Privacy Policy

Get Assistant provides an AI receptionist that answers inbound phone calls, sends and receives text messages, handles faxes, and helps manage appointments for businesses. This policy covers the information we process when you visit our website, use our iOS app, create an account, configure a receptionist, or when a caller reaches a phone number connected to your account.

In this policy, "customer" means the business that subscribes to Get Assistant, and "caller" means an individual who phones, messages, or sends a fax to a number connected to a customer's receptionist. For call, message, and fax content, the customer decides what is collected and how it is used; we process it on the customer's behalf.

When you sign up we collect and store:

• Name and email address used to create the account.
• Authentication data managed by our authentication provider. Password hashes are never visible to us.
• Account role and access permissions.
• Basic product usage such as sign-in events and features used inside the app or dashboard.

To let your receptionist answer accurately, we also store the information you enter during onboarding and in the app, including business name, website, timezone, industry, business hours, services and pricing descriptions, FAQs, call handling rules, greeting and voice preferences, and logo files you upload.

Do not enter information into these fields that you are not permitted to share with a service provider.

We store contact records created from calls and messages, including names, phone numbers, email addresses, notes you add, and interaction history. The app does not read your iPhone address book. Contacts are isolated to your business account and are only used to help you manage caller relationships, return calls, and populate your call and message history.

When your receptionist handles a call we may store:

• Call metadata: start and end time, duration, direction, the number dialed, the caller's number, and call outcome.
• A summary of the conversation and derived signals such as sentiment or urgency.
• A transcript of the conversation, where transcription is enabled. Transcripts are enabled and approved by the product owner for active accounts.
• Details the caller provides, such as name, callback number, email, reason for calling, requested service, and message content.

Stored call audio recordings remain disabled unless and until they are separately approved and lawfully enabled. When audio recording is not enabled, we do not store call audio or voicemail audio.

Ask callers not to share sensitive information you do not need, and configure your receptionist accordingly.

When you send or receive text messages through Get Assistant we store the message content, media metadata, delivery records, and consent status. We support standard opt-out and assistance keywords such as STOP, STOPALL, UNSUBSCRIBE, CANCEL, END, QUIT, START, UNSTOP, HELP, and INFO.

Only message people who have consented or initiated an applicable conversation. Consent for a service conversation does not create permission for unrelated marketing. You are responsible for honoring opt-out requests and providing any required messaging disclosures.

If you connect a calendar or create appointments in Get Assistant, we store appointment details such as date, time, service, caller or customer name, and any notes you add. Calendar sync is optional and you can disconnect it at any time. Data already exchanged with a third-party calendar provider is governed by that provider's own policy.

Conversations with the AI assistant, including Luna requests and responses, are processed by automated speech and language models to understand the caller and produce summaries, structured fields, and replies. We may store prompts, responses, and generated outputs to deliver the feature and show history in your account.

Automated systems can misunderstand speech, names, numbers