Privacy Policy

1. Information We Collect

• Account information: your name, email address, and password (stored as a secure hash).
• CRM and outreach data you provide: contacts, companies, notes, deals, tasks, products, and the content of emails and messages you create in the Service.
• Call data: phone numbers you dial, call metadata, and — when you enable recording — call audio, transcripts, and AI-generated coaching, scoring, and summaries.
• Lead data: information returned by lead-discovery and enrichment tools you run.
• Payment information: processed by our third-party payment processor. We do not store full card numbers; we receive limited billing details and subscription status.
• Usage and device data: log data, IP address, browser type, feature usage, and similar technical information.

2. How We Use Information

• To provide, operate, secure, and improve the Service.
• To authenticate you, manage your account, and process subscriptions and billing.
• To generate AI features such as drafts, coaching, transcription, scoring, and insights.
• To send transactional emails (verification, password resets, receipts, and important account notices).
• To monitor usage, prevent abuse and fraud, and enforce our Terms.
• To comply with legal obligations.

3. AI and Third-Party Subprocessors

To deliver core features, we share the minimum necessary data with trusted third-party providers that process it on our behalf, including:

• AI providers (e.g., OpenAI and Anthropic) to generate text, coaching, and analysis.
• Speech-to-text (e.g., Deepgram) to transcribe call audio.
• Telephony (e.g., Twilio) to place and manage calls.
• Data enrichment providers to find and verify lead information.
• Email delivery (e.g., Resend) to send transactional email.
• Hosting and database (e.g., Railway / PostgreSQL) to run the Service and store data.
• Payment processing to handle subscriptions.

These providers are authorized to use your information only to perform services for us. We do not sell your personal information.

4. Call Recordings

Call recording is optional and controlled by you. When enabled, audio and transcripts are stored so you can review calls and receive AI analysis. You are responsible for complying with all applicable call-recording and consent laws. You may delete recordings associated with your account; deletion removes them from active systems within a reasonable period, subject to backups and legal requirements.

5. How We Share Information

We share information only: (a) with the subprocessors described above; (b) when required by law, legal process, or to protect rights, safety, and security; (c) in connection with a merger, acquisition, or sale of assets, subject to this Policy; and (d) with your consent. We do not sell or rent your personal information.

6. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. When you delete your account, we delete or anonymize your personal data within a reasonable period, except where retention is required by law.

7. Security

We use reasonable technical and organizational measures to protect your information, including encryption in transit, hashed passwords, access controls, and authentication tokens. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Your Rights and Choices

Depending on your location, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. You can update your profile in settings, and you can request access, export, or deletion by contacting us at privacy@torvald.ai. You may opt out of non-essential emails, but we may still send transactional messages necessary to operate your account.

9. Cookies and Local Storage

We use cookies and browser local storage for essential functions such as keeping you logged in (authentication tokens) and remembering preferences. We do not use them to sell your data. You can control cookies through your browser settings, though disabling them may affect functionality.

10. Children's Privacy

The Service is not intended for anyone under 18, and we do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

11. International Users

We operate in the United States, and your information may be processed and stored in the U.S. and other countries where our providers operate. By using the Service, you consent to the transfer of your information to these locations.

12. Changes to This Policy

We may update this Policy from time to time. Material changes will be posted here with a new effective date and, where appropriate, communicated by email. Your continued use of the Service after changes take effect constitutes acceptance.

13. Contact

Questions or privacy requests? Contact us at privacy@torvald.ai.