Privacy Policy

Last updated: 30 September 2026

1. Introduction

This Privacy Policy explains how Anam AI Ltd (“Anam”, “we”, “our” or “us”) handles personal information when you visit anam.ai, use a public Anam demo, create or administer an Anam Lab account, contact us, or otherwise interact with us directly. In those contexts, Anam generally determines the purposes and means of processing.

Customer product sessions are different. Where a business customer uses Anam to provide an avatar experience to its own users, the customer generally determines the purpose of the session and acts as controller, while Anam processes customer personal data on the customer’s instructions under the applicable agreement and Data Processing Addendum. This Privacy Policy does not replace those customer-specific terms.

2. Information We Collect

To provide you with our services and improve your experience on our Site, we collect various types of information. This information broadly falls into two categories: information you provide to us directly, and information we collect automatically.

2.1 Information You Provide to Us

When you create or administer an account, request a demo, contact support or communicate with us, you may provide information such as your name, work email address, organization, account credentials, billing details, feedback and correspondence. Passwords are stored using appropriate security protections rather than in plain text.

If you use a public Anam demo or run a non-ZDR product session, the service may process conversation content and session information such as audio, transcripts, model prompts and responses, timing, diagnostics and—where recording is enabled—a video recording. We do not store webcam video input as a separate source file. Customer product-session data is processed according to the customer’s configuration and instructions; public demo data is handled by Anam for operating, securing and improving the demo. Customer session content is not used to train Anam’s CARA models or third-party foundation models unless separately agreed in writing.

We may also collect any feedback you provide or store records of correspondence if you contact our customer support team.

2.2 Information We Collect Automatically

When you visit our Site, certain information is collected automatically. This includes log data, which may comprise your IP address, browser type, operating system, referring URLs, and actions taken on our Site. We also collect information about your device, such as device type, unique device identifiers, and mobile network information.

We may collect general location information, such as the city or country you’re accessing our Site from, based on your IP address. This helps us provide localized content and comply with regional regulations.

Like many websites, we use cookies and similar technologies to collect information about how you use our Site. These technologies help us analyze usage patterns, remember your preferences, and measure our advertising. Section 11 explains which technologies we use, how the defaults depend on your location, and how to change your choices.

3. How We Use Your Information

We use personal information to operate the Site, public demos, Lab accounts and support services; authenticate users; process transactions; communicate about the service; maintain security; diagnose faults; meet legal obligations; and improve product usability and reliability. For customer product sessions, we process customer personal data only as needed to provide the configured service and follow the customer’s documented instructions.

We may analyze website, account, public-demo and operational usage information to understand performance and improve the service. We do not use customer session transcripts or recordings to train CARA or third-party foundation models. Where a customer has enabled ZDR, customer session content is not persisted after the session.

Your information also enables us to communicate with you effectively. This includes sending important updates about our services, responding to your inquiries or support requests, and, with your consent, sending promotional materials that we think may interest you.

Ensuring the security and integrity of our Site and services is paramount. We use the information we collect to detect, prevent, and address technical issues, fraud, or other potentially illegal activities. This helps us maintain a safe and reliable environment for all our users.

4. How We Share Your Information

While we consider your information to be a vital part of our relationship with you, there are certain circumstances under which we may share your information with third parties. We want to assure you that we do not sell your personal information to third parties.

We use service providers to operate our business, including providers for infrastructure, storage, authentication, analytics, communications, payments and support. Depending on the customer’s configuration, a product session may also send the data needed to provide the service to speech-recognition, language-model, text-to-speech or other integration providers selected by Anam or the customer. Our current subprocessors and supporting compliance information are available in the Anam Trust Center. A customer that connects or selects its own third-party provider is responsible for reviewing that provider’s terms and configuration.

There may be instances where we are required to share your information for legal reasons. This could be in response to a valid legal process, such as a court order, subpoena, or search warrant. We may also share information if we believe it’s necessary to comply with applicable laws, to protect our rights and property, to prevent fraud or other illegal activities, or to protect the personal safety of our users or the public.

In the event that our company undergoes a business transition, such as a merger, acquisition, or sale of all or part of its assets, your personal information may be among the assets transferred. We will notify you of any such change in ownership or control of your personal information.

5. Your Data Protection Rights

We believe in empowering our users with control over their personal information. Depending on your location, you may have certain rights under applicable data protection laws. These rights may include:

The right to access: You can request copies of your personal information that we hold. We may charge a small fee for this service.

