{"platform":"Anana","slug":"anana","category":"Workflow & Automation","website":"https://getanana.com","risk_rating":"low","verification":"fully_verified","verification_detail":{"tier":"fully_verified","partial_reason_code":"none","partial_reason_label":"Complete","blocked_core_documents":[]},"rating":{"value":"low","unknown_reason_code":"none","unknown_reason_label":"Rated"},"corpus_status":"corpus_complete","canonical":"https://airinetwork.com/platform/anana","machine_url":"https://airinetwork.com/api/machine/platform/anana","last_reviewed":"2026-08-28","findings_count":30,"findings":[{"id":"privacy-data-use-bdbaef46edeea0610c0b","permalink":"https://airinetwork.com/platform/anana/finding/privacy-data-use-bdbaef46edeea0610c0b","surface":"privacy_data_use","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" This Privacy Policy explains how Anana processes personal data in connection with our AI agent platform for hospitality (hotels, restaurants, wellness venues). It covers our website (getanana.com), our application (app.getanana.com), our API (api.getanana.com), and the messaging, voice, and booking workflows that Anana performs on behalf of our customers.","caution":null,"provenance":{"source_url":"https://getanana.com/privacy-policy","snapshot_sha256":"8df01c2abdd5082967f7746351a01744cb2eda2b5f803804a9b804efa9beb02e","wayback_url":null,"deep_link":"https://getanana.com/privacy-policy#:~:text=%20This%20Privacy%20Policy,behalf%20of%20our%20customers.","structural_citation":"Privacy Policy › “Last updated: July 5, 2026”","citation_basis":"heading_path","char_start":127,"char_end":485,"retrieved_at":"2026-07-19T23:41:27.15497+00:00"}},{"id":"privacy-data-use-ef4e25e92c57de955491","permalink":"https://airinetwork.com/platform/anana/finding/privacy-data-use-ef4e25e92c57de955491","surface":"privacy_data_use","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" Omoc, Inc (doing business as Anana), 10 Montague Terrace, Apt 1B, Brooklyn, NY 11201, United States, is the controller for personal data processed about:\n Operator users (staff of our hospitality customers who log into Anana)","caution":null,"provenance":{"source_url":"https://getanana.com/privacy-policy","snapshot_sha256":"8df01c2abdd5082967f7746351a01744cb2eda2b5f803804a9b804efa9beb02e","wayback_url":null,"deep_link":"https://getanana.com/privacy-policy#:~:text=%20Omoc%2C%20Inc%20(doing,who%20log%20into%20Anana)","structural_citation":"§ 1 (Controller)","citation_basis":"section_number","char_start":509,"char_end":735,"retrieved_at":"2026-07-19T23:41:27.15497+00:00"}},{"id":"privacy-data-use-7a67f9a6e2ff1e91c668","permalink":"https://airinetwork.com/platform/anana/finding/privacy-data-use-7a67f9a6e2ff1e91c668","surface":"privacy_data_use","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" When a staff member of a hospitality customer is provisioned an Anana account, we process:\n Identification and account data: name, work email, role, organization/tenant ID\n Authentication data: login identifiers, session tokens, MFA factors (via Stytch)\n Usage data: pages viewed, actions taken in the app, artifacts created/sent, IP address, device/user-agent\n Support communications: messages sent to support@getanana.com","caution":null,"provenance":{"source_url":"https://getanana.com/privacy-policy","snapshot_sha256":"8df01c2abdd5082967f7746351a01744cb2eda2b5f803804a9b804efa9beb02e","wayback_url":null,"deep_link":"https://getanana.com/privacy-policy#:~:text=%20When%20a%20staff,messages%20sent%20to%20support%40getanana.com","structural_citation":"§ 3.1 (Operator users (Art. 13))","citation_basis":"section_number","char_start":2149,"char_end":2573,"retrieved_at":"2026-07-19T23:41:27.15497+00:00"}},{"id":"privacy-data-use-113f2e3a1540f5880bf4","permalink":"https://airinetwork.com/platform/anana/finding/privacy-data-use-113f2e3a1540f5880bf4","surface":"privacy_data_use","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" For transparency, the personal data Anana handles on behalf of venues includes:\n Inbound messages: chat widget conversations, inbound SMS, inbound email (content, sender identifiers, timestamps)\n Voice calls: audio recordings of WebRTC and SIP calls, machine-generated transcripts, call metadata (caller number, duration, routing)\n Booking and guest profile data synced from the venue's PMS/CRM: name, contact details, reservation details, stay history, and any fields the venue chooses to expose\n Embeddings: vector representations derived from messages and documents, used for retrieval; stored in pgvector","caution":null,"provenance":{"source_url":"https://getanana.com/privacy-policy","snapshot_sha256":"8df01c2abdd5082967f7746351a01744cb2eda2b5f803804a9b804efa9beb02e","wayback_url":null,"deep_link":"https://getanana.com/privacy-policy#:~:text=%20For%20transparency%2C%20the,retrieval%3B%20stored%20in%20pgvector","structural_citation":"§ 3.2","citation_basis":"section_number","char_start":2649,"char_end":3263,"retrieved_at":"2026-07-19T23:41:27.15497+00:00"}},{"id":"privacy-data-use-8bc7fb18b9acfa2f9804","permalink":"https://airinetwork.com/platform/anana/finding/privacy-data-use-8bc7fb18b9acfa2f9804","surface":"privacy_data_use","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" Anana does not determine which guests to contact, which fields to ingest, or how long the venue retains guest records — the venue does. The guest should refer to the venue's privacy notice.","caution":null,"provenance":{"source_url":"https://getanana.com/privacy-policy","snapshot_sha256":"8df01c2abdd5082967f7746351a01744cb2eda2b5f803804a9b804efa9beb02e","wayback_url":null,"deep_link":"https://getanana.com/privacy-policy#:~:text=%20Anana%20does%20not,the%20venue%26%23x27%3Bs%20privacy%20notice.","structural_citation":"Privacy Policy › “Artifact metadata: messages sent, drafts, versions”","citation_basis":"heading_path","char_start":3316,"char_end":3511,"retrieved_at":"2026-07-19T23:41:27.15497+00:00"}},{"id":"privacy-data-use-2e6b0f6563dee55ad721","permalink":"https://airinetwork.com/platform/anana/finding/privacy-data-use-2e6b0f6563dee55ad721","surface":"privacy_data_use","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" Server logs (IP address, user-agent, timestamps, requested URL) processed by AWS and Vercel for security, abuse prevention, and basic operation.\n Cookies: our websites use cookies. The categories and purposes of cookies in use, and the controls available to you, are described in our separate Cookie Policy and managed via the cookie banner displayed on first visit.","caution":null,"provenance":{"source_url":"https://getanana.com/privacy-policy","snapshot_sha256":"8df01c2abdd5082967f7746351a01744cb2eda2b5f803804a9b804efa9beb02e","wayback_url":null,"deep_link":"https://getanana.com/privacy-policy#:~:text=%20Server%20logs%20(IP,displayed%20on%20first%20visit.","structural_citation":"§ 3.3 (Website visitors)","citation_basis":"section_number","char_start":3542,"char_end":3909,"retrieved_at":"2026-07-19T23:41:27.15497+00:00"}},{"id":"privacy-data-use-ee654c6b609c3cc5005b","permalink":"https://airinetwork.com/platform/anana/finding/privacy-data-use-ee654c6b609c3cc5005b","surface":"privacy_data_use","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" We process standard HR data for employees/applicants and standard B2B contact data for prospects, customers, and suppliers. Employee processing is described in a separate internal notice.","caution":null,"provenance":{"source_url":"https://getanana.com/privacy-policy","snapshot_sha256":"8df01c2abdd5082967f7746351a01744cb2eda2b5f803804a9b804efa9beb02e","wayback_url":null,"deep_link":"https://getanana.com/privacy-policy#:~:text=%20We%20process%20standard,a%20separate%20internal%20notice.","structural_citation":"§ 3.4 (Employees, applicants, and business contacts)","citation_basis":"section_number","char_start":3970,"char_end":4158,"retrieved_at":"2026-07-19T23:41:27.15497+00:00"}},{"id":"privacy-data-use-b8cf11726cb1c608190e","permalink":"https://airinetwork.com/platform/anana/finding/privacy-data-use-b8cf11726cb1c608190e","surface":"privacy_data_use","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" Provide the Anana platform to operator users (accounts, authentication, app access, support) Operator users Art. 6(1)(b): performance of contract with the customer \n Process guest messages, calls, bookings on behalf of the venue End guests/leads Processor: venue's lawful basis applies; Anana relies on Art. 28 \n Generate AI responses, transcripts, summaries, and embeddings to operate the service Operator users, end guests Art. 6(1)(b) (operators); processor for guests \n Security, fraud and abuse prevention, audit logging All Art. 6(1)(f): legitimate interest in securing the service \n Service communications (incident notices, billing, product updates) Operator users, customer admins Art. 6(1)(b) and Art. 6(1)(f) \n Marketing emails to prospects Business contacts Art. 6(1)(f): legitimate interest in B2B outreach; opt-out at any time \n Compliance with legal obligations (tax, accounting, lawful requests) All Art. 6(1)(c) \n Recruitment Applicants Art. 6(1)(b) pre-contract / Art. 6(1)(a) consent for retention ","caution":null,"provenance":{"source_url":"https://getanana.com/privacy-policy","snapshot_sha256":"8df01c2abdd5082967f7746351a01744cb2eda2b5f803804a9b804efa9beb02e","wayback_url":null,"deep_link":"https://getanana.com/privacy-policy#:~:text=%20Provide%20the%20Anana,consent%20for%20retention%20","structural_citation":"Privacy Policy › “Purpose Data subjects Lawful basis”","citation_basis":"heading_path","char_start":4247,"char_end":5270,"retrieved_at":"2026-07-19T23:41:27.15497+00:00"}},{"id":"privacy-data-use-c36eccdc4aa22c79e8c7","permalink":"https://airinetwork.com/platform/anana/finding/privacy-data-use-c36eccdc4aa22c79e8c7","surface":"privacy_data_use","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" Where we rely on legitimate interest, you have the right to object (see Section 10).\n Special category data. Anana does not intentionally collect special category data (Art. 9). However, free-text guest messages and call content can incidentally contain health, dietary, or similar details, and the Practice Better integration can surface practitioner-client health records. Anana processes this data solely as a processor on the venue's behalf. The Art. 9(2)(a) explicit consent condition, and the notice to the individual, are the responsibility of the venue (controller); this obligation is allocated to the venue in our Data Processing Agreement.","caution":null,"provenance":{"source_url":"https://getanana.com/privacy-policy","snapshot_sha256":"8df01c2abdd5082967f7746351a01744cb2eda2b5f803804a9b804efa9beb02e","wayback_url":null,"deep_link":"https://getanana.com/privacy-policy#:~:text=%20Where%20we%20rely,our%20Data%20Processing%20Agreement.","structural_citation":"Privacy Policy › “Purpose Data subjects Lawful basis”","citation_basis":"heading_path","char_start":5273,"char_end":5929,"retrieved_at":"2026-07-19T23:41:27.15497+00:00"}},{"id":"privacy-data-use-c712ac89d06cb5304afd","permalink":"https://airinetwork.com/platform/anana/finding/privacy-data-use-c712ac89d06cb5304afd","surface":"privacy_data_use","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" Operator user data: provided directly by the user or by their employer (the customer) when provisioning an account.\n Guest/lead data: received from the guest directly (when they message, call, or email the venue) or from the venue's PMS/CRM via integrations the venue has authorized.\n Website data: collected directly through your browser.","caution":null,"provenance":{"source_url":"https://getanana.com/privacy-policy","snapshot_sha256":"8df01c2abdd5082967f7746351a01744cb2eda2b5f803804a9b804efa9beb02e","wayback_url":null,"deep_link":"https://getanana.com/privacy-policy#:~:text=%20Operator%20user%20data%3A,directly%20through%20your%20browser.","structural_citation":"§ 5 (Sources)","citation_basis":"section_number","char_start":5950,"char_end":6295,"retrieved_at":"2026-07-19T23:41:27.15497+00:00"}},{"id":"privacy-data-use-ce1afd0ebcded2d2c38e","permalink":"https://airinetwork.com/platform/anana/finding/privacy-data-use-ce1afd0ebcded2d2c38e","surface":"privacy_data_use","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" Where Anana is the controller, you may exercise the following rights:\n Access (Art. 15): obtain a copy of your personal data.\n Rectification (Art. 16): correct inaccurate data.\n Erasure (Art. 17): request deletion.\n Restriction (Art. 18): limit processing.\n Portability (Art. 20): receive your data in a structured, machine-readable format where applicable.\n Object (Art. 21): object to processing based on legitimate interest, including direct marketing.\n Withdraw consent (Art. 7(3)): where processing is based on consent, you may withdraw it at any time, as easily as it was given, without affecting the lawfulness of processing carried out beforehand.\n Not be subject to solely automated decisions with legal or similarly significant effects (Art. 22). Anana generates suggested replies and drafts; final operator review is part of the workflow.\n To exercise your rights, email privacy@getanana.com , or contact our EU representative at privacy@probo.com (Section 2). We respond within one month (extendable by two further months for complex requests, Art. 12(3)).