Privacy Policy

1. Introduction

Recoverly ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect information when you use our SMS-based missed-call recovery service.

2. Information We Collect

From Business Owners (You):

• Business name, owner name, email address
• Business phone number, notification phone number
• Billing information (processed securely via Stripe)
• Service usage data (number of calls, SMS conversations)

From Your Customers (End Users):

• Phone number (from their inbound call)
• SMS message content (service request details)
• Consent status (opted-in, opted-out)
• Timestamp and conversation metadata

3. How We Use Information

Service Delivery:

• Sending SMS messages to customers who called your business
• Capturing service request details (what they need, urgency, location)
• Forwarding job details to you via SMS and email
• Managing opt-in/opt-out requests

Service Improvement:

• Analyzing conversation patterns to improve AI responses
• Monitoring system performance and uptime
• Troubleshooting technical issues

Legal Compliance:

• Maintaining records of opt-in/opt-out requests
• Responding to legal requests (subpoenas, court orders)
• Enforcing our Terms of Service

4. SMS Consent & Privacy

5. Data Sharing & Third Parties

We Share Data With:

• Twilio: SMS delivery service (phone numbers and message content)
• OpenAI: AI conversation processing (message content only, no phone numbers stored by OpenAI)
• Stripe: Payment processing (billing information)
• SendGrid: Email notifications (your email, job summaries)

We Do NOT:

• Sell customer phone numbers or data to third parties
• Use customer data for marketing (ours or others')
• Share data with advertisers or data brokers

6. Data Retention

• Active Conversations: Stored for 90 days, then archived
• Completed Jobs: Retained for 1 year for your reference
• Opted-Out Numbers: Kept permanently in suppression list (to honor opt-out)
• Your Business Data: Retained while your account is active, deleted 30 days after cancellation

7. Data Security

We implement industry-standard security measures:

• Encryption in transit (TLS/SSL) and at rest
• Secure database access controls
• Regular security audits and monitoring
• PCI-DSS compliant payment processing (via Stripe)

However, no system is 100% secure. We cannot guarantee absolute security but take all reasonable precautions to protect your data.

8. Your Rights

Business Owners:

• Access: View all data associated with your account
• Correction: Update your business information anytime
• Deletion: Request account deletion (30-day retention, then permanent deletion)
• Export: Request a copy of your job data

End Customers:

• Opt-Out: Reply STOP to any message (immediate effect)
• Deletion: Email [email protected] to request data deletion
• Access: Request a copy of your conversation data

9. Children's Privacy

Recoverly is not intended for use by individuals under 18. We do not knowingly collect information from minors. If you believe we have collected data from a minor, please contact us immediately.

10. California Privacy Rights (CCPA)

California residents have additional rights under the CCPA:

• Right to know what personal information we collect
• Right to request deletion of personal information
• Right to opt-out of sale of personal information (we don't sell data)
• Right to non-discrimination for exercising CCPA rights

To exercise these rights, email [email protected] with "CCPA Request" in the subject line.

11. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated via email. Continued use after changes constitutes acceptance.

12. Contact Us

For privacy questions, data requests, or concerns: