Privacy Policy

• What we collect: your business details, and the calls your receptionist handles — caller number, transcript, recording, and an AI summary.
• Isolation: every account's data is logically isolated (row-level security). One customer can never access another's.
• Retention: transcripts & recordings are auto-purged after your retention window (default 365 days); call metadata is kept for your analytics.
• Your rights (GDPR/CCPA): request a full data export or deletion at any time via your API or by emailing us.
• Sub-processors: we use Vapi (voice), Stripe (billing), Supabase (database), Postmark (email), and GoHighLevel (CRM). Secrets are encrypted at rest.
• We never sell your data.

Data requests + questions: hello@heylainey.com.