\n If you are an end guest and want to exercise rights against a venue, contact the venue directly — they are the controller. We will assist them under Art. 28(3)(e).","caution":null,"provenance":{"source_url":"https://getanana.com/privacy-policy","snapshot_sha256":"8df01c2abdd5082967f7746351a01744cb2eda2b5f803804a9b804efa9beb02e","wayback_url":null,"deep_link":"https://getanana.com/privacy-policy#:~:text=%20Where%20Anana%20is,them%20under%20Art.%2028(3)(e).","structural_citation":"§ 10 (Your Rights (GDPR))","citation_basis":"section_number","char_start":10955,"char_end":12189,"retrieved_at":"2026-07-19T23:41:27.15497+00:00"}},{"id":"privacy-data-use-77e4f5638fdb7aa0e244","permalink":"https://airinetwork.com/platform/anana/finding/privacy-data-use-77e4f5638fdb7aa0e244","surface":"privacy_data_use","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" You have the right to lodge a complaint with a data protection authority. As Anana is established outside the EU/EEA, EU/EEA data subjects may lodge a complaint with the supervisory authority of the EU/EEA member state where they reside, where they work, or where the alleged infringement occurred. You may also contact our EU representative (Section 2).","caution":null,"provenance":{"source_url":"https://getanana.com/privacy-policy","snapshot_sha256":"8df01c2abdd5082967f7746351a01744cb2eda2b5f803804a9b804efa9beb02e","wayback_url":null,"deep_link":"https://getanana.com/privacy-policy#:~:text=%20You%20have%20the,EU%20representative%20(Section%202).","structural_citation":"§ 11 (Supervisory Authority)","citation_basis":"section_number","char_start":12225,"char_end":12580,"retrieved_at":"2026-07-19T23:41:27.15497+00:00"}},{"id":"privacy-data-use-f9864839352f6afc7a0a","permalink":"https://airinetwork.com/platform/anana/finding/privacy-data-use-f9864839352f6afc7a0a","surface":"privacy_data_use","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" Anana is a B2B service intended for hospitality businesses and their staff. It is not directed at children, and we do not knowingly collect personal data from children. Guests who interact with a venue's chat, SMS, voice, or email channel do so under that venue's own policies; venues are responsible for any age-specific obligations relating to their guests.","caution":null,"provenance":{"source_url":"https://getanana.com/privacy-policy","snapshot_sha256":"8df01c2abdd5082967f7746351a01744cb2eda2b5f803804a9b804efa9beb02e","wayback_url":null,"deep_link":"https://getanana.com/privacy-policy#:~:text=%20Anana%20is%20a,relating%20to%20their%20guests.","structural_citation":"§ 12 (Children)","citation_basis":"section_number","char_start":12603,"char_end":12973,"retrieved_at":"2026-07-19T23:41:27.15497+00:00"}},{"id":"privacy-data-use-3b88a07eda13f50bb813","permalink":"https://airinetwork.com/platform/anana/finding/privacy-data-use-3b88a07eda13f50bb813","surface":"privacy_data_use","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" We update this Policy when our processing changes. Material changes will be communicated to operator users via the application or by email. The “Last updated” date at the top reflects the most recent revision.","caution":null,"provenance":{"source_url":"https://getanana.com/privacy-policy","snapshot_sha256":"8df01c2abdd5082967f7746351a01744cb2eda2b5f803804a9b804efa9beb02e","wayback_url":null,"deep_link":"https://getanana.com/privacy-policy#:~:text=%20We%20update%20this,the%20most%20recent%20revision.","structural_citation":"§ 13 (Changes to this Policy)","citation_basis":"section_number","char_start":13010,"char_end":13220,"retrieved_at":"2026-07-19T23:41:27.15497+00:00"}},{"id":"data-retention-b1e3684304524537cef3","permalink":"https://airinetwork.com/platform/anana/finding/data-retention-b1e3684304524537cef3","surface":"data_retention","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" Operator user account and authentication data For the life of the customer contract; deleted within 1 year of contract termination. \n Voice recordings Retained per the venue's configuration and not used for model training; Anana-held copies are deleted on the venue's instruction or within 1 year of contract termination. \n Voice transcripts Retained per the venue's configuration as part of the conversation record; deleted with the associated tenant data on the venue's instruction or within 1 year of contract termination. \n Inbound messages (chat, SMS, email) Retained per the venue's configuration as part of the conversation record; deleted on the venue's instruction or within 1 year of contract termination. \n Booking/guest profile data synced from PMS/CRM Controlled by the venue; Anana deletes on the venue's instruction or contract end. \n Embeddings in pgvector Tied to the source artifact; deleted when the source is deleted. \n Audit logs (artifact create / version / send) 2 years. \n Server logs / WAF logs Application production logs 30 days; AWS CloudFront/WAF edge logs per their configuration. \n Database backups Daily backups retained 7 days on a rolling cycle. \n Business contacts (CRM) Until objection or 2 years of inactivity. \n Accounting and tax records As required by applicable law (typically 7–10 years). ","caution":null,"provenance":{"source_url":"https://getanana.com/privacy-policy","snapshot_sha256":"8df01c2abdd5082967f7746351a01744cb2eda2b5f803804a9b804efa9beb02e","wayback_url":null,"deep_link":"https://getanana.com/privacy-policy#:~:text=%20Operator%20user%20account,(typically%207%E2%80%9310%20years).%20","structural_citation":"Privacy Policy › “Data category Retention”","citation_basis":"heading_path","char_start":6346,"char_end":7713,"retrieved_at":"2026-07-19T23:41:27.15497+00:00"}},{"id":"data-retention-c8deb3b10c9614e93556","permalink":"https://airinetwork.com/platform/anana/finding/data-retention-c8deb3b10c9614e93556","surface":"data_retention","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" After the retention period, data is deleted or irreversibly anonymized. Retention of guest data (recordings, transcripts, messages, bookings) is ultimately set by the venue as controller; the periods above are Anana's own outer limits.","caution":null,"provenance":{"source_url":"https://getanana.com/privacy-policy","snapshot_sha256":"8df01c2abdd5082967f7746351a01744cb2eda2b5f803804a9b804efa9beb02e","wayback_url":null,"deep_link":"https://getanana.com/privacy-policy#:~:text=%20After%20the%20retention,Anana%26%23x27%3Bs%20own%20outer%20limits.","structural_citation":"Privacy Policy › “Data category Retention”","citation_basis":"heading_path","char_start":7716,"char_end":7957,"retrieved_at":"2026-07-19T23:41:27.15497+00:00"}},{"id":"indemnity-liability-12eef06de5b23a9d557b","permalink":"https://airinetwork.com/platform/anana/finding/indemnity-liability-12eef06de5b23a9d557b","surface":"indemnity_liability","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" Provider Covered Claims: Any action, proceeding, or claim that the Cloud Service, when used by Customer according to the terms of the Agreement, violates, misappropriates, or otherwise infringes upon anyone else's intellectual property or other proprietary rights.\n Customer Covered Claims: Any action, proceeding, or claim that (1) the Customer Content, when used according to the terms of the Agreement, violates, misappropriates, or otherwise infringes upon anyone else's intellectual property or other proprietary rights; or (2) results from Customer's breach or alleged breach of Section 2.1 (Restrictions on Customer).","caution":null,"provenance":{"source_url":"https://getanana.com/terms","snapshot_sha256":"ddbaeef06e04dac2d5e8de0ec3d03748289359e6b97c3f82dde6747a832de984","wayback_url":null,"deep_link":"https://getanana.com/terms#:~:text=%20Provider%20Covered%20Claims%3A,2.1%20(Restrictions%20on%20Customer).","structural_citation":"Terms of Service › “Covered Claims”","citation_basis":"heading_path","char_start":2644,"char_end":3284,"retrieved_at":"2026-07-19T23:41:27.90883+00:00"}},{"id":"subprocessors-data-sharing-05b2960eca2f5fbc813d","permalink":"https://airinetwork.com/platform/anana/finding/subprocessors-data-sharing-05b2960eca2f5fbc813d","surface":"subprocessors_data_sharing","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" For personal data of end guests and leads (people who chat with, call, SMS, or email a venue powered by Anana, or whose booking/profile data is synced from a Property Management System or CRM), our hospitality customer is the controller and Anana acts as their processor under a Data Processing Agreement. Where this policy describes guest data, it does so in our capacity as processor and for transparency only; the venue's own privacy notice governs that processing.\n Contact: privacy@getanana.com \n We have not appointed a Data Protection Officer; Art. 37 GDPR does not require us to do so. Privacy questions and rights requests are handled at privacy@getanana.com.","caution":null,"provenance":{"source_url":"https://getanana.com/privacy-policy","snapshot_sha256":"8df01c2abdd5082967f7746351a01744cb2eda2b5f803804a9b804efa9beb02e","wayback_url":null,"deep_link":"https://getanana.com/privacy-policy#:~:text=%20For%20personal%20data,are%20handled%20at%20privacy%40getanana.com.","structural_citation":"Privacy Policy › “Anana's own business contacts (prospects, customers, suppliers)”","citation_basis":"heading_path","char_start":864,"char_end":1538,"retrieved_at":"2026-07-19T23:41:27.15497+00:00"}},{"id":"subprocessors-data-sharing-9276916dbfeac7e5508d","permalink":"https://airinetwork.com/platform/anana/finding/subprocessors-data-sharing-9276916dbfeac7e5508d","surface":"subprocessors_data_sharing","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" We share personal data only with vetted sub-processors under a DPA. An up-to-date list is available on request at privacy@getanana.com.","caution":null,"provenance":{"source_url":"https://getanana.com/privacy-policy","snapshot_sha256":"8df01c2abdd5082967f7746351a01744cb2eda2b5f803804a9b804efa9beb02e","wayback_url":null,"deep_link":"https://getanana.com/privacy-policy#:~:text=%20We%20share%20personal,on%20request%20at%20privacy%40getanana.com.","structural_citation":"§ 7 (Recipients and Sub-processors)","citation_basis":"section_number","char_start":8000,"char_end":8136,"retrieved_at":"2026-07-19T23:41:27.15497+00:00"}},{"id":"subprocessors-data-sharing-8b0d7d679c7d95a8759f","permalink":"https://airinetwork.com/platform/anana/finding/subprocessors-data-sharing-8b0d7d679c7d95a8759f","surface":"subprocessors_data_sharing","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" When a venue connects Anana to its own systems (e.g., WebHotelier, Fidelio on-prem, Practice Better, Kanika, Genesys Cloud, HubSpot, Composio), the venue is the controller of that integration and the integration provider is the venue's processor, not ours. Anana acts as the venue's agent only.\n Other recipients include our professional advisors (legal, accounting) and competent authorities where required by law.","caution":null,"provenance":{"source_url":"https://getanana.com/privacy-policy","snapshot_sha256":"8df01c2abdd5082967f7746351a01744cb2eda2b5f803804a9b804efa9beb02e","wayback_url":null,"deep_link":"https://getanana.com/privacy-policy#:~:text=%20When%20a%20venue,where%20required%20by%20law.","structural_citation":"Privacy Policy › “Tenant-authenticated integrations (not Anana sub-processors)”","citation_basis":"heading_path","char_start":8769,"char_end":9195,"retrieved_at":"2026-07-19T23:41:27.15497+00:00"}},{"id":"audit-rights-dpa-residency-890092130e3e04a1e6f1","permalink":"https://airinetwork.com/platform/anana/finding/audit-rights-dpa-residency-890092130e3e04a1e6f1","surface":"audit_rights_dpa_residency","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" Anana is established in the United States. In accordance with Art. 27 GDPR, Anana has designated the following EU representative for matters relating to the processing of personal data of data subjects in the EU/EEA:\n Probo Inc, 7 rue Commines, 75003 Paris, France — privacy@probo.com\n EU/EEA data subjects and supervisory authorities may contact our EU representative directly on all issues related to processing for the purpose of ensuring compliance with the GDPR.","caution":null,"provenance":{"source_url":"https://getanana.com/privacy-policy","snapshot_sha256":"8df01c2abdd5082967f7746351a01744cb2eda2b5f803804a9b804efa9beb02e","wayback_url":null,"deep_link":"https://getanana.com/privacy-policy#:~:text=%20Anana%20is%20established,compliance%20with%20the%20GDPR.","structural_citation":"§ 2 (EU Representative (Art. 27 GDPR))","citation_basis":"section_number","char_start":1584,"char_end":2052,"retrieved_at":"2026-07-19T23:41:27.15497+00:00"}},{"id":"audit-rights-dpa-residency-5e7c15b9a3264d79bb22","permalink":"https://airinetwork.com/platform/anana/finding/audit-rights-dpa-residency-5e7c15b9a3264d79bb22","surface":"audit_rights_dpa_residency","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" Anana is established in the United States and our production data is stored in AWS eu-central-1 (Frankfurt). Several sub-processors listed in Section 7 process data in the United States or other third countries (notably OpenAI, OpenRouter, Perplexity, Google, Sentry, Vercel, Stytch, Twilio, Resend, AssemblyAI, Deepgram, Firecrawl, Reducto).