For HeySanta / AI Santa Call
Company: DSA1990 ApS
Date: 28 November 2025
1. Introduction
This Privacy Policy explains how DSA1990 ApS (“we,” “us,” “our”) collects, uses, and protects personal data in connection with the HeySanta service.
We comply with applicable data protection regulations, including the GDPR.
2. Information We Collect
a) Contact and Payment Information
• Name
• Email address
• Payment details (processed by Stripe – we do not store card data)
b) Call Information
• Phone number to deliver the Santa call
• Any selected messages or preferences
c) Technical Data
• IP address
• Browser and device information
• Log files and error statistics
• Telecommunication data related to the call (status, duration, etc.)
d) AI Interaction Data
Audio and voice processing are handled through secure providers such as ElevenLabs and Twilio.
Data may be used for:
• Quality improvement
• Troubleshooting
• Safety monitoring
We do not sell children’s voices, data, or recordings.
3. How We Use the Information
We use personal data to:
• Deliver the Santa call
• Process payment
• Improve the service
• Prevent misuse or fraud
• Provide customer support
4. Legal Basis (GDPR)
We process data under the following bases:
• Contract (to deliver the service)
• Legitimate interest (analytics, stability, security)
• Consent (for marketing, only if explicitly given)
5. Data Sharing
We only share personal data with trusted service partners, including:
• Stripe (payment processing)
• Twilio (telephony services)
• ElevenLabs (AI voice generation)
• Hosting and server providers
We do not sell personal data.
6. Children’s Privacy
The service is purchased and controlled by adults.
We only collect the minimal data necessary to deliver the call.
7. Data Retention and Deletion
Data is retained only for as long as necessary to:
• Deliver the service
• Maintain operational logs
• Fulfill legal obligations
Audio data may be automatically deleted after a set retention period.
8. Data Security
We use industry-standard security measures.
However, no digital transmission or storage can be guaranteed to be 100% secure.
9. Your Rights
You may request:
• Access to your data
• Correction
• Deletion
• Restriction of processing
• Data portability
To exercise your rights, contact us at [email protected].
10. International Transfers
Data may be processed outside the EU.
We ensure protection through GDPR-compliant agreements such as Standard Contractual Clauses (SCCs).
11. Changes
We may update this Privacy Policy at any time. The latest version will always be available with an updated date.
12. Contact
For privacy-related questions, contact:
[email protected]