Privacy Policy

1. Introduction

Yapsolutely, Inc. ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Yapsolutely platform ("the Platform"), including our website, dashboard, APIs, and voice agent services.

2. Information We Collect

Account Information

When you create an account, we collect your name, email address, password (hashed), and optionally your organization name and role. If you sign in via Google OAuth, we receive your name, email, and profile picture from Google.

Agent & Configuration Data

We store the agent configurations you create, including system prompts, voice model selections, first messages, tool integrations, and other customization settings.

Call Data

When calls are handled through the Platform, we collect call metadata (caller number, duration, timestamps, status), call recordings (where enabled), and generated transcripts. Caller phone numbers are collected as part of standard telephony operations.

Usage Data

We automatically collect information about how you interact with the Platform, including pages visited, features used, API calls made, browser type, operating system, and IP address.

Payment Information

Payment processing is handled by third-party payment processors. We do not store your full credit card number or banking details on our servers.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Platform
• Process and manage your AI voice agent configurations
• Handle inbound calls and generate transcripts
• Send you service-related notifications and updates
• Respond to your requests and support inquiries
• Monitor and analyze usage patterns to improve performance
• Detect, prevent, and address security issues and fraud
• Comply with legal obligations

4. Call Recording & Transcription

Call recordings and transcripts are stored securely and are accessible only through your authenticated account. We process call audio using third-party speech-to-text and text-to-speech providers (such as Deepgram) to enable real-time voice conversations and generate transcripts. Audio data sent to these providers is processed in accordance with their respective privacy policies and data processing agreements.

You are responsible for providing appropriate notice and obtaining any required consent from callers regarding recording and transcription, in compliance with applicable federal and state laws.

5. AI Processing

Conversation content is processed by AI language models (such as Anthropic Claude) to generate agent responses in real time. We transmit conversation context to these providers during active calls. These providers process data in accordance with their own privacy policies and do not retain conversation data for their own training purposes under our agreements.

6. Data Sharing & Disclosure

We may share your information with:

• Service providers: Third-party vendors who assist in operating the Platform (telephony, AI, hosting, analytics, payment processing)
• Legal requirements: When required by law, regulation, or legal process
• Business transfers: In connection with a merger, acquisition, or sale of assets
• With your consent: When you explicitly authorize sharing

We do not sell your personal information to third parties.

7. Data Security

We implement appropriate technical and organizational measures to protect your information, including encryption in transit (TLS) and at rest, access controls, secure authentication (bcrypt password hashing), and regular security reviews. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. Data Retention

We retain your account data for as long as your account is active. Call recordings and transcripts are retained according to your account settings and applicable retention policies. Upon account deletion, we will remove your personal data within 30 days, except where retention is required by law.

9. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Export your data in a portable format
• Opt out of certain data processing activities
• Withdraw consent where processing is based on consent

To exercise these rights, contact us at privacy@yapsolutely.com.

10. Cookies & Tracking

We use essential cookies to maintain your session and authentication state. We may use analytics cookies to understand how you use the Platform. You can control cookie preferences through your browser settings.

11. Children's Privacy

The Platform is not intended for use by individuals under 18 years of age. We do not knowingly collect personal information from children. If we learn that we have collected data from a child, we will take steps to delete that information promptly.

12. International Data Transfers

Your information may be processed and stored in the United States or other countries where our service providers operate. By using the Platform, you consent to the transfer of your information to these jurisdictions, which may have different data protection laws than your country of residence.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or through the Platform at least 30 days before they take effect. The "Last updated" date at the top of this policy reflects the most recent revision.

14. Contact Us

For questions or concerns about this Privacy Policy or our data practices, contact us at privacy@yapsolutely.com.