\n For transfers of EU/EEA personal data to the United States or other third countries we rely on:\n Standard Contractual Clauses (SCCs) under Commission Implementing Decision (EU) 2021/914, plus supplementary measures where required\n EU–U.S. Data Privacy Framework where the recipient is certified under it\n Transfer Impact Assessments documenting the level of protection and any supplementary measures\n A copy of the SCCs and our TIAs is available on request at privacy@getanana.com.","caution":null,"provenance":{"source_url":"https://getanana.com/privacy-policy","snapshot_sha256":"8df01c2abdd5082967f7746351a01744cb2eda2b5f803804a9b804efa9beb02e","wayback_url":null,"deep_link":"https://getanana.com/privacy-policy#:~:text=%20Anana%20is%20established,on%20request%20at%20privacy%40getanana.com.","structural_citation":"§ 8 (International Transfers)","citation_basis":"section_number","char_start":9232,"char_end":10058,"retrieved_at":"2026-07-19T23:41:27.15497+00:00"}},{"id":"audit-rights-dpa-residency-001cd765aeeaef092a28","permalink":"https://airinetwork.com/platform/anana/finding/audit-rights-dpa-residency-001cd765aeeaef092a28","surface":"audit_rights_dpa_residency","risk":"low","confidence":"high","tier":"All","verified":true,"quote":" We apply the following measures:\n Encryption in transit: TLS everywhere; HTTPS-only externally.\n Encryption at rest: AES-256 via AWS KMS for AWS RDS Postgres 17.4 (including pgvector) and AWS S3 (recordings, attachments, exports). Application-level AES-256-GCM for integration credentials.\n Multi-tenant isolation: row-level tenant filter enforced in the application data layer.\n Network protection: AWS WAF with managed rules and rate limiting (2000 requests per 5 minutes).\n Webhook integrity: HMAC verification on inbound webhooks where the provider supports it.\n Access controls: multi-factor authentication, role-based access control, least-privilege provisioning.\n Audit logging: artifact lifecycle events (create, version bump, send) are recorded.\n Transient stores: Redis is used for sessions and queues; data there is short-lived.","caution":null,"provenance":{"source_url":"https://getanana.com/privacy-policy","snapshot_sha256":"8df01c2abdd5082967f7746351a01744cb2eda2b5f803804a9b804efa9beb02e","wayback_url":null,"deep_link":"https://getanana.com/privacy-policy#:~:text=%20We%20apply%20the,data%20there%20is%20short-lived.","structural_citation":"§ 9 (Security)","citation_basis":"section_number","char_start":10080,"char_end":10920,"retrieved_at":"2026-07-19T23:41:27.15497+00:00"}},{"id":"audit-rights-dpa-residency-b4176577276202a25a07","permalink":"https://airinetwork.com/platform/anana/finding/audit-rights-dpa-residency-b4176577276202a25a07","surface":"audit_rights_dpa_residency","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" Anana: privacy queries and rights requests: privacy@getanana.com \n EU representative: Probo Inc, 7 rue Commines, 75003 Paris, France — privacy@probo.com","caution":null,"provenance":{"source_url":"https://getanana.com/privacy-policy","snapshot_sha256":"8df01c2abdd5082967f7746351a01744cb2eda2b5f803804a9b804efa9beb02e","wayback_url":null,"deep_link":"https://getanana.com/privacy-policy#:~:text=%20Anana%3A%20privacy%20queries,Paris%2C%20France%20%E2%80%94%20privacy%40probo.com","structural_citation":"§ 14 (Contact)","citation_basis":"section_number","char_start":13242,"char_end":13395,"retrieved_at":"2026-07-19T23:41:27.15497+00:00"}},{"id":"governing-law-disputes-fc3fb34a29e005b80560","permalink":"https://airinetwork.com/platform/anana/finding/governing-law-disputes-fc3fb34a29e005b80560","surface":"governing_law_disputes","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" This Agreement is between OMOC INC (\"Provider\") and the company or person accessing or using the Product (\"Customer\"). It consists of: (1) the Order Form below and (2) the Framework Terms defined below.","caution":null,"provenance":{"source_url":"https://getanana.com/terms","snapshot_sha256":"ddbaeef06e04dac2d5e8de0ec3d03748289359e6b97c3f82dde6747a832de984","wayback_url":null,"deep_link":"https://getanana.com/terms#:~:text=%20This%20Agreement%20is,Framework%20Terms%20defined%20below.","structural_citation":"Terms of Service › “Overview”","citation_basis":"heading_path","char_start":175,"char_end":378,"retrieved_at":"2026-07-19T23:41:27.90883+00:00"}},{"id":"governing-law-disputes-0571e59b559e7e935a7f","permalink":"https://airinetwork.com/platform/anana/finding/governing-law-disputes-0571e59b559e7e935a7f","surface":"governing_law_disputes","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" If you are accessing or using the Product on behalf of your company, you represent that you are authorized to accept this Agreement on behalf of your company. By signing up, accessing, or using the Product, Customer accepts this Agreement.\n If you signed a separate Cover Page to access the Product with the same account and that agreement has not ended, that separate Cover Page applies instead of these terms.","caution":null,"provenance":{"source_url":"https://getanana.com/terms","snapshot_sha256":"ddbaeef06e04dac2d5e8de0ec3d03748289359e6b97c3f82dde6747a832de984","wayback_url":null,"deep_link":"https://getanana.com/terms#:~:text=%20If%20you%20are,instead%20of%20these%20terms.","structural_citation":"Terms of Service › “Acceptance”","citation_basis":"heading_path","char_start":399,"char_end":811,"retrieved_at":"2026-07-19T23:41:27.90883+00:00"}},{"id":"governing-law-disputes-4bc66c31fa7bdb5f9bc6","permalink":"https://airinetwork.com/platform/anana/finding/governing-law-disputes-4bc66c31fa7bdb5f9bc6","surface":"governing_law_disputes","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" This Order Form incorporates and is governed by the Framework Terms that are made up of the Key Terms below and the Common Paper Cloud Service Agreement Standard Terms Version 2.1 , which are incorporated by reference. Any modifications to the Standard Terms made in the Cover Page will control over conflicts with the Standard Terms. Capitalized words have the meanings given in the Cover Page or the Standard Terms.","caution":null,"provenance":{"source_url":"https://getanana.com/terms","snapshot_sha256":"ddbaeef06e04dac2d5e8de0ec3d03748289359e6b97c3f82dde6747a832de984","wayback_url":null,"deep_link":"https://getanana.com/terms#:~:text=%20This%20Order%20Form,or%20the%20Standard%20Terms.","structural_citation":"Terms of Service › “Framework Terms”","citation_basis":"heading_path","char_start":857,"char_end":1275,"retrieved_at":"2026-07-19T23:41:27.90883+00:00"}},{"id":"governing-law-disputes-5dc8cf448c64fde27fb0","permalink":"https://airinetwork.com/platform/anana/finding/governing-law-disputes-5dc8cf448c64fde27fb0","surface":"governing_law_disputes","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" Subscription Period: 1 month(s). We offer custom pricing based on your business's specific requirements, including call volume, number of AI agents, and features needed. Contact us for a tailored quote that fits your budget and operational needs.\n Payment Process: Automatic payment. Customer authorizes Provider to bill and charge Customer's payment method on file monthly for immediate payment or deduction without further approval.\n Non-Renewal Notice Period: At least 30 days before the end of the current Subscription Period.","caution":null,"provenance":{"source_url":"https://getanana.com/terms","snapshot_sha256":"ddbaeef06e04dac2d5e8de0ec3d03748289359e6b97c3f82dde6747a832de984","wayback_url":null,"deep_link":"https://getanana.com/terms#:~:text=%20Subscription%20Period%3A%201,the%20current%20Subscription%20Period.","structural_citation":"Terms of Service › “Order Date: The Effective Date”","citation_basis":"heading_path","char_start":1641,"char_end":2182,"retrieved_at":"2026-07-19T23:41:27.90883+00:00"}},{"id":"governing-law-disputes-780acac39b99db09a916","permalink":"https://airinetwork.com/platform/anana/finding/governing-law-disputes-780acac39b99db09a916","surface":"governing_law_disputes","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" Customer: The company or person who accesses or uses the Product. If the person accepting this Agreement is doing so on behalf of a company, all use of the word \"Customer\" in the Agreement will mean that company.\n Provider: OMOC INC.\n Effective Date: The date Customer first accepts this Agreement.","caution":null,"provenance":{"source_url":"https://getanana.com/terms","snapshot_sha256":"ddbaeef06e04dac2d5e8de0ec3d03748289359e6b97c3f82dde6747a832de984","wayback_url":null,"deep_link":"https://getanana.com/terms#:~:text=%20Customer%3A%20The%20company,first%20accepts%20this%20Agreement.","structural_citation":"Terms of Service › “Key Terms”","citation_basis":"heading_path","char_start":2204,"char_end":2503,"retrieved_at":"2026-07-19T23:41:27.90883+00:00"}},{"id":"governing-law-disputes-0b90cc74a744b53fc894","permalink":"https://airinetwork.com/platform/anana/finding/governing-law-disputes-0b90cc74a744b53fc894","surface":"governing_law_disputes","risk":"unknown","confidence":"high","tier":"All","verified":true,"quote":" General Cap Amount: The fees paid or payable by Customer to Provider in the 12-month period immediately before the claim.","caution":null,"provenance":{"source_url":"https://getanana.com/terms","snapshot_sha256":"ddbaeef06e04dac2d5e8de0ec3d03748289359e6b97c3f82dde6747a832de984","wayback_url":null,"deep_link":"https://getanana.com/terms#:~:text=%20General%20Cap%20Amount%3A,immediately%20before%20the%20claim.","structural_citation":"Terms of Service › “Liability Cap”","citation_basis":"heading_path","char_start":3310,"char_end":3432,"retrieved_at":"2026-07-19T23:41:27.90883+00:00"}}],"documents":[{"doc_type":"terms","pdf_page_count":null,"extraction_method":"static","page_level_citations":false,"last_captured":"2026-08-28","last_verified_scan":"2026-08-28","verified_scan_count":2},{"doc_type":"privacy","pdf_page_count":null,"extraction_method":null,"page_level_citations":false,"last_captured":"2026-07-19","last_verified_scan":"2026-07-19","verified_scan_count":1}],"clause_intelligence":{"clauses_count":33,"risk_patterns_count":1,"stance_events_count":1,"patterns_by_family":{"data_retention":1},"risk_summary":{"low":1},"evidence":[{"pattern_key":"deletion_or_bounded_retention","pattern_family":"data_retention","risk_rating":"low","confidence":"high","stance_key":"retention","stance_value":"deletion_or_time_bound","evidence":"Operator user account and authentication data For the life of the customer contract; deleted within 1 year of contract termination. Voice recordings Retained per the venue's configuration and not used for model training; Anana-held copies are deleted on the venue's instruction or within 1 year of contract termination. Voice transcripts Retained per the venue's configuration as part of the conversati...","reason":"The clause provides a deletion or time-bounded retention path.","matcher_version":"clause-intelligence-2026-06-17.1","citation":{"surface":"data_retention","quote":"Operator user account and authentication data For the life of the customer contract; deleted within 1 year of contract termination. Voice recordings Retained per the venue's configuration and not used for model training; Anana-held copies are deleted on the venue's instruction or within 1 year of contract termination. Voice transcripts Retained per the venue's configuration as part of the conversation record; deleted with the associated tenant data on the venue's instruction or within 1 year of contract termination. Inbound messages (chat, SMS, email) Retained per the venue's configuration as part of the conversation record; deleted on the venue's instruction or within 1 year of contract termination. Booking/guest profile data synced from PMS/CRM Controlled by the venue; Anana deletes on the venue's instruction or contract end. Embeddings in pgvector Tied to the source artifact; deleted when the source is deleted. Audit logs (artifact create / version / send) 2 years. Server logs / WAF logs Application production logs 30 days; AWS CloudFront/WAF edge logs per their configuration. Database backups Daily backups retained 7 days on a rolling cycle. Business contacts (CRM) Until objection or 2 years of inactivity. Accounting and tax records As required by applicable law (typically 7–10 years).","source_url":"https://getanana.com/privacy-policy","deep_link":"https://getanana.com/privacy-policy#:~:text=%20Operator%20user%20account,(typically%207%E2%80%9310%20years).%20","structural_citation":"Privacy Policy › “Data category Retention”","citation_basis":"heading_path","char_start":6346,"char_end":7713}}]},"tier_conditions":[{"tier":"Api","surface":"privacy_data_use","verdict":"unknown","confidence":"high","citation_count":1,"citations":[{"finding_id":"33378024-0799-486b-82a5-e363671ff656","quote":" This Privacy Policy explains how Anana processes personal data in connection with our AI agent platform for hospitality (hotels, restaurants, wellness venues). It covers our website (getanana.com), our application (app.getanana.com), our API (api.getanana.com), and the messaging, voice, and booking workflows that Anana performs on behalf of our customers.","source_url":"https://getanana.com/privacy-policy","deep_link":"https://getanana.com/privacy-policy#:~:text=%20This%20Privacy%20Policy,behalf%20of%20our%20customers.","structural_citation":"Privacy Policy › “Last updated: July 5, 2026”"}]},{"tier":"Basic","surface":"privacy_data_use","verdict":"unknown","confidence":"high","citation_count":1,"citations":[{"finding_id":"e462c5ca-5a65-4917-83e9-62c7972e0de1","quote":" Server logs (IP address, user-agent, timestamps, requested URL) processed by AWS and Vercel for security, abuse prevention, and basic operation.