy of the personal information we hold about you.
• Correction — ask us to fix inaccurate or incomplete information.
• Deletion — ask us to delete your personal information (subject to legal retention requirements).
• Restriction or objection — ask us to limit or stop certain processing of your information.
• Portability — receive your personal information in a structured, machine-readable format.
• Withdrawal of consent — withdraw consent for any processing that relies on it.

To exercise any of these rights, contact us at hi@couscous.ai. For end-customer requests tied to a specific operator's deployment, we may need to route the request to that operator as the data controller.

We retain personal information for as long as needed to provide the services, meet our legal and contractual obligations, resolve disputes, and enforce our agreements. Call recordings, transcripts, and derived training signals are retained for the lifetime of the operator's engagement unless the operator instructs us otherwise in writing or applicable law requires earlier deletion. On termination of the engagement, we will delete or anonymize personal information within a reasonable period unless retention is required by law.

The services are intended for businesses and are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can delete it.

We may update this Privacy Policy from time to time. When we do, we will update the "Effective date" at the top of this page and, where appropriate, notify you through the services or by email. Continued use of the services after an update constitutes acceptance of the updated policy.