The right to rectification: If you believe any information we hold about you is inaccurate or incomplete, you have the right to ask us to correct or complete it.

The right to erasure: You have the right to ask us to delete your personal information from our records at any time.

The right to restrict processing: You may have the right to request that we limit the way we use your personal information.

The right to data portability: You can request that we transfer your data to another organization or directly to you, in a structured, commonly used, and machine-readable format.

The right to object: You have the right to object to our processing of your personal information in certain circumstances.

If you wish to exercise any of these rights, please contact us using the information provided in the “Contact Us” section of this policy. We will respond to your request within the timeframe required by applicable law. Please note that we may need to verify your identity before processing your request.

6. Data Retention

We retain website, account, support, billing and business records for as long as reasonably necessary for the purposes described in this Policy, including providing the service, meeting legal and accounting obligations, resolving disputes, preventing fraud and enforcing agreements. Retention depends on the type of information and the applicable legal or operational need.

For product sessions, retention depends on configuration. With ZDR enabled, Anam does not persist customer session content after the session, although operational metadata needed for billing, service delivery and security may remain. For non-ZDR sessions, recordings are retained for up to 30 days, while session reports—including transcripts, per-turn analytics, summaries and generated insights—remain available until deleted by the customer. Customers can delete customer information for an ended session using DELETE /v1/sessions/{id}. See our privacy documentation for details.

7. Security

Protecting your personal information is of utmost importance to us. We implement a variety of security measures to maintain the safety of your personal information when you enter, submit, or access your personal information. These measures include encryption of sensitive data, regular security audits, and strict access controls for our staff.

However, it’s important to understand that no method of transmission over the Internet, or method of electronic storage, is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security. We encourage you to take steps to protect your personal information, such as choosing a strong password and keeping it confidential.

8. International Data Transfers

Website, Lab, account, support, billing and administrative information may be processed in the countries where Anam and its service providers operate. Customer-facing production inference and media are hosted on CoreWeave in Spain/EU and US East. Enterprise customers can select an EU or US session-engine region: strict keeps engine processing in the selected region and returns an error rather than failing over, while preferred may fail over. See the session-region documentation. Engine-region selection is not blanket residency for Lab assets, account data, support, billing or customer-selected third-party providers. Contractual Data Residency is available only where expressly agreed and requires ZDR.

Where personal data is transferred internationally, we use safeguards required by applicable law, which may include adequacy decisions, the European Commission’s Standard Contractual Clauses, the UK International Data Transfer Addendum or other lawful transfer mechanisms.

9. Children’s Privacy

Our Site and services are not intended for children under the age of 16. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us. If we become aware that we have collected personal information from children without verification of parental consent, we take steps to remove that information from our servers.

10. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the “Last Updated” date at the top of this policy. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

If we make material changes to this policy, we will notify you here, by email, or through a notice on our home page, providing you the opportunity to review the changes before they become effective.

11. Cookies and Similar Technologies

This section is our cookie policy. It covers anam.ai, including our documentation and cookbook, and Anam Lab at lab.anam.ai. Besides cookies, we use similar technologies such as local storage, pixels and scripts that read information from your browser. We refer to all of these as “cookies”.

11.1 The cookies we use

Strictly necessary. These run the Site, keep you signed in, protect against abuse and remember your choices. They are always on. They include anam_cookie_consent, which stores your cookie choice for up to 180 days, and anam_consent_region, which stores for up to one day which of the settings in section 11.2 applies where you are. Neither contains an identifier.

Analytics. These tell us how people find and use the Site and Anam Lab so we can improve them. For example, they show which pages are visited, which website referred you, and whether a visit led to a sign-up. Providers: PostHog, Google Analytics (loaded through Google Tag Manager), HubSpot, Ahrefs and Fibbler.

Advertising. These measure and improve our advertising. They record which campaign or ad brought you to us, stored for up to 30 days in anam_attribution. They also let advertising platforms measure sign-ups from our ads, and analyse your browsing on our Site so we can show you ads on other platforms that match your interests. Providers: Google Ads, Meta, LinkedIn, Reddit, X and Vector.

Session recording. This records how you use a page (clicks, scrolling and page changes) so we can find and fix problems. We use session recording only after you select Accept, wherever you are.