\n Cookies: our websites use cookies. The categories and purposes of cookies in use, and the controls available to you, are described in our separate Cookie Policy and managed via the cookie banner displayed on first visit.","source_url":"https://getanana.com/privacy-policy","deep_link":"https://getanana.com/privacy-policy#:~:text=%20Server%20logs%20(IP,displayed%20on%20first%20visit.","structural_citation":"§ 3.3 (Website visitors)"}]},{"tier":"Business","surface":"data_retention","verdict":"improves","confidence":"high","citation_count":1,"citations":[{"finding_id":"6c6de48b-837d-4fe6-a8b7-9055e0f8786f","quote":" Operator user account and authentication data For the life of the customer contract; deleted within 1 year of contract termination. \n Voice recordings Retained per the venue's configuration and not used for model training; Anana-held copies are deleted on the venue's instruction or within 1 year of contract termination. \n Voice transcripts Retained per the venue's configuration as part of the conversation record; deleted with the associated tenant data on the venue's instruction or within 1 year of contract termination. \n Inbound messages (chat, SMS, email) Retained per the venue's configuration as part of the conversation record; deleted on the venue's instruction or within 1 year of contract termination. \n Booking/guest profile data synced from PMS/CRM Controlled by the venue; Anana deletes on the venue's instruction or contract end. \n Embeddings in pgvector Tied to the source artifact; deleted when the source is deleted. \n Audit logs (artifact create / version / send) 2 years. \n Server logs / WAF logs Application production logs 30 days; AWS CloudFront/WAF edge logs per their configuration. \n Database backups Daily backups retained 7 days on a rolling cycle. \n Business contacts (CRM) Until objection or 2 years of inactivity. \n Accounting and tax records As required by applicable law (typically 7–10 years). ","source_url":"https://getanana.com/privacy-policy","deep_link":"https://getanana.com/privacy-policy#:~:text=%20Operator%20user%20account,(typically%207%E2%80%9310%20years).%20","structural_citation":"Privacy Policy › “Data category Retention”"}]},{"tier":"Business","surface":"governing_law_disputes","verdict":"unknown","confidence":"high","citation_count":1,"citations":[{"finding_id":"1e59f718-4670-418a-8fd9-098ff414357d","quote":" Subscription Period: 1 month(s). We offer custom pricing based on your business's specific requirements, including call volume, number of AI agents, and features needed. Contact us for a tailored quote that fits your budget and operational needs.\n Payment Process: Automatic payment. Customer authorizes Provider to bill and charge Customer's payment method on file monthly for immediate payment or deduction without further approval.\n Non-Renewal Notice Period: At least 30 days before the end of the current Subscription Period.","source_url":"https://getanana.com/terms","deep_link":"https://getanana.com/terms#:~:text=%20Subscription%20Period%3A%201,the%20current%20Subscription%20Period.","structural_citation":"Terms of Service › “Order Date: The Effective Date”"}]},{"tier":"Business","surface":"privacy_data_use","verdict":"conditional","confidence":"high","citation_count":2,"citations":[{"finding_id":"807ae5db-62a4-4c71-8944-f1e40365cc61","quote":" Omoc, Inc (doing business as Anana), 10 Montague Terrace, Apt 1B, Brooklyn, NY 11201, United States, is the controller for personal data processed about:\n Operator users (staff of our hospitality customers who log into Anana)","source_url":"https://getanana.com/privacy-policy","deep_link":"https://getanana.com/privacy-policy#:~:text=%20Omoc%2C%20Inc%20(doing,who%20log%20into%20Anana)","structural_citation":"§ 1 (Controller)"},{"finding_id":"aaad8952-d79f-4646-86bd-5c212ddbf1c7","quote":" Provide the Anana platform to operator users (accounts, authentication, app access, support) Operator users Art. 6(1)(b): performance of contract with the customer \n Process guest messages, calls, bookings on behalf of the venue End guests/leads Processor: venue's lawful basis applies; Anana relies on Art. 28 \n Generate AI responses, transcripts, summaries, and embeddings to operate the service Operator users, end guests Art. 6(1)(b) (operators); processor for guests \n Security, fraud and abuse prevention, audit logging All Art. 6(1)(f): legitimate interest in securing the service \n Service communications (incident notices, billing, product updates) Operator users, customer admins Art. 6(1)(b) and Art. 6(1)(f) \n Marketing emails to prospects Business contacts Art. 6(1)(f): legitimate interest in B2B outreach; opt-out at any time \n Compliance with legal obligations (tax, accounting, lawful requests) All Art. 6(1)(c) \n Recruitment Applicants Art. 6(1)(b) pre-contract / Art. 6(1)(a) consent for retention ","source_url":"https://getanana.com/privacy-policy","deep_link":"https://getanana.com/privacy-policy#:~:text=%20Provide%20the%20Anana,consent%20for%20retention%20","structural_citation":"Privacy Policy › “Purpose Data subjects Lawful basis”"}]},{"tier":"Free","surface":"privacy_data_use","verdict":"improves","confidence":"high","citation_count":1,"citations":[{"finding_id":"256d6b56-be1c-43d8-a021-5fc97a846ad9","quote":" Where we rely on legitimate interest, you have the right to object (see Section 10).\n Special category data. Anana does not intentionally collect special category data (Art. 9). However, free-text guest messages and call content can incidentally contain health, dietary, or similar details, and the Practice Better integration can surface practitioner-client health records. Anana processes this data solely as a processor on the venue's behalf. The Art. 9(2)(a) explicit consent condition, and the notice to the individual, are the responsibility of the venue (controller); this obligation is allocated to the venue in our Data Processing Agreement.","source_url":"https://getanana.com/privacy-policy","deep_link":"https://getanana.com/privacy-policy#:~:text=%20Where%20we%20rely,our%20Data%20Processing%20Agreement.","structural_citation":"Privacy Policy › “Purpose Data subjects Lawful basis”"}]},{"tier":"Paid","surface":"governing_law_disputes","verdict":"conditional","confidence":"high","citation_count":1,"citations":[{"finding_id":"2ef706de-347f-46dc-b696-f3910c02daef","quote":" General Cap Amount: The fees paid or payable by Customer to Provider in the 12-month period immediately before the claim.","source_url":"https://getanana.com/terms","deep_link":"https://getanana.com/terms#:~:text=%20General%20Cap%20Amount%3A,immediately%20before%20the%20claim.","structural_citation":"Terms of Service › “Liability Cap”"}]},{"tier":"Standard","surface":"audit_rights_dpa_residency","verdict":"unknown","confidence":"high","citation_count":1,"citations":[{"finding_id":"c1f233aa-e416-4853-9ca6-8a9028f94706","quote":" Anana is established in the United States and our production data is stored in AWS eu-central-1 (Frankfurt). Several sub-processors listed in Section 7 process data in the United States or other third countries (notably OpenAI, OpenRouter, Perplexity, Google, Sentry, Vercel, Stytch, Twilio, Resend, AssemblyAI, Deepgram, Firecrawl, Reducto).\n For transfers of EU/EEA personal data to the United States or other third countries we rely on:\n Standard Contractual Clauses (SCCs) under Commission Implementing Decision (EU) 2021/914, plus supplementary measures where required\n EU–U.S. Data Privacy Framework where the recipient is certified under it\n Transfer Impact Assessments documenting the level of protection and any supplementary measures\n A copy of the SCCs and our TIAs is available on request at privacy@getanana.com.","source_url":"https://getanana.com/privacy-policy","deep_link":"https://getanana.com/privacy-policy#:~:text=%20Anana%20is%20established,on%20request%20at%20privacy%40getanana.com.","structural_citation":"§ 8 (International Transfers)"}]},{"tier":"Standard","surface":"governing_law_disputes","verdict":"unknown","confidence":"high","citation_count":1,"citations":[{"finding_id":"e6a464d2-603c-4a09-ae49-4823ca10e668","quote":" This Order Form incorporates and is governed by the Framework Terms that are made up of the Key Terms below and the Common Paper Cloud Service Agreement Standard Terms Version 2.1 , which are incorporated by reference. Any modifications to the Standard Terms made in the Cover Page will control over conflicts with the Standard Terms. Capitalized words have the meanings given in the Cover Page or the Standard Terms.","source_url":"https://getanana.com/terms","deep_link":"https://getanana.com/terms#:~:text=%20This%20Order%20Form,or%20the%20Standard%20Terms.","structural_citation":"Terms of Service › “Framework Terms”"}]},{"tier":"Standard","surface":"privacy_data_use","verdict":"unknown","confidence":"high","citation_count":1,"citations":[{"finding_id":"10ed50da-8569-41f3-b10e-674457a92dac","quote":" We process standard HR data for employees/applicants and standard B2B contact data for prospects, customers, and suppliers. Employee processing is described in a separate internal notice.","source_url":"https://getanana.com/privacy-policy","deep_link":"https://getanana.com/privacy-policy#:~:text=%20We%20process%20standard,a%20separate%20internal%20notice.","structural_citation":"§ 3.4 (Employees, applicants, and business contacts)"}]}],"disclaimer":"Informational only, not legal advice. Every finding is a verbatim quote from a fully-read, gate-verified document; verify via snapshot_sha256 + wayback_url. Partially-verified platforms show findings only from their verified document(s).","benchmark":{"disclaimer":"Automated assessment against a published rubric — not legal advice.","bands":[]},"@jsonld":{"@context":"https://schema.org","@type":"Dataset","name":"Anana — AI policy risk findings","description":"Verified, cited policy findings for Anana across 13 risk surfaces.","url":"https://airinetwork.com/platform/anana","creator":{"@type":"Organization","name":"AIRIN","url":"https://airinetwork.com"},"isAccessibleForFree":true,"license":"https://airinetwork.com/terms","additionalProperty":[{"@type":"PropertyValue","name":"verification","value":"fully_verified"},{"@type":"PropertyValue","name":"tier_condition_count","value":10}],"hasPart":[{"@type":"Quotation","@id":"https://airinetwork.com/platform/anana/finding/privacy-data-use-bdbaef46edeea0610c0b","text":" This Privacy Policy explains how Anana processes personal data in connection with our AI agent platform for hospitality (hotels, restaurants, wellness venues). It covers our website (getanana.com), our application (app.getanana.com), our API (api.getanana.com), and the messaging, voice, and booking workflows that Anana performs on behalf of our customers.","isBasedOn":"https://getanana.com/privacy-policy","dateCreated":"2026-07-19T23:41:27.15497+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"8df01c2abdd5082967f7746351a01744cb2eda2b5f803804a9b804efa9beb02e"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/anana/finding/privacy-data-use-ef4e25e92c57de955491","text":" Omoc, Inc (doing business as Anana), 10 Montague Terrace, Apt 1B, Brooklyn, NY 11201, United States, is the controller for personal data processed about:\n Operator users (staff of our hospitality customers who log into Anana)","isBasedOn":"https://getanana.com/privacy-policy","dateCreated":"2026-07-19T23:41:27.15497+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"8df01c2abdd5082967f7746351a01744cb2eda2b5f803804a9b804efa9beb02e"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/anana/finding/privacy-data-use-7a67f9a6e2ff1e91c668","text":" When a staff member of a hospitality customer is provisioned an Anana account, we process:\n Identification and account data: name, work email, role, organization/tenant ID\n Authentication data: login identifiers, session tokens, MFA factors (via Stytch)\n Usage data: pages viewed, actions taken in the app, artifacts created/sent, IP address, device/user-agent\n Support communications: messages sent to support@getanana.com","isBasedOn":"https://getanana.com/privacy-policy","dateCreated":"2026-07-19T23:41:27.15497+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"8df01c2abdd5082967f7746351a01744cb2eda2b5f803804a9b804efa9beb02e"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/anana/finding/privacy-data-use-113f2e3a1540f5880bf4","text":" For transparency, the personal data Anana handles on behalf of venues includes:\n Inbound messages: chat widget conversations, inbound SMS, inbound email (content, sender identifiers, timestamps)\n Voice calls: audio recordings of WebRTC and SIP calls, machine-generated transcripts, call metadata (caller number, duration, routing)\n Booking and guest profile data synced from the venue's PMS/CRM: name, contact details, reservation details, stay history, and any fields the venue chooses to expose\n Embeddings: vector representations derived from messages and documents, used for retrieval; stored in pgvector","isBasedOn":"https://getanana.com/privacy-policy","dateCreated":"2026-07-19T23:41:27.15497+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"8df01c2abdd5082967f7746351a01744cb2eda2b5f803804a9b804efa9beb02e"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/anana/finding/privacy-data-use-8bc7fb18b9acfa2f9804","text":" Anana does not determine which guests to contact, which fields to ingest, or how long the venue retains guest records — the venue does. The guest should refer to the venue's privacy notice.","isBasedOn":"https://getanana.com/privacy-policy","dateCreated":"2026-07-19T23:41:27.15497+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"8df01c2abdd5082967f7746351a01744cb2eda2b5f803804a9b804efa9beb02e"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/anana/finding/privacy-data-use-2e6b0f6563dee55ad721","text":" Server logs (IP address, user-agent, timestamps, requested URL) processed by AWS and Vercel for security, abuse prevention, and basic operation.