Privacy.
Simpyl Privacy Policy
1. Who we are and what this policy covers
Simpyl LLC, an Oklahoma limited liability company ("Simpyl", "we", "us"), runs Simpyl Receptionist. It's an AI voice receptionist that answers inbound phone calls for small US trade businesses, such as plumbers. You can reach us using the contact details in section 16.
You set up and manage Simpyl Receptionist inside an AI assistant app, called "the assistant app" in this policy. You can also use the account portal on our website to see your balance, add funds and close your account. Our public website also explains the service, pricing and how to sign up.
This policy explains what information we collect, why, who we share it with, how long we keep it, and the choices you have. We serve US businesses only.
2. Two groups of people: account holders and callers
- Account holders are the businesses (and the person who owns the account) who sign up for Simpyl. For their information, we decide how it's used.
- Callers are the people who phone a business that uses Simpyl. We handle caller information on behalf of that business, as its service provider (sometimes called a processor). The business decides why the call is answered and what happens with the message.
If you're a caller with a question about your information, contact the business you called first. If you contact us, we'll pass your request to that business and help it respond where we can.
3. Information we collect from account holders
| What | Examples | Where it comes from |
|---|---|---|
| Identity and contact | Name, email address, phone number (checked with a one-time code) | You, during setup in the assistant app |
| Business details | Company name, company size, trade, ZIP code, business hours | You, during setup |
| Receptionist setup | Agent instructions, time zone, scheduling rules, backup number, approved transfer numbers. We store transfer numbers in full on your business record so our server can dial them. | You, through the assistant app |
| Wallet and billing | Top-up amounts and dates, wallet balance, per-call and transfer charges, inactivity fees and the date of the last incoming call recorded in your call logs for each phone number, and auto top-up settings, startup credit and referral credits, if those features are offered | You, our records, and Stripe |
| Trial and fraud checks | Verified contact details and, if the platform provides one, an assistant identifier, used to allow one trial per business | You and the assistant app |
| Sign-in details | Email and password, or an emailed sign-in link. Passwords are handled by our sign-in provider (Supabase). | You, at sign-in |
| Server and sign-in logs | IP address, approximate location, browser or device type (user agent), pages or URLs requested, user ID and session ID. Sign-in logs also record your email and whether you approved or denied the connection. | Our systems and our providers, kept for a short period set by each provider |
We don't see or store your full card number. Stripe collects and keeps your payment card details.
4. Information we handle about callers
When someone calls a business that uses Simpyl, we handle the following for that business:
| What | Details | Kept for |
|---|---|---|
| Call log | Caller's phone number, number dialed, which agent answered, call times and length, tools the agent used, transfer result, why the call ended, and the charge for the call | For now, kept while the account is open and after it closes. We plan to delete call logs after 90 days (see section 8). |
| Caller message | Caller ID number, caller's name, callback number, the message (what they need), call time and the number they called | For now, kept while the account is open and after it closes. We plan to delete messages 1 year after they're created (see section 8). |
| Appointment | Appointment details the caller gives, such as name, callback number, requested time and reason | For now, kept while the account is open and after it closes. We plan to delete appointments 1 year after they're created (see section 8). |
| Call audio | Flows directly between our telephony provider (Plivo) and our AI provider (xAI) to answer the call. It never passes through Simpyl's servers, and Simpyl doesn't save audio, recordings or transcripts. Our providers may keep some data under their own policies (see sections 7 and 8). | Not saved by Simpyl |
To run the call, we send the caller's phone number to our AI provider as part of the call instructions. When a call is transferred, our billing records keep the full number it was transferred to. Our server's console logs show only the last 4 digits of a transfer number.
Messages are saved to our database. In rare cases, if a message can't be saved to our database right away, it may be held temporarily on our server until it can be saved. We are putting in place a rule to delete these temporary copies promptly, and they may remain in server backups for up to about 2 weeks.
