Privacy Policy

1. Information We Collect

We collect information you provide directly when you create an account or use our service:

• Account information — your name, email address, and business details provided during signup or onboarding.
• Business information — your business name, address, phone number, and any custom instructions you provide to configure your AI receptionist.
• Call data — recordings, transcripts, duration, and metadata of calls handled by your AI receptionist.
• Lead data — caller names, phone numbers, and information captured during calls.
• Payment information — billing details processed securely through Stripe. We do not store card numbers.
• Usage data — minutes used, feature interactions, and log data for service operation and improvement.

2. How We Use Your Information

We use the information we collect to:

• Operate, maintain, and improve the Inboundly service
• Process calls and generate leads on your behalf
• Send you service notifications, billing updates, and lead alerts via SMS or email
• Provide customer support
• Detect and prevent fraud or abuse
• Comply with legal obligations

We do not sell your personal data or your callers' data to third parties.

3. Call Recordings and Transcripts

Calls handled by your AI receptionist may be recorded and transcribed to generate lead summaries and improve service quality. By using Inboundly, you agree to comply with all applicable laws regarding call recording disclosure in your jurisdiction. You are responsible for notifying callers that their call may be recorded, where required by law.

4. Third-Party Services

We use trusted third-party providers to operate the service:

• Vapi — AI voice infrastructure and call handling
• Supabase — database and authentication
• Stripe — payment processing
• Twilio — phone number provisioning

Each provider operates under their own privacy policy and data processing agreements.

5. Data Retention

We retain your account data for as long as your account is active. Call recordings and transcripts are retained for 90 days by default. You may request deletion of your data at any time by contacting us. Upon account termination, we delete your data within 30 days.

6. Security

We use industry-standard security measures including encryption in transit (TLS) and at rest. Access to your data is restricted to personnel who need it to operate the service. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

7. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Object to or restrict certain processing
• Export your data in a portable format

To exercise any of these rights, contact us at support@inboundly.app.

8. Cookies

We use essential cookies for authentication and session management. We do not use tracking or advertising cookies.

9. Children's Privacy

Inboundly is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with their information, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the dashboard. Continued use of the service after changes constitutes acceptance of the updated policy.

11. Contact

Questions about this policy? Contact us at support@inboundly.app.