\n Cookies: our websites use cookies. The categories and purposes of cookies in use, and the controls available to you, are described in our separate Cookie Policy and managed via the cookie banner displayed on first visit.","isBasedOn":"https://getanana.com/privacy-policy","dateCreated":"2026-07-19T23:41:27.15497+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"8df01c2abdd5082967f7746351a01744cb2eda2b5f803804a9b804efa9beb02e"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/anana/finding/privacy-data-use-ee654c6b609c3cc5005b","text":" We process standard HR data for employees/applicants and standard B2B contact data for prospects, customers, and suppliers. Employee processing is described in a separate internal notice.","isBasedOn":"https://getanana.com/privacy-policy","dateCreated":"2026-07-19T23:41:27.15497+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"8df01c2abdd5082967f7746351a01744cb2eda2b5f803804a9b804efa9beb02e"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/anana/finding/privacy-data-use-b8cf11726cb1c608190e","text":" Provide the Anana platform to operator users (accounts, authentication, app access, support) Operator users Art. 6(1)(b): performance of contract with the customer \n Process guest messages, calls, bookings on behalf of the venue End guests/leads Processor: venue's lawful basis applies; Anana relies on Art. 28 \n Generate AI responses, transcripts, summaries, and embeddings to operate the service Operator users, end guests Art. 6(1)(b) (operators); processor for guests \n Security, fraud and abuse prevention, audit logging All Art. 6(1)(f): legitimate interest in securing the service \n Service communications (incident notices, billing, product updates) Operator users, customer admins Art. 6(1)(b) and Art. 6(1)(f) \n Marketing emails to prospects Business contacts Art. 6(1)(f): legitimate interest in B2B outreach; opt-out at any time \n Compliance with legal obligations (tax, accounting, lawful requests) All Art. 6(1)(c) \n Recruitment Applicants Art. 6(1)(b) pre-contract / Art. 6(1)(a) consent for retention ","isBasedOn":"https://getanana.com/privacy-policy","dateCreated":"2026-07-19T23:41:27.15497+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"8df01c2abdd5082967f7746351a01744cb2eda2b5f803804a9b804efa9beb02e"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/anana/finding/privacy-data-use-c36eccdc4aa22c79e8c7","text":" Where we rely on legitimate interest, you have the right to object (see Section 10).\n Special category data. Anana does not intentionally collect special category data (Art. 9). However, free-text guest messages and call content can incidentally contain health, dietary, or similar details, and the Practice Better integration can surface practitioner-client health records. Anana processes this data solely as a processor on the venue's behalf. The Art. 9(2)(a) explicit consent condition, and the notice to the individual, are the responsibility of the venue (controller); this obligation is allocated to the venue in our Data Processing Agreement.","isBasedOn":"https://getanana.com/privacy-policy","dateCreated":"2026-07-19T23:41:27.15497+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"8df01c2abdd5082967f7746351a01744cb2eda2b5f803804a9b804efa9beb02e"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/anana/finding/privacy-data-use-c712ac89d06cb5304afd","text":" Operator user data: provided directly by the user or by their employer (the customer) when provisioning an account.\n Guest/lead data: received from the guest directly (when they message, call, or email the venue) or from the venue's PMS/CRM via integrations the venue has authorized.\n Website data: collected directly through your browser.","isBasedOn":"https://getanana.com/privacy-policy","dateCreated":"2026-07-19T23:41:27.15497+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"8df01c2abdd5082967f7746351a01744cb2eda2b5f803804a9b804efa9beb02e"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/anana/finding/privacy-data-use-ce1afd0ebcded2d2c38e","text":" Where Anana is the controller, you may exercise the following rights:\n Access (Art. 15): obtain a copy of your personal data.\n Rectification (Art. 16): correct inaccurate data.\n Erasure (Art. 17): request deletion.\n Restriction (Art. 18): limit processing.\n Portability (Art. 20): receive your data in a structured, machine-readable format where applicable.\n Object (Art. 21): object to processing based on legitimate interest, including direct marketing.\n Withdraw consent (Art. 7(3)): where processing is based on consent, you may withdraw it at any time, as easily as it was given, without affecting the lawfulness of processing carried out beforehand.\n Not be subject to solely automated decisions with legal or similarly significant effects (Art. 22). Anana generates suggested replies and drafts; final operator review is part of the workflow.\n To exercise your rights, email privacy@getanana.com , or contact our EU representative at privacy@probo.com (Section 2). We respond within one month (extendable by two further months for complex requests, Art. 12(3)).\n If you are an end guest and want to exercise rights against a venue, contact the venue directly — they are the controller. We will assist them under Art. 28(3)(e).","isBasedOn":"https://getanana.com/privacy-policy","dateCreated":"2026-07-19T23:41:27.15497+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"8df01c2abdd5082967f7746351a01744cb2eda2b5f803804a9b804efa9beb02e"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/anana/finding/privacy-data-use-77e4f5638fdb7aa0e244","text":" You have the right to lodge a complaint with a data protection authority. As Anana is established outside the EU/EEA, EU/EEA data subjects may lodge a complaint with the supervisory authority of the EU/EEA member state where they reside, where they work, or where the alleged infringement occurred. You may also contact our EU representative (Section 2).","isBasedOn":"https://getanana.com/privacy-policy","dateCreated":"2026-07-19T23:41:27.15497+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"8df01c2abdd5082967f7746351a01744cb2eda2b5f803804a9b804efa9beb02e"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/anana/finding/privacy-data-use-f9864839352f6afc7a0a","text":" Anana is a B2B service intended for hospitality businesses and their staff. It is not directed at children, and we do not knowingly collect personal data from children. Guests who interact with a venue's chat, SMS, voice, or email channel do so under that venue's own policies; venues are responsible for any age-specific obligations relating to their guests.","isBasedOn":"https://getanana.com/privacy-policy","dateCreated":"2026-07-19T23:41:27.15497+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"8df01c2abdd5082967f7746351a01744cb2eda2b5f803804a9b804efa9beb02e"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/anana/finding/privacy-data-use-3b88a07eda13f50bb813","text":" We update this Policy when our processing changes. Material changes will be communicated to operator users via the application or by email. The “Last updated” date at the top reflects the most recent revision.","isBasedOn":"https://getanana.com/privacy-policy","dateCreated":"2026-07-19T23:41:27.15497+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"8df01c2abdd5082967f7746351a01744cb2eda2b5f803804a9b804efa9beb02e"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/anana/finding/data-retention-b1e3684304524537cef3","text":" Operator user account and authentication data For the life of the customer contract; deleted within 1 year of contract termination. \n Voice recordings Retained per the venue's configuration and not used for model training; Anana-held copies are deleted on the venue's instruction or within 1 year of contract termination. \n Voice transcripts Retained per the venue's configuration as part of the conversation record; deleted with the associated tenant data on the venue's instruction or within 1 year of contract termination. \n Inbound messages (chat, SMS, email) Retained per the venue's configuration as part of the conversation record; deleted on the venue's instruction or within 1 year of contract termination. \n Booking/guest profile data synced from PMS/CRM Controlled by the venue; Anana deletes on the venue's instruction or contract end. \n Embeddings in pgvector Tied to the source artifact; deleted when the source is deleted. \n Audit logs (artifact create / version / send) 2 years. \n Server logs / WAF logs Application production logs 30 days; AWS CloudFront/WAF edge logs per their configuration. \n Database backups Daily backups retained 7 days on a rolling cycle. \n Business contacts (CRM) Until objection or 2 years of inactivity. \n Accounting and tax records As required by applicable law (typically 7–10 years). ","isBasedOn":"https://getanana.com/privacy-policy","dateCreated":"2026-07-19T23:41:27.15497+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"8df01c2abdd5082967f7746351a01744cb2eda2b5f803804a9b804efa9beb02e"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/anana/finding/data-retention-c8deb3b10c9614e93556","text":" After the retention period, data is deleted or irreversibly anonymized. Retention of guest data (recordings, transcripts, messages, bookings) is ultimately set by the venue as controller; the periods above are Anana's own outer limits.","isBasedOn":"https://getanana.com/privacy-policy","dateCreated":"2026-07-19T23:41:27.15497+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"8df01c2abdd5082967f7746351a01744cb2eda2b5f803804a9b804efa9beb02e"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/anana/finding/indemnity-liability-12eef06de5b23a9d557b","text":" Provider Covered Claims: Any action, proceeding, or claim that the Cloud Service, when used by Customer according to the terms of the Agreement, violates, misappropriates, or otherwise infringes upon anyone else's intellectual property or other proprietary rights.\n Customer Covered Claims: Any action, proceeding, or claim that (1) the Customer Content, when used according to the terms of the Agreement, violates, misappropriates, or otherwise infringes upon anyone else's intellectual property or other proprietary rights; or (2) results from Customer's breach or alleged breach of Section 2.1 (Restrictions on Customer).","isBasedOn":"https://getanana.com/terms","dateCreated":"2026-07-19T23:41:27.90883+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"ddbaeef06e04dac2d5e8de0ec3d03748289359e6b97c3f82dde6747a832de984"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/anana/finding/subprocessors-data-sharing-05b2960eca2f5fbc813d","text":" For personal data of end guests and leads (people who chat with, call, SMS, or email a venue powered by Anana, or whose booking/profile data is synced from a Property Management System or CRM), our hospitality customer is the controller and Anana acts as their processor under a Data Processing Agreement. Where this policy describes guest data, it does so in our capacity as processor and for transparency only; the venue's own privacy notice governs that processing.\n Contact: privacy@getanana.com \n We have not appointed a Data Protection Officer; Art. 37 GDPR does not require us to do so. Privacy questions and rights requests are handled at privacy@getanana.com.","isBasedOn":"https://getanana.com/privacy-policy","dateCreated":"2026-07-19T23:41:27.15497+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"8df01c2abdd5082967f7746351a01744cb2eda2b5f803804a9b804efa9beb02e"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/anana/finding/subprocessors-data-sharing-9276916dbfeac7e5508d","text":" We share personal data only with vetted sub-processors under a DPA. An up-to-date list is available on request at privacy@getanana.com.","isBasedOn":"https://getanana.com/privacy-policy","dateCreated":"2026-07-19T23:41:27.15497+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"8df01c2abdd5082967f7746351a01744cb2eda2b5f803804a9b804efa9beb02e"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/anana/finding/subprocessors-data-sharing-8b0d7d679c7d95a8759f","text":" When a venue connects Anana to its own systems (e.g., WebHotelier, Fidelio on-prem, Practice Better, Kanika, Genesys Cloud, HubSpot, Composio), the venue is the controller of that integration and the integration provider is the venue's processor, not ours. Anana acts as the venue's agent only.