When you are signed in to Anam Lab, we record product usage linked to your account so that we can operate, support and improve the service. This happens whatever your cookie choice, and it doesn’t use advertising cookies. It uses session recording only if you have selected Accept.

11.2 How your location affects the defaults

We apply the approach to cookies that the law requires or allows where you are. We work out your location from the country, and for Canada the province, linked to your IP address when you visit. We don’t store your IP address for this purpose.

European Economic Area, Quebec, and every location not listed below. Analytics, advertising and session recording stay off until you select Accept. Until then, and if you select Reject all, we use only reduced, cookieless audience measurement. This means we count page views using the page address (with personal details in the address removed), the domain of the website that referred you and any campaign tags. We set no cookies, store no identifiers and record no sessions.

United States, Canada (outside Quebec), India, Switzerland, Australia, Japan and Pakistan. Analytics and advertising are on by default, and you can turn them off at any time by selecting Reject all. If your browser sends a Global Privacy Control (GPC) signal, we treat it as a request to turn off advertising.

Brazil, Singapore and South Africa. Analytics is on by default, and you can turn it off at any time by selecting Reject all. Advertising stays off unless you select Accept.

United Kingdom. We use our own analytics by default to count visits and understand how the Site and Anam Lab are used, so that we can improve them. PostHog provides this analytics for us as our processor. We don’t link it with other information about you or use it for advertising. You can turn it off at any time by selecting Reject all, and we then stop all analytics measurement, including cookieless measurement. Google Analytics and our other analytics tools, advertising and session recording stay off unless you select Accept.

Session recording stays off everywhere unless you select Accept. We review these settings as laws change, and we will update this section when the list of locations changes.

11.3 Your choices

Cookie banner. Select Accept all or Reject all. Your choice applies across anam.ai and Anam Lab.

Changing your mind. Delete our cookies for anam.ai in your browser settings and the banner will ask again. If you need help, contact support@anam.ai.

Global Privacy Control. Where section 11.2 says so, we honour GPC as a request to turn off advertising.

Objecting. You can object to our use of analytics or advertising cookies at any time by selecting Reject all or by emailing support@anam.ai. If you object, we stop, except for the reduced, cookieless measurement described in section 11.2. In the United Kingdom we stop that as well.

Some US state privacy laws treat advertising cookies as “sharing” personal information for cross-context behavioural advertising. You can opt out of that sharing by selecting Reject all or by enabling GPC. We do not sell your personal information.

11.4 Legal basis

Where the law requires consent for cookies that are not strictly necessary, including in the European Economic Area, and in the United Kingdom apart from the analytics described in section 11.2, we rely on your consent. You can withdraw it at any time.

Where analytics or advertising is on by default (see section 11.2), we rely on our legitimate interests, or the equivalent basis available where you are. Those interests are understanding and improving our website and services and measuring our marketing. You can object at any time as described in section 11.3.

United Kingdom. For the analytics described in section 11.2, we rely on the exception for statistical purposes in the Privacy and Electronic Communications (EC Directive) Regulations 2003, as amended by the Data (Use and Access) Act 2025, and on our legitimate interests under the UK GDPR. You can object at any time by selecting Reject all or by emailing support@anam.ai.

Singapore. For analytics, we rely on the legitimate interests exception in the Personal Data Protection Act 2012. We have assessed that our interest in understanding and improving our Site outweighs any adverse effect on you, and we keep a record of that assessment. Our contact for questions about this is support@anam.ai.

Brazil. For analytics, we rely on legitimate interests under the Lei Geral de Proteção de Dados (LGPD).

South Africa. For analytics, we rely on legitimate interests under section 11(1)(f) of the Protection of Personal Information Act (POPIA).

11.5 Where cookie data is processed

Our analytics and advertising providers may process cookie data in the United States, the European Union and the United Kingdom. Advertising platforms may also process it in other countries where they operate. Section 8 describes the safeguards we use for international transfers.

11.6 Additional information for South Africa

You have the right to object to our processing of your personal information, and the right to lodge a complaint with the Information Regulator:

Email: POPIAComplaints@inforegulator.org.za

Website: https://inforegulator.org.za

Address: Woodmead North Office Park, 54 Maxwell Drive, Woodmead, Johannesburg, 2191

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, we encourage you to contact us. We are committed to addressing your inquiries and resolving any potential issues in a timely and effective manner.

You can reach us at:

Email: support@anam.ai

We will respond to your request within the timeframe required by applicable law and make every effort to resolve your concerns.