Legal

Privacy

Draft — the operating entity for prepaid.ai is being finalised and will be named here. The practices below are accurate today.

What we hold

Your account and workspace

The email address you signed in with, your business name, country and time zone, and who else you have invited.

What you teach your AI

What we read from the website you gave us, the services and hours you set, your greeting, and the words you flag as urgent.

Your calls

For each call your AI answers: the caller’s number as the carrier presents it, when it happened and how long it lasted, a recording and a written transcript where the law of that number’s country allows one, what the AI did, and any message it took.

People who contact you

Names, numbers and notes for contacts you import or that your AI collects on a call, and any bookings made.

Money

Your plan, your credit balance, and an append-only ledger of every charge and top-up. We never hold your card number.

Who else touches it

These companies process data on our behalf so the product can work. Each does one job, and none of them is given data for their own purposes.

WhoWhat for
Telnyxcarries the phone calls and runs the AI that answers them
Supabasestores the database and manages sign-in
Vercelruns and serves the application
Stripeprocesses payments — card numbers never reach us
Resenddelivers the email we send you
Anthropicreads your website to build your AI, and writes call summaries
Composioconnects the tools you choose to link, only if you link one

Callers’ data, and whose responsibility it is

When your AI answers a call, the person calling is your customer, not ours — you are responsible for the notices and consents your own callers are owed. Two things we do by default to help: the AI says at the start of every call that it is an AI, in wording set per country, and recording follows the rules of the country the number belongs to rather than a single global setting.

How long it is kept

Recordings, transcripts and call details are kept for the period shown in your console, and that period is enforced automatically every night rather than on request. You can shorten it. Deleting your account removes the rest — see the deletion page.

What we do not do

We do not sell personal data, we do not use your calls or your customers’ data to train anybody’s general-purpose model, and we do not hold your card number — Stripe does.

Your choices

You can see and correct everything your AI knows about your business from the console at any time, export your call history, and ask for the account to be deleted. Requests are read by a person.

Deleting your data

There is a route, it is short, and a person handles it.

How to delete your data