Privacy Policy

1. Data we collect

From you, our customer:

• Account information: business name, email, password (stored as a salted hash, never in plain text)
• Billing information: handled directly by Stripe — we store a Stripe customer/payment method reference, not raw card numbers
• Configuration data: agent prompts, voice selections, phone numbers, knowledge base content, integration webhook URLs, and similar settings you create

From callers, when your agents handle a call:

• Call audio (processed in real time and, depending on your configuration, may be transcribed)
• Call transcripts and AI-generated summaries, sentiment, and outcome labels
• Phone numbers of callers and call metadata (time, duration, direction)

2. How we use it

• To operate the Service: route calls, run your configured agents, synthesize and transcribe speech, bill usage
• To show you call history, transcripts, analytics, and alerts inside your dashboard
• To detect abuse and enforce our Terms of Service
• To communicate with you about your account (e.g. billing, security, password resets)

We don't sell personal data, and we don't use call content to train models outside the scope needed to run the Service.

3. Who we share data with

Running a voice AI platform means call data passes through a small number of infrastructure providers ("subprocessors") in order to actually place calls and generate responses:

• Telephony carriage — connects and streams live call audio
• Speech-to-text and text-to-speech providers — transcribe caller audio and synthesize the agent's voice
• Language model providers — generate what the agent says and decides during a call
• Stripe — processes payments; we never see or store full card numbers

Each of these providers processes call data only as needed to deliver their part of the Service, under their own data-processing terms. We don't share your data with anyone else for their own marketing purposes.

4. Call recording notice

If you're a caller: calls to or from a business using Drop AI may be recorded, transcribed, and handled by an AI voice agent. The business you're speaking with is responsible for giving you any notice or obtaining any consent required by law before the call proceeds — Drop AI is the platform they use, not the business itself. If you have questions about a specific call, please contact the business you called or that called you.

5. Data retention

We retain call recordings, transcripts, and account data for as long as your account is active, so you can access call history and analytics. If you close your account, we delete or anonymize this data within a reasonable period, except where we're required to keep it longer (for example, billing records for tax purposes).

6. Security

We use encryption in transit, hashed credentials, and tenant-scoped access controls to protect data. No system is perfectly secure, and we can't guarantee absolute security, but we take reasonable steps appropriate to the sensitivity of the data involved.

7. Your rights

Depending on where you're located, you may have rights to access, correct, export, or delete your personal data. To make a request, contact us using the details below — we'll respond within a reasonable timeframe.

8. Children's privacy

The Service is intended for business use and isn't directed at children. We don't knowingly collect personal data from children.

9. Changes to this policy

We may update this Privacy Policy from time to time. We'll post the updated version here with a new "Last updated" date.

10. Contact

Questions about this policy, or a data request? Reach us at support@dropai.ca.