\n Other recipients include our professional advisors (legal, accounting) and competent authorities where required by law.","isBasedOn":"https://getanana.com/privacy-policy","dateCreated":"2026-07-19T23:41:27.15497+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"8df01c2abdd5082967f7746351a01744cb2eda2b5f803804a9b804efa9beb02e"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/anana/finding/audit-rights-dpa-residency-890092130e3e04a1e6f1","text":" Anana is established in the United States. In accordance with Art. 27 GDPR, Anana has designated the following EU representative for matters relating to the processing of personal data of data subjects in the EU/EEA:\n Probo Inc, 7 rue Commines, 75003 Paris, France — privacy@probo.com\n EU/EEA data subjects and supervisory authorities may contact our EU representative directly on all issues related to processing for the purpose of ensuring compliance with the GDPR.","isBasedOn":"https://getanana.com/privacy-policy","dateCreated":"2026-07-19T23:41:27.15497+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"8df01c2abdd5082967f7746351a01744cb2eda2b5f803804a9b804efa9beb02e"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/anana/finding/audit-rights-dpa-residency-5e7c15b9a3264d79bb22","text":" Anana is established in the United States and our production data is stored in AWS eu-central-1 (Frankfurt). Several sub-processors listed in Section 7 process data in the United States or other third countries (notably OpenAI, OpenRouter, Perplexity, Google, Sentry, Vercel, Stytch, Twilio, Resend, AssemblyAI, Deepgram, Firecrawl, Reducto).\n For transfers of EU/EEA personal data to the United States or other third countries we rely on:\n Standard Contractual Clauses (SCCs) under Commission Implementing Decision (EU) 2021/914, plus supplementary measures where required\n EU–U.S. Data Privacy Framework where the recipient is certified under it\n Transfer Impact Assessments documenting the level of protection and any supplementary measures\n A copy of the SCCs and our TIAs is available on request at privacy@getanana.com.","isBasedOn":"https://getanana.com/privacy-policy","dateCreated":"2026-07-19T23:41:27.15497+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"8df01c2abdd5082967f7746351a01744cb2eda2b5f803804a9b804efa9beb02e"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/anana/finding/audit-rights-dpa-residency-001cd765aeeaef092a28","text":" We apply the following measures:\n Encryption in transit: TLS everywhere; HTTPS-only externally.\n Encryption at rest: AES-256 via AWS KMS for AWS RDS Postgres 17.4 (including pgvector) and AWS S3 (recordings, attachments, exports). Application-level AES-256-GCM for integration credentials.\n Multi-tenant isolation: row-level tenant filter enforced in the application data layer.\n Network protection: AWS WAF with managed rules and rate limiting (2000 requests per 5 minutes).\n Webhook integrity: HMAC verification on inbound webhooks where the provider supports it.\n Access controls: multi-factor authentication, role-based access control, least-privilege provisioning.\n Audit logging: artifact lifecycle events (create, version bump, send) are recorded.\n Transient stores: Redis is used for sessions and queues; data there is short-lived.","isBasedOn":"https://getanana.com/privacy-policy","dateCreated":"2026-07-19T23:41:27.15497+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"8df01c2abdd5082967f7746351a01744cb2eda2b5f803804a9b804efa9beb02e"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/anana/finding/audit-rights-dpa-residency-b4176577276202a25a07","text":" Anana: privacy queries and rights requests: privacy@getanana.com \n EU representative: Probo Inc, 7 rue Commines, 75003 Paris, France — privacy@probo.com","isBasedOn":"https://getanana.com/privacy-policy","dateCreated":"2026-07-19T23:41:27.15497+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"8df01c2abdd5082967f7746351a01744cb2eda2b5f803804a9b804efa9beb02e"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/anana/finding/governing-law-disputes-fc3fb34a29e005b80560","text":" This Agreement is between OMOC INC (\"Provider\") and the company or person accessing or using the Product (\"Customer\"). It consists of: (1) the Order Form below and (2) the Framework Terms defined below.","isBasedOn":"https://getanana.com/terms","dateCreated":"2026-07-19T23:41:27.90883+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"ddbaeef06e04dac2d5e8de0ec3d03748289359e6b97c3f82dde6747a832de984"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/anana/finding/governing-law-disputes-0571e59b559e7e935a7f","text":" If you are accessing or using the Product on behalf of your company, you represent that you are authorized to accept this Agreement on behalf of your company. By signing up, accessing, or using the Product, Customer accepts this Agreement.\n If you signed a separate Cover Page to access the Product with the same account and that agreement has not ended, that separate Cover Page applies instead of these terms.","isBasedOn":"https://getanana.com/terms","dateCreated":"2026-07-19T23:41:27.90883+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"ddbaeef06e04dac2d5e8de0ec3d03748289359e6b97c3f82dde6747a832de984"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/anana/finding/governing-law-disputes-4bc66c31fa7bdb5f9bc6","text":" This Order Form incorporates and is governed by the Framework Terms that are made up of the Key Terms below and the Common Paper Cloud Service Agreement Standard Terms Version 2.1 , which are incorporated by reference. Any modifications to the Standard Terms made in the Cover Page will control over conflicts with the Standard Terms. Capitalized words have the meanings given in the Cover Page or the Standard Terms.","isBasedOn":"https://getanana.com/terms","dateCreated":"2026-07-19T23:41:27.90883+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"ddbaeef06e04dac2d5e8de0ec3d03748289359e6b97c3f82dde6747a832de984"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/anana/finding/governing-law-disputes-5dc8cf448c64fde27fb0","text":" Subscription Period: 1 month(s). We offer custom pricing based on your business's specific requirements, including call volume, number of AI agents, and features needed. Contact us for a tailored quote that fits your budget and operational needs.\n Payment Process: Automatic payment. Customer authorizes Provider to bill and charge Customer's payment method on file monthly for immediate payment or deduction without further approval.\n Non-Renewal Notice Period: At least 30 days before the end of the current Subscription Period.","isBasedOn":"https://getanana.com/terms","dateCreated":"2026-07-19T23:41:27.90883+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"ddbaeef06e04dac2d5e8de0ec3d03748289359e6b97c3f82dde6747a832de984"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/anana/finding/governing-law-disputes-780acac39b99db09a916","text":" Customer: The company or person who accesses or uses the Product. If the person accepting this Agreement is doing so on behalf of a company, all use of the word \"Customer\" in the Agreement will mean that company.\n Provider: OMOC INC.\n Effective Date: The date Customer first accepts this Agreement.","isBasedOn":"https://getanana.com/terms","dateCreated":"2026-07-19T23:41:27.90883+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"ddbaeef06e04dac2d5e8de0ec3d03748289359e6b97c3f82dde6747a832de984"}},{"@type":"Quotation","@id":"https://airinetwork.com/platform/anana/finding/governing-law-disputes-0b90cc74a744b53fc894","text":" General Cap Amount: The fees paid or payable by Customer to Provider in the 12-month period immediately before the claim.","isBasedOn":"https://getanana.com/terms","dateCreated":"2026-07-19T23:41:27.90883+00:00","identifier":{"@type":"PropertyValue","name":"snapshot_sha256","value":"ddbaeef06e04dac2d5e8de0ec3d03748289359e6b97c3f82dde6747a832de984"}}],"variableMeasured":[{"@type":"PropertyValue","name":"privacy_data_use","value":"unknown","description":" This Privacy Policy explains how Anana processes personal data in connection with our AI agent platform for hospitality (hotels, restaurants, wellness venues). It covers our website (getanana.com), our application (app.getanana.com), our API (api.getanana.com), and the messaging, voice, and booking workflows that Anana performs on behalf of our customers.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"8df01c2abdd5082967f7746351a01744cb2eda2b5f803804a9b804efa9beb02e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://getanana.com/privacy-policy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “Last updated: July 5, 2026”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://getanana.com/privacy-policy#:~:text=%20This%20Privacy%20Policy,behalf%20of%20our%20customers."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-19T23:41:27.15497+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"unknown","description":" Omoc, Inc (doing business as Anana), 10 Montague Terrace, Apt 1B, Brooklyn, NY 11201, United States, is the controller for personal data processed about:\n Operator users (staff of our hospitality customers who log into Anana)","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"8df01c2abdd5082967f7746351a01744cb2eda2b5f803804a9b804efa9beb02e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://getanana.com/privacy-policy"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 1 (Controller)"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://getanana.com/privacy-policy#:~:text=%20Omoc%2C%20Inc%20(doing,who%20log%20into%20Anana)"},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-19T23:41:27.15497+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"unknown","description":" When a staff member of a hospitality customer is provisioned an Anana account, we process:\n Identification and account data: name, work email, role, organization/tenant ID\n Authentication data: login identifiers, session tokens, MFA factors (via Stytch)\n Usage data: pages viewed, actions taken in the app, artifacts created/sent, IP address, device/user-agent\n Support communications: messages sent to support@getanana.com","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"8df01c2abdd5082967f7746351a01744cb2eda2b5f803804a9b804efa9beb02e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://getanana.com/privacy-policy"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 3.1 (Operator users (Art. 13))"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://getanana.com/privacy-policy#:~:text=%20When%20a%20staff,messages%20sent%20to%20support%40getanana.com"},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-19T23:41:27.15497+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"unknown","description":" For transparency, the personal data Anana handles on behalf of venues includes:\n Inbound messages: chat widget conversations, inbound SMS, inbound email (content, sender identifiers, timestamps)\n Voice calls: audio recordings of WebRTC and SIP calls, machine-generated transcripts, call metadata (caller number, duration, routing)\n Booking and guest profile data synced from the venue's PMS/CRM: name, contact details, reservation details, stay history, and any fields the venue chooses to expose\n Embeddings: vector representations derived from messages and documents, used for retrieval; stored in pgvector","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"8df01c2abdd5082967f7746351a01744cb2eda2b5f803804a9b804efa9beb02e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://getanana.com/privacy-policy"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 3.2"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://getanana.com/privacy-policy#:~:text=%20For%20transparency%2C%20the,retrieval%3B%20stored%20in%20pgvector"},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-19T23:41:27.15497+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"unknown","description":" Anana does not determine which guests to contact, which fields to ingest, or how long the venue retains guest records — the venue does. The guest should refer to the venue's privacy notice.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"8df01c2abdd5082967f7746351a01744cb2eda2b5f803804a9b804efa9beb02e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://getanana.com/privacy-policy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “Artifact metadata: messages sent, drafts, versions”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://getanana.com/privacy-policy#:~:text=%20Anana%20does%20not,the%20venue%26%23x27%3Bs%20privacy%20notice."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-19T23:41:27.15497+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"unknown","description":" Server logs (IP address, user-agent, timestamps, requested URL) processed by AWS and Vercel for security, abuse prevention, and basic operation.\n Cookies: our websites use cookies. The categories and purposes of cookies in use, and the controls available to you, are described in our separate Cookie Policy and managed via the cookie banner displayed on first visit.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"8df01c2abdd5082967f7746351a01744cb2eda2b5f803804a9b804efa9beb02e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://getanana.com/privacy-policy"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 3.3 (Website visitors)"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://getanana.com/privacy-policy#:~:text=%20Server%20logs%20(IP,displayed%20on%20first%20visit."