Privacy Policy

1. Information We Collect

Information You Provide

• Phone numbers you enter to place calls
• Template content, names, and conversation parameters you configure
• Custom templates stored locally in your browser

Automatically Collected Information

• IP addresses for rate limiting and security purposes
• Usage logs (call attempts, timestamps, success/failure status)
• Browser and device information

2. How We Use Your Information

We use the information we collect to:

• Provide and operate the Service (place calls via third-party APIs)
• Enforce rate limits and prevent abuse
• Detect and prevent fraud, harassment, and illegal activity
• Comply with legal obligations and respond to legal requests
• Improve and maintain the Service

3. Information Sharing & Third Parties

We share information with the following third parties:

Service Providers

• Vapi.ai - Voice call infrastructure (phone numbers, call audio, conversation data)
• OpenAI - AI language model processing (conversation content, prompts)
• ElevenLabs - Voice synthesis (text-to-speech conversion)

These providers have their own privacy policies and data retention practices. We are not responsible for their data handling.

Legal Compliance

We may disclose information to:

• Comply with legal obligations, court orders, or subpoenas
• Protect our rights, property, or safety
• Investigate fraud, abuse, or violations of our Terms of Service
• Cooperate with law enforcement investigations

4. Call Recordings

If you enable call recording, audio recordings are stored by Vapi.ai according to their retention policies. You are solely responsible for obtaining proper consent before recording calls.

5. Data Retention

• Rate limiting data: Stored in memory for 1 hour, then automatically deleted
• Audit logs: Retained for security and compliance purposes (implementation dependent)
• Call recordings: Retained by Vapi.ai per their policies
• Custom templates: Stored locally in your browser only

6. Your Rights & Choices

California Residents (CCPA)

California residents have the right to:

• Know what personal information we collect and how we use it
• Request deletion of your personal information
• Opt-out of the sale of personal information (we do not sell personal information)

European Users (GDPR)

EU/EEA users have the right to:

• Access, correct, or delete your personal data
• Object to processing or request data portability
• Withdraw consent at any time
• Lodge a complaint with a supervisory authority

Note: This Service is primarily intended for US users. If you are located in the EU/EEA, please be aware that your data will be transferred to and processed in the United States.

7. Security

We implement security measures including:

• HTTPS encryption for all data transmission
• Rate limiting to prevent abuse
• Content moderation to detect prohibited activity
• Audit logging of security events
• Secure storage of API credentials

8. Children's Privacy

The Service is not intended for users under 18 years of age. We do not knowingly collect personal information from children under 18. If we learn we have collected such information, we will delete it immediately.

9. Cookies & Tracking

We use minimal tracking. Custom templates are stored in your browser's localStorage only. We do not use third-party advertising cookies.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last Updated" date will reflect any changes. Continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact Us

For privacy-related questions or to exercise your rights, please contact us at the support channel provided in the application.