Privacy Policy

Last Updated: October 2025

This Privacy Policy describes how Keyra ("we," "our," or "us") collects, uses, stores, and protects your personal information when you use our AI phone receptionist services, including our website at keyra.io, our applications, and related services (collectively, the "Services"). By using our Services, you agree to the collection and use of information in accordance with this Privacy Policy. If you have questions about this Privacy Policy, please contact us at our contact page.

1. Information We Collect

a. Information You Provide to Us

We collect information that you provide directly to us when you:

  • Create an Account: When you register for an account, we collect your email address, first name, last name, and phone number. If you choose to register using Google authentication, we may collect information from your Google account in accordance with Google's API Services User Data Policy.
  • Set Up Your Business: When you configure your AI assistant, we collect your business name, business website URL, agent name, custom greeting messages, and FAQ information for your knowledge base.
  • Configure Your Services: We collect voice preferences, capability selections (such as whether to take messages, qualify leads, or answer questions), and other configuration settings.
  • Subscribe to Our Services: When you subscribe to a paid plan, we process payment information through our third-party payment processor, Stripe. We do not directly collect, store, or process your credit card or payment information.
  • Contact Us: When you contact us for support or with questions, we collect your contact information and the contents of your communications with us.

b. Information We Collect Automatically

When you use our Services, we automatically collect certain information about your device and usage:

  • Call Information: We collect information about calls handled by your AI assistant, including caller phone numbers, caller names (when available), call duration, call status, timestamps, and call metadata.
  • Call Recordings and Transcripts: We create audio recordings and transcripts of calls between callers to your business and your AI assistant. These recordings and transcripts are stored securely and made available to you through your account dashboard.
  • Contact and Lead Information: We collect information about your callers that is provided during conversations, including contact information, property preferences, budget information, timeline information, and other lead qualification data.
  • Usage Data: We collect information about how you interact with our Services, including pages visited, features used, time spent on the Services, and other usage patterns.
  • Device Information: We collect information about your device, including browser type, operating system, device identifiers, IP address, and timezone.
  • Log Data: Our servers automatically log information when you access our Services, such as your IP address, browser type, referring/exit pages, date/time stamps, and other standard server logs.

c. Information from Third-Party Services

We may receive information about you from third-party services that we use to provide our Services:

  • Authentication Providers: If you register using Google authentication, Google provides us with information from your Google account in accordance with their privacy policies and API terms.
  • Payment Processors: Stripe processes your payment information and provides us with transaction details, billing information, and subscription status.
  • Voice AI Services: VAPI and other voice AI providers process call audio and provide us with transcripts, recordings, and call metadata.
  • SMS Services: Telnyx processes SMS messages and provides us with delivery status and related information.

2. How We Use Your Information

We use the information we collect for the following purposes:

  • To Provide and Maintain Our Services: We use your information to create and manage your account, configure your AI assistant, process calls, generate recordings and transcripts, send SMS notifications, and provide customer support.
  • To Process Payments: We use payment information (processed through Stripe) to process subscription fees and manage your subscription.
  • To Improve Our Services: We use your information to analyze usage patterns, monitor service quality, improve our AI models, fix bugs, and develop new features.
  • To Communicate With You: We use your contact information to send you transactional communications (such as account updates and service notifications), respond to your inquiries, and provide customer support.
  • To Ensure Security: We use your information to detect, prevent, and address fraud, abuse, security issues, and technical problems.
  • To Comply With Legal Obligations: We use your information as necessary to comply with applicable laws, regulations, legal processes, or governmental requests.
  • To Enforce Our Terms: We use your information to enforce our Terms of Service and other agreements, including investigating potential violations.
  • For Business Purposes: We may use aggregated, anonymized information for business analytics, market research, and improving our Services.

3. Information Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

a. Service Providers

We share your information with third-party service providers who perform services on our behalf, including:

  • Payment Processing: Stripe processes payments on our behalf. Stripe's collection and use of your payment information is governed by their privacy policy.
  • Voice AI Services: VAPI and other voice AI providers process call audio and generate transcripts. These providers have access to call recordings and transcripts.
  • AI Technology Providers: OpenAI, Deepgram, ElevenLabs, PlayHT, and other AI technology providers process conversations and generate responses. These providers may have access to call transcripts and conversation data.
  • SMS Services: Telnyx processes and delivers SMS messages on our behalf. Telnyx may have access to SMS content and recipient information.
  • Database and Hosting Services: Supabase provides database and hosting services. Your data is stored in Supabase's infrastructure.
  • Analytics Services: We may use analytics services to understand how our Services are used.