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-19T23:41:27.15497+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"unknown","description":" We process standard HR data for employees/applicants and standard B2B contact data for prospects, customers, and suppliers. Employee processing is described in a separate internal notice.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"8df01c2abdd5082967f7746351a01744cb2eda2b5f803804a9b804efa9beb02e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://getanana.com/privacy-policy"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 3.4 (Employees, applicants, and business contacts)"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://getanana.com/privacy-policy#:~:text=%20We%20process%20standard,a%20separate%20internal%20notice."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-19T23:41:27.15497+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"unknown","description":" Provide the Anana platform to operator users (accounts, authentication, app access, support) Operator users Art. 6(1)(b): performance of contract with the customer \n Process guest messages, calls, bookings on behalf of the venue End guests/leads Processor: venue's lawful basis applies; Anana relies on Art. 28 \n Generate AI responses, transcripts, summaries, and embeddings to operate the service Operator users, end guests Art. 6(1)(b) (operators); processor for guests \n Security, fraud and abuse prevention, audit logging All Art. 6(1)(f): legitimate interest in securing the service \n Service communications (incident notices, billing, product updates) Operator users, customer admins Art. 6(1)(b) and Art. 6(1)(f) \n Marketing emails to prospects Business contacts Art. 6(1)(f): legitimate interest in B2B outreach; opt-out at any time \n Compliance with legal obligations (tax, accounting, lawful requests) All Art. 6(1)(c) \n Recruitment Applicants Art. 6(1)(b) pre-contract / Art. 6(1)(a) consent for retention ","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"8df01c2abdd5082967f7746351a01744cb2eda2b5f803804a9b804efa9beb02e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://getanana.com/privacy-policy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “Purpose Data subjects Lawful basis”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://getanana.com/privacy-policy#:~:text=%20Provide%20the%20Anana,consent%20for%20retention%20"},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-19T23:41:27.15497+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"unknown","description":" Where we rely on legitimate interest, you have the right to object (see Section 10).\n Special category data. Anana does not intentionally collect special category data (Art. 9). However, free-text guest messages and call content can incidentally contain health, dietary, or similar details, and the Practice Better integration can surface practitioner-client health records. Anana processes this data solely as a processor on the venue's behalf. The Art. 9(2)(a) explicit consent condition, and the notice to the individual, are the responsibility of the venue (controller); this obligation is allocated to the venue in our Data Processing Agreement.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"8df01c2abdd5082967f7746351a01744cb2eda2b5f803804a9b804efa9beb02e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://getanana.com/privacy-policy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “Purpose Data subjects Lawful basis”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://getanana.com/privacy-policy#:~:text=%20Where%20we%20rely,our%20Data%20Processing%20Agreement."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-19T23:41:27.15497+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"unknown","description":" Operator user data: provided directly by the user or by their employer (the customer) when provisioning an account.\n Guest/lead data: received from the guest directly (when they message, call, or email the venue) or from the venue's PMS/CRM via integrations the venue has authorized.\n Website data: collected directly through your browser.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"8df01c2abdd5082967f7746351a01744cb2eda2b5f803804a9b804efa9beb02e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://getanana.com/privacy-policy"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 5 (Sources)"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://getanana.com/privacy-policy#:~:text=%20Operator%20user%20data%3A,directly%20through%20your%20browser."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-19T23:41:27.15497+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"unknown","description":" Where Anana is the controller, you may exercise the following rights:\n Access (Art. 15): obtain a copy of your personal data.\n Rectification (Art. 16): correct inaccurate data.\n Erasure (Art. 17): request deletion.\n Restriction (Art. 18): limit processing.\n Portability (Art. 20): receive your data in a structured, machine-readable format where applicable.\n Object (Art. 21): object to processing based on legitimate interest, including direct marketing.\n Withdraw consent (Art. 7(3)): where processing is based on consent, you may withdraw it at any time, as easily as it was given, without affecting the lawfulness of processing carried out beforehand.\n Not be subject to solely automated decisions with legal or similarly significant effects (Art. 22). Anana generates suggested replies and drafts; final operator review is part of the workflow.\n To exercise your rights, email privacy@getanana.com , or contact our EU representative at privacy@probo.com (Section 2). We respond within one month (extendable by two further months for complex requests, Art. 12(3)).\n If you are an end guest and want to exercise rights against a venue, contact the venue directly — they are the controller. We will assist them under Art. 28(3)(e).","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"8df01c2abdd5082967f7746351a01744cb2eda2b5f803804a9b804efa9beb02e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://getanana.com/privacy-policy"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 10 (Your Rights (GDPR))"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://getanana.com/privacy-policy#:~:text=%20Where%20Anana%20is,them%20under%20Art.%2028(3)(e)."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-19T23:41:27.15497+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"unknown","description":" You have the right to lodge a complaint with a data protection authority. As Anana is established outside the EU/EEA, EU/EEA data subjects may lodge a complaint with the supervisory authority of the EU/EEA member state where they reside, where they work, or where the alleged infringement occurred. You may also contact our EU representative (Section 2).","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"8df01c2abdd5082967f7746351a01744cb2eda2b5f803804a9b804efa9beb02e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://getanana.com/privacy-policy"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 11 (Supervisory Authority)"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://getanana.com/privacy-policy#:~:text=%20You%20have%20the,EU%20representative%20(Section%202)."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-19T23:41:27.15497+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"unknown","description":" Anana is a B2B service intended for hospitality businesses and their staff. It is not directed at children, and we do not knowingly collect personal data from children. Guests who interact with a venue's chat, SMS, voice, or email channel do so under that venue's own policies; venues are responsible for any age-specific obligations relating to their guests.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"8df01c2abdd5082967f7746351a01744cb2eda2b5f803804a9b804efa9beb02e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://getanana.com/privacy-policy"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 12 (Children)"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://getanana.com/privacy-policy#:~:text=%20Anana%20is%20a,relating%20to%20their%20guests."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-19T23:41:27.15497+00:00"}]},{"@type":"PropertyValue","name":"privacy_data_use","value":"unknown","description":" We update this Policy when our processing changes. Material changes will be communicated to operator users via the application or by email. The “Last updated” date at the top reflects the most recent revision.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"8df01c2abdd5082967f7746351a01744cb2eda2b5f803804a9b804efa9beb02e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://getanana.com/privacy-policy"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 13 (Changes to this Policy)"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://getanana.com/privacy-policy#:~:text=%20We%20update%20this,the%20most%20recent%20revision."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-19T23:41:27.15497+00:00"}]},{"@type":"PropertyValue","name":"data_retention","value":"low","description":" Operator user account and authentication data For the life of the customer contract; deleted within 1 year of contract termination. \n Voice recordings Retained per the venue's configuration and not used for model training; Anana-held copies are deleted on the venue's instruction or within 1 year of contract termination. \n Voice transcripts Retained per the venue's configuration as part of the conversation record; deleted with the associated tenant data on the venue's instruction or within 1 year of contract termination. \n Inbound messages (chat, SMS, email) Retained per the venue's configuration as part of the conversation record; deleted on the venue's instruction or within 1 year of contract termination. \n Booking/guest profile data synced from PMS/CRM Controlled by the venue; Anana deletes on the venue's instruction or contract end. \n Embeddings in pgvector Tied to the source artifact; deleted when the source is deleted. \n Audit logs (artifact create / version / send) 2 years. \n Server logs / WAF logs Application production logs 30 days; AWS CloudFront/WAF edge logs per their configuration. \n Database backups Daily backups retained 7 days on a rolling cycle. \n Business contacts (CRM) Until objection or 2 years of inactivity. \n Accounting and tax records As required by applicable law (typically 7–10 years). ","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"8df01c2abdd5082967f7746351a01744cb2eda2b5f803804a9b804efa9beb02e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://getanana.com/privacy-policy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “Data category Retention”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://getanana.com/privacy-policy#:~:text=%20Operator%20user%20account,(typically%207%E2%80%9310%20years).%20"},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-19T23:41:27.15497+00:00"}]},{"@type":"PropertyValue","name":"data_retention","value":"unknown","description":" After the retention period, data is deleted or irreversibly anonymized. Retention of guest data (recordings, transcripts, messages, bookings) is ultimately set by the venue as controller; the periods above are Anana's own outer limits.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"8df01c2abdd5082967f7746351a01744cb2eda2b5f803804a9b804efa9beb02e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://getanana.com/privacy-policy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “Data category Retention”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://getanana.com/privacy-policy#:~:text=%20After%20the%20retention,Anana%26%23x27%3Bs%20own%20outer%20limits."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-19T23:41:27.15497+00:00"}]},{"@type":"PropertyValue","name":"indemnity_liability","value":"unknown","description":" Provider Covered Claims: Any action, proceeding, or claim that the Cloud Service, when used by Customer according to the terms of the Agreement, violates, misappropriates, or otherwise infringes upon anyone else's intellectual property or other proprietary rights.\n Customer Covered Claims: Any action, proceeding, or claim that (1) the Customer Content, when used according to the terms of the Agreement, violates, misappropriates, or otherwise infringes upon anyone else's intellectual property or other proprietary rights; or (2) results from Customer's breach or alleged breach of Section 2.1 (Restrictions on Customer).","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"ddbaeef06e04dac2d5e8de0ec3d03748289359e6b97c3f82dde6747a832de984"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://getanana.com/terms"},{"@type":"PropertyValue","name":"structural_citation","value":"Terms of Service › “Covered Claims”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://getanana.com/terms#:~:text=%20Provider%20Covered%20Claims%3A,2.1%20(Restrictions%20on%20Customer)."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-19T23:41:27.90883+00:00"}]},{"@type":"PropertyValue","name":"subprocessors_data_sharing","value":"unknown","description":" For personal data of end guests and leads (people who chat with, call, SMS, or email a venue powered by Anana, or whose booking/profile data is synced from a Property Management System or CRM), our hospitality customer is the controller and Anana acts as their processor under a Data Processing Agreement. Where this policy describes guest data, it does so in our capacity as processor and for transparency only; the venue's own privacy notice governs that processing.