Privacy that respects your callers and your business.

Receptic AI (“Receptic,” “we,” “us”) operates an AI receptionist platform that answers calls, books appointments, and routes conversations on behalf of businesses. This Privacy Policy explains what we collect, why we collect it, and the choices you have.

We act as a data processorfor your business's callers and customers, and as a data controller for the account you create with us. Where laws conflict, we follow the stricter standard.

We collect three categories of data:

• Account data — your name, email, organization, billing address, and authentication metadata when you sign up.
• Call & message data — audio recordings, transcripts, AI summaries, message bodies, tool invocations, and timestamps generated when our agent handles a call or chat. This may include personal information about your callers.
• Operational data — usage logs, device and browser data, and crash reports needed to keep the service running and secure.

We use the data we collect to:

• Provide the service — answering calls, booking, routing, and reporting.
• Improve voice quality, accuracy, and latency of the agent.
• Detect fraud, abuse, and security incidents.
• Send service announcements, billing notices, and (optionally) product updates.

We do notsell your data or your callers' data. We do not use call content to train shared third-party AI models.

The agent runs on top of large language and speech models from providers such as OpenAI, Anthropic, and Google. When the agent generates a response, we send only the data required for that response. We have contractual commitments with each provider that your data is not used to train their public models.

We publish a current list of sub-processors on request. Email legal@receptic.ai for the latest version.

By default we keep call recordings and transcripts for 12 months, after which they are deleted from primary storage. Account billing records are retained as required by tax and accounting laws (typically 7 years).

You can shorten retention or purge specific records at any time from the dashboard, or by emailing us.

Depending on your jurisdiction, you may have the right to access, correct, port, or delete the personal information we hold about you. You can exercise these rights from inside the product or by emailing privacy@receptic.ai. We respond within 30 days.

If you are a caller and want a business to delete or correct what its Receptic agent collected about you, please contact that business directly. They control the agent and the data.

Data is encrypted in transit (TLS 1.2+) and at rest (AES-256). Access to production systems requires SSO with hardware-key 2FA and is audited continuously. We undergo annual SOC 2 Type II audits and support HIPAA BAAs on the Scale plan.

No system is perfectly secure. If you believe you've found a vulnerability, please email security@receptic.ai.

We are headquartered in the United States and process data on US-based cloud infrastructure by default. EU data residency is available on request. Cross-border transfers rely on Standard Contractual Clauses where applicable.

Receptic is built for businesses and is not directed at children under 13. We do not knowingly collect personal information from children. If you believe we have, contact us and we will delete it.

We may update this Policy as our product evolves. Material changes will be announced via email and on this page at least 30 days before they take effect.

Mail us at Receptic AI, Inc., San Francisco, CA, or email privacy@receptic.ai for any privacy-related question.