Callers may share personal or sensitive details in a message. Businesses must not use Simpyl to collect protected health information or patient information. Healthcare businesses that handle patient information may not use the service.
If a caller asks for the owner, the receptionist makes one transfer attempt to the business's approved number. If the transfer isn't connected, the receptionist takes a message. The receptionist should not claim to be a human.
Not for emergencies. Simpyl Receptionist is not an emergency service. If you have an emergency, such as a gas leak, fire or medical emergency, hang up and call 911.
The business that uses Simpyl is responsible for telling its callers how their information is used, and for any disclosures or consent the law requires (for example, that an AI is answering or that the call is being processed). See our Terms and Conditions.
5. What we do not collect
- Simpyl doesn't save call audio, recordings or transcripts. Our telephony provider (Plivo) and AI provider (xAI) process the audio live so the receptionist can answer the call. Our AI provider may keep conversation data for a limited time for abuse monitoring, unless zero data retention is turned on (see section 7).
- We don't store full payment card numbers. Stripe handles them.
- We don't knowingly accept protected health information. Healthcare businesses handling patient information are excluded.
- We don't sell personal information or use it for targeted advertising.
6. How we use information
- To answer calls, take messages, book appointments and, when the business has set it up, make one transfer attempt to the business's approved number.
- To create and secure accounts, including checking phone numbers with one-time codes.
- To find a local phone number using the ZIP code you give us.
- To run the prepaid wallet: top-ups, per-call and transfer charges, inactivity fees for each phone number and, if offered, startup and referral credit.
- To prevent abuse, such as more than one free trial per business, spam and fraud.
- To send service messages, such as one-time codes and important account notices, including a notice before an inactivity fee is first charged for a phone number, notices that your service is paused, and notices about the date your phone numbers will be released.
- To fix problems, keep the service reliable and improve it.
- To comply with the law and enforce our Terms.
We use caller information only to provide the service to the business that received the call. Under xAI's terms, xAI doesn't train its models on our API data unless we give explicit permission, and we won't give it. Our providers process data under their own terms and our agreements with them.
7. Who we share information with
We share information only with service providers that help us run Simpyl, and only as needed:
| Provider | What they do | What they receive |
|---|---|---|
| Plivo | Phone numbers, call routing, and one-time code text messages | Phone numbers, live call audio, call detail records (numbers, times, length, cost), verification texts |
| xAI (Grok Voice) | The AI voice that talks with callers | Live call audio, the caller's phone number and the agent's instructions during a call |
| Stripe | Payments and receipts | Payment card details (entered directly with Stripe), top-up amounts, account email |
| Supabase | Database and sign-in | Account and sign-in details, sign-in logs, call logs, messages, appointments |
| US-based cloud hosting providers | Run our servers, including the call server | Server logs, call logs and, rarely, messages held temporarily before they're saved to our database |
| The assistant app | Where you set up and manage Simpyl | What you ask the assistant to show or change, such as messages and call logs |
What our providers keep: Plivo keeps call detail records (numbers, times, length, cost) for about 90 days and masked copies for up to 7 years, and under its privacy policy generally keeps data for 7 years after an account closes. Our voice AI provider (xAI) may keep call data, encrypted, for up to 30 days for abuse monitoring, unless zero retention is enabled. It may keep data longer if a conversation is flagged or the law requires it.
Where data is processed: our databases and servers are hosted in the United States. Our AI provider may process call audio outside the United States.
We may also share information when the law requires it, to protect rights and safety, or as part of a merger, sale or reorganization of our business. Each provider's own privacy policy also applies to what it handles.
8. How long we keep information
| Information | How long |
|---|---|
| Call logs | For now, kept while your account is open and after it closes. We plan to delete them after 90 days. |
| Caller messages and appointments | For now, kept while your account is open and after it closes. We plan to delete them 1 year after they're created. |
| Call audio, recordings and transcripts | Never saved by Simpyl (our providers' retention is in section 7) |
| Account and setup details | For now, kept while your account is open and after it closes. We plan to delete them after you close your account. |
| Server and sign-in logs | A short period set by each provider |
| Minimum financial records | As long as the law requires for accounting, tax, disputes or legal purposes |
| Backups | Deleted data may remain in backups for up to about 2 weeks before it's overwritten |
| Provider records (Plivo, xAI, Stripe) | Under each provider's own policy (see section 7) |
We're setting up automatic deletion for call logs, messages, appointments and closed accounts. We'll update this policy when that deletion is running.
9. Deleting your account
- You can close your account at any time on the Account page of the account portal. You'll be asked to confirm.
- Closing is permanent and can't be undone.
- For now, after you close, we keep your account records, including your setup, call logs, messages and appointments, in our systems. We plan to delete this data after you close, and we'll update this policy when that deletion is running.
- We keep financial records as long as the law requires.
- Our providers, such as Plivo, xAI and Stripe, keep their own records under their own policies, and we can't delete those for you (see section 7).
- When you close your account, we refund your remaining wallet balance, up to the total you paid in, to the payment method you used to add funds. Free credit, such as startup credit, isn't refunded. See section 9 of our Terms and Conditions.
- If your account is closed or your phone numbers are released, those numbers go back to our phone carrier, which may later assign them to someone else. Calls to them may then reach that person or business. We don't give a released number's past messages or call history to anyone else. Update or turn off call forwarding from your business line before this happens.
10. Cookies and tracking
Our website uses only strictly necessary cookies, if any. These are cookies the site needs to work. We don't use analytics, advertising or tracking cookies.
If we ever add analytics or other non-essential cookies, we will ask for your consent with a cookie banner before setting them. You'll be able to say no, and to change your mind later. You can also block or delete cookies in your browser settings.
11. Text messages and one-time codes
- During setup, we text a one-time code to the phone number you give us to verify it. Plivo sends these texts.
- Next to the phone field you'll see: 'We'll text a one-time code to verify this number. Msg & data rates may apply.'
- We send one text each time you ask for a code, and the number of resends is limited. We don't send marketing texts.
- We don't share your phone number with third parties for their marketing.
- To stop texts, reply STOP, or contact us at privacy@simpyl.ai. Reply HELP for help.
In this first version, Simpyl doesn't send text alerts, such as new-message notices, and receptionists don't text callers. Verification codes are the only texts we send.
12. Security
We use reasonable safeguards to protect information. They include encryption in transit and at rest for our main database, keeping payment details with Stripe, not saving call audio, and limiting stored data to what the service needs. No system is perfectly secure, and we can't guarantee security. If a breach affects your information, we'll notify you as the law requires.
13. Children
Simpyl is for businesses and is not meant for children. Account holders must be adults who can act for their business. We don't knowingly collect information from children under 13 through our website or sign-up. If you think a child gave us information, contact us and we'll delete it.
14. Your US state privacy rights
Several US states, including California (under the CCPA, as amended by the CPRA), have privacy laws that give residents rights over their personal information. Depending on where you live, these may include the right to:
- Know what personal information we collect and how we use it.
- Get a copy of your information.
- Correct information that's wrong.
- Delete your information.
- Opt out of the sale or sharing of personal information, or targeted advertising. We don't do either.
- Not be treated differently for using these rights.
Many of these laws apply only to businesses that pass certain revenue or data-volume limits. Simpyl is a new, pre-revenue company and may not yet meet them. Even so, we'll honor reasonable requests from account holders to see, correct or delete their information. To make a request, email privacy@simpyl.ai. We may need to confirm your identity first. An authorized agent may make a request for you where the law allows.
If you're a caller, we handle your information for the business you called. Please send your request to that business. We'll help it respond.
15. Changes to this policy
We may update this policy. We'll change the "last updated" date at the top and, for important changes, tell account holders through the assistant app or by email before the change takes effect.
16. How to contact us
Email Simpyl LLC at privacy@simpyl.ai.