\n Contact: privacy@getanana.com \n We have not appointed a Data Protection Officer; Art. 37 GDPR does not require us to do so. Privacy questions and rights requests are handled at privacy@getanana.com.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"8df01c2abdd5082967f7746351a01744cb2eda2b5f803804a9b804efa9beb02e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://getanana.com/privacy-policy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “Anana's own business contacts (prospects, customers, suppliers)”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://getanana.com/privacy-policy#:~:text=%20For%20personal%20data,are%20handled%20at%20privacy%40getanana.com."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-19T23:41:27.15497+00:00"}]},{"@type":"PropertyValue","name":"subprocessors_data_sharing","value":"unknown","description":" We share personal data only with vetted sub-processors under a DPA. An up-to-date list is available on request at privacy@getanana.com.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"8df01c2abdd5082967f7746351a01744cb2eda2b5f803804a9b804efa9beb02e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://getanana.com/privacy-policy"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 7 (Recipients and Sub-processors)"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://getanana.com/privacy-policy#:~:text=%20We%20share%20personal,on%20request%20at%20privacy%40getanana.com."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-19T23:41:27.15497+00:00"}]},{"@type":"PropertyValue","name":"subprocessors_data_sharing","value":"unknown","description":" When a venue connects Anana to its own systems (e.g., WebHotelier, Fidelio on-prem, Practice Better, Kanika, Genesys Cloud, HubSpot, Composio), the venue is the controller of that integration and the integration provider is the venue's processor, not ours. Anana acts as the venue's agent only.\n Other recipients include our professional advisors (legal, accounting) and competent authorities where required by law.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"8df01c2abdd5082967f7746351a01744cb2eda2b5f803804a9b804efa9beb02e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://getanana.com/privacy-policy"},{"@type":"PropertyValue","name":"structural_citation","value":"Privacy Policy › “Tenant-authenticated integrations (not Anana sub-processors)”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://getanana.com/privacy-policy#:~:text=%20When%20a%20venue,where%20required%20by%20law."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-19T23:41:27.15497+00:00"}]},{"@type":"PropertyValue","name":"audit_rights_dpa_residency","value":"unknown","description":" Anana is established in the United States. In accordance with Art. 27 GDPR, Anana has designated the following EU representative for matters relating to the processing of personal data of data subjects in the EU/EEA:\n Probo Inc, 7 rue Commines, 75003 Paris, France — privacy@probo.com\n EU/EEA data subjects and supervisory authorities may contact our EU representative directly on all issues related to processing for the purpose of ensuring compliance with the GDPR.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"8df01c2abdd5082967f7746351a01744cb2eda2b5f803804a9b804efa9beb02e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://getanana.com/privacy-policy"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 2 (EU Representative (Art. 27 GDPR))"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://getanana.com/privacy-policy#:~:text=%20Anana%20is%20established,compliance%20with%20the%20GDPR."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-19T23:41:27.15497+00:00"}]},{"@type":"PropertyValue","name":"audit_rights_dpa_residency","value":"low","description":" Anana is established in the United States and our production data is stored in AWS eu-central-1 (Frankfurt). Several sub-processors listed in Section 7 process data in the United States or other third countries (notably OpenAI, OpenRouter, Perplexity, Google, Sentry, Vercel, Stytch, Twilio, Resend, AssemblyAI, Deepgram, Firecrawl, Reducto).\n For transfers of EU/EEA personal data to the United States or other third countries we rely on:\n Standard Contractual Clauses (SCCs) under Commission Implementing Decision (EU) 2021/914, plus supplementary measures where required\n EU–U.S. Data Privacy Framework where the recipient is certified under it\n Transfer Impact Assessments documenting the level of protection and any supplementary measures\n A copy of the SCCs and our TIAs is available on request at privacy@getanana.com.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"8df01c2abdd5082967f7746351a01744cb2eda2b5f803804a9b804efa9beb02e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://getanana.com/privacy-policy"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 8 (International Transfers)"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://getanana.com/privacy-policy#:~:text=%20Anana%20is%20established,on%20request%20at%20privacy%40getanana.com."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-19T23:41:27.15497+00:00"}]},{"@type":"PropertyValue","name":"audit_rights_dpa_residency","value":"low","description":" We apply the following measures:\n Encryption in transit: TLS everywhere; HTTPS-only externally.\n Encryption at rest: AES-256 via AWS KMS for AWS RDS Postgres 17.4 (including pgvector) and AWS S3 (recordings, attachments, exports). Application-level AES-256-GCM for integration credentials.\n Multi-tenant isolation: row-level tenant filter enforced in the application data layer.\n Network protection: AWS WAF with managed rules and rate limiting (2000 requests per 5 minutes).\n Webhook integrity: HMAC verification on inbound webhooks where the provider supports it.\n Access controls: multi-factor authentication, role-based access control, least-privilege provisioning.\n Audit logging: artifact lifecycle events (create, version bump, send) are recorded.\n Transient stores: Redis is used for sessions and queues; data there is short-lived.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"8df01c2abdd5082967f7746351a01744cb2eda2b5f803804a9b804efa9beb02e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://getanana.com/privacy-policy"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 9 (Security)"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://getanana.com/privacy-policy#:~:text=%20We%20apply%20the,data%20there%20is%20short-lived."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-19T23:41:27.15497+00:00"}]},{"@type":"PropertyValue","name":"audit_rights_dpa_residency","value":"unknown","description":" Anana: privacy queries and rights requests: privacy@getanana.com \n EU representative: Probo Inc, 7 rue Commines, 75003 Paris, France — privacy@probo.com","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"8df01c2abdd5082967f7746351a01744cb2eda2b5f803804a9b804efa9beb02e"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://getanana.com/privacy-policy"},{"@type":"PropertyValue","name":"structural_citation","value":"§ 14 (Contact)"},{"@type":"PropertyValue","name":"citation_basis","value":"section_number"},{"@type":"PropertyValue","name":"deep_link","value":"https://getanana.com/privacy-policy#:~:text=%20Anana%3A%20privacy%20queries,Paris%2C%20France%20%E2%80%94%20privacy%40probo.com"},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-19T23:41:27.15497+00:00"}]},{"@type":"PropertyValue","name":"governing_law_disputes","value":"unknown","description":" This Agreement is between OMOC INC (\"Provider\") and the company or person accessing or using the Product (\"Customer\"). It consists of: (1) the Order Form below and (2) the Framework Terms defined below.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"ddbaeef06e04dac2d5e8de0ec3d03748289359e6b97c3f82dde6747a832de984"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://getanana.com/terms"},{"@type":"PropertyValue","name":"structural_citation","value":"Terms of Service › “Overview”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://getanana.com/terms#:~:text=%20This%20Agreement%20is,Framework%20Terms%20defined%20below."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-19T23:41:27.90883+00:00"}]},{"@type":"PropertyValue","name":"governing_law_disputes","value":"unknown","description":" If you are accessing or using the Product on behalf of your company, you represent that you are authorized to accept this Agreement on behalf of your company. By signing up, accessing, or using the Product, Customer accepts this Agreement.\n If you signed a separate Cover Page to access the Product with the same account and that agreement has not ended, that separate Cover Page applies instead of these terms.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"ddbaeef06e04dac2d5e8de0ec3d03748289359e6b97c3f82dde6747a832de984"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://getanana.com/terms"},{"@type":"PropertyValue","name":"structural_citation","value":"Terms of Service › “Acceptance”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://getanana.com/terms#:~:text=%20If%20you%20are,instead%20of%20these%20terms."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-19T23:41:27.90883+00:00"}]},{"@type":"PropertyValue","name":"governing_law_disputes","value":"unknown","description":" This Order Form incorporates and is governed by the Framework Terms that are made up of the Key Terms below and the Common Paper Cloud Service Agreement Standard Terms Version 2.1 , which are incorporated by reference. Any modifications to the Standard Terms made in the Cover Page will control over conflicts with the Standard Terms. Capitalized words have the meanings given in the Cover Page or the Standard Terms.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"ddbaeef06e04dac2d5e8de0ec3d03748289359e6b97c3f82dde6747a832de984"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://getanana.com/terms"},{"@type":"PropertyValue","name":"structural_citation","value":"Terms of Service › “Framework Terms”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://getanana.com/terms#:~:text=%20This%20Order%20Form,or%20the%20Standard%20Terms."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-19T23:41:27.90883+00:00"}]},{"@type":"PropertyValue","name":"governing_law_disputes","value":"unknown","description":" Subscription Period: 1 month(s). We offer custom pricing based on your business's specific requirements, including call volume, number of AI agents, and features needed. Contact us for a tailored quote that fits your budget and operational needs.\n Payment Process: Automatic payment. Customer authorizes Provider to bill and charge Customer's payment method on file monthly for immediate payment or deduction without further approval.\n Non-Renewal Notice Period: At least 30 days before the end of the current Subscription Period.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"ddbaeef06e04dac2d5e8de0ec3d03748289359e6b97c3f82dde6747a832de984"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://getanana.com/terms"},{"@type":"PropertyValue","name":"structural_citation","value":"Terms of Service › “Order Date: The Effective Date”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://getanana.com/terms#:~:text=%20Subscription%20Period%3A%201,the%20current%20Subscription%20Period."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-19T23:41:27.90883+00:00"}]},{"@type":"PropertyValue","name":"governing_law_disputes","value":"unknown","description":" Customer: The company or person who accesses or uses the Product. If the person accepting this Agreement is doing so on behalf of a company, all use of the word \"Customer\" in the Agreement will mean that company.\n Provider: OMOC INC.\n Effective Date: The date Customer first accepts this Agreement.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"ddbaeef06e04dac2d5e8de0ec3d03748289359e6b97c3f82dde6747a832de984"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://getanana.com/terms"},{"@type":"PropertyValue","name":"structural_citation","value":"Terms of Service › “Key Terms”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://getanana.com/terms#:~:text=%20Customer%3A%20The%20company,first%20accepts%20this%20Agreement."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-19T23:41:27.90883+00:00"}]},{"@type":"PropertyValue","name":"governing_law_disputes","value":"unknown","description":" General Cap Amount: The fees paid or payable by Customer to Provider in the 12-month period immediately before the claim.","additionalProperty":[{"@type":"PropertyValue","name":"confidence","value":"high"},{"@type":"PropertyValue","name":"snapshot_sha256","value":"ddbaeef06e04dac2d5e8de0ec3d03748289359e6b97c3f82dde6747a832de984"},{"@type":"PropertyValue","name":"wayback_url","value":""},{"@type":"PropertyValue","name":"source_url","value":"https://getanana.com/terms"},{"@type":"PropertyValue","name":"structural_citation","value":"Terms of Service › “Liability Cap”"},{"@type":"PropertyValue","name":"citation_basis","value":"heading_path"},{"@type":"PropertyValue","name":"deep_link","value":"https://getanana.com/terms#:~:text=%20General%20Cap%20Amount%3A,immediately%20before%20the%20claim."},{"@type":"PropertyValue","name":"retrieved_at","value":"2026-07-19T23:41:27.90883+00:00"}]}]}}