These service providers are contractually obligated to protect your information and may only use it for the purposes we specify.

b. Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency), or to:

  • Comply with legal obligations, court orders, or legal processes
  • Enforce our Terms of Service and other agreements
  • Respond to claims that your use of our Services violates third-party rights
  • Protect the rights, property, or safety of Keyra, our users, or others
  • Prevent or investigate possible wrongdoing in connection with our Services

c. Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our Services of any change in ownership or uses of your information, as well as any choices you may have regarding your information.

d. With Your Consent

We may share your information with your explicit consent or at your direction.

4. Data Storage and Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

  • Encryption of data in transit using TLS/SSL
  • Encryption of sensitive data at rest
  • Secure authentication and access controls
  • Regular security assessments and updates
  • Limited access to personal information on a need-to-know basis

However, no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security. You are responsible for maintaining the confidentiality of your account credentials and for all activities that occur under your account.

We retain your information for as long as necessary to provide our Services and fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. When we no longer need your information, we will delete or anonymize it in accordance with our data retention policies.

5. Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information:

a. Access and Correction

You can access and update most of your personal information through your account settings on our Services. You can update your account information, business information, and service configuration at any time.

b. Data Deletion

You can request deletion of your account and associated data by contacting us. We will delete your account and personal information, subject to any legal obligations we may have to retain certain information. Note that some information may remain in our backup systems for a limited period, and we may retain certain information as required by law or for legitimate business purposes.

c. Data Portability

You can export your call data, transcripts, and other information through your account dashboard. You can download call recordings, transcripts, and contact information in formats we support.

d. Opt-Out of Communications

You can opt out of promotional communications by following the unsubscribe instructions in those communications or by contacting us. Please note that even if you opt out, we may still send you transactional or service-related communications, such as account updates, service notifications, and important information about your subscription.

e. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to:

  • Know what personal information we collect, use, disclose, and sell
  • Request deletion of your personal information
  • Opt-out of the sale of your personal information (we do not sell personal information)
  • Non-discrimination for exercising your privacy rights

To exercise these rights, please contact us through our contact page.

6. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect and store information about your preferences and usage of our Services. Cookies are small data files stored on your device that help us provide and improve our Services.

We use cookies for the following purposes:

  • Essential Cookies: These cookies are necessary for the Services to function properly, such as authentication and security features.
  • Analytics Cookies: These cookies help us understand how visitors interact with our Services by collecting and reporting information anonymously.
  • Preference Cookies: These cookies remember your preferences and settings to provide you with a personalized experience.

Most web browsers allow you to control cookies through their settings. You can set your browser to refuse cookies or to alert you when cookies are being sent. However, if you disable cookies, some features of our Services may not function properly.

7. Call Recording and Monitoring

Our Services include the creation of audio recordings and transcripts of calls between callers to your business and your AI assistant. These recordings and transcripts are created:

  • To provide you with call summaries and transcripts
  • To allow you to review and manage calls through your dashboard
  • To monitor quality and improve the performance of our Services
  • To train and improve our AI models

Important: Call recording and monitoring practices are subject to various federal, state, and local laws. You are solely responsible for ensuring that your use of call recording features complies with applicable laws, including two-party consent laws, one-party consent laws, and any applicable notice requirements in your jurisdiction. You must obtain all necessary consents from callers before using our call recording features. Keyra is not responsible for your compliance with call recording laws.

You can access, review, and delete call recordings and transcripts through your account dashboard. We retain call recordings and transcripts in accordance with our data retention policies and your account settings.

8. Third-Party Services

Our Services integrate with and rely on third-party services. These services have their own privacy policies and terms of service. We are not responsible for the privacy practices of these third-party services. We encourage you to review their privacy policies:

9. International Data Transfers

Keyra is owned and operated in the United States. Your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate. These countries may have data protection laws that differ from those in your country.

By using our Services, you consent to the transfer of your information to the United States and other countries. We take appropriate safeguards to ensure that your information receives an adequate level of protection in accordance with this Privacy Policy and applicable data protection laws.

10. Children's Privacy

Our Services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us immediately. If we become aware that we have collected personal information from a child under 18 without verification of parental consent, we will take steps to delete that information from our servers.

11. Links to Other Websites

Our Services may contain links to other websites that are not operated by us. If you click on a third-party link, you will be directed to that third party's website. We strongly advise you to review the privacy policy of every website you visit.

We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party websites or services.

12. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any material changes by:

  • Posting the new Privacy Policy on this page
  • Updating the "Last Updated" date at the top of this Privacy Policy
  • Sending you an email notification (for material changes)
  • Displaying a notice on our Services (for significant changes)

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page. Your continued use of our Services after any changes to this Privacy Policy constitutes your acceptance of those changes.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

  • Through our contact page
  • By email at the contact address provided on our website

We will respond to your inquiry within a reasonable timeframe.