Privacy Policy

Last updated: April 18, 2026

1. Information We Collect

Account information: Name, email address, password (hashed), business name, and billing details.

Business configuration: Business hours, services, FAQs, policies, greeting text, voice settings, and custom instructions.

Call data: Phone numbers of callers, call transcripts, call recordings (if enabled), appointment details, and AI-generated call summaries.

Usage data: Dashboard access logs, feature usage, and error reports (via Sentry).

2. How We Use Your Information

We use your information to: (a) provide and improve the AI receptionist service, (b) process calls and manage appointments, (c) send transactional emails (verification, password reset), (d) bill your subscription, and (e) monitor service health and fix errors.

3. Third-Party Services

We share data with the following services to operate Claraline:

  • Twilio — phone call handling, SMS notifications
  • Deepgram — speech-to-text transcription
  • OpenAI — AI conversation processing (GPT)
  • Deepgram / ElevenLabs — text-to-speech voice generation
  • Stripe — payment processing
  • Resend — transactional email delivery
  • Neon — database hosting
  • Sentry — error tracking
  • Vercel / Render — application hosting

Each service has its own privacy policy. We do not sell your data to third parties.

4. Data Retention

Account data is retained while your account is active. Call transcripts and recordings are retained for 90 days by default, or as configured in your settings. You may request deletion of all your data at any time.

5. Your Rights

You have the right to: (a) access your personal data, (b) correct inaccurate data, (c) request deletion of your data, (d) export your data in a portable format, and (e) withdraw consent for data processing.

To exercise these rights, contact us at support@claraline.co.

6. California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act, including the right to know what personal information is collected, the right to delete, and the right to opt out of the sale of personal information. We do not sell personal information.

7. European Residents (GDPR)

If you are in the European Economic Area, our legal basis for processing your data includes: (a) contract performance (providing the service), (b) legitimate interests (improving the service), and (c) your consent (where applicable). You may contact us to exercise your GDPR rights.

8. Cookies

We use essential cookies for authentication (session management) and business selection. We use Sentry for error tracking. We do not use advertising cookies or third-party tracking cookies.

9. Security

We protect your data with: HTTPS encryption in transit, hashed passwords (bcrypt), httpOnly session cookies, role-based access controls, and regular security audits. However, no system is perfectly secure.

10. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes via email. Continued use after changes constitutes acceptance.

11. Contact

Questions about privacy? Contact us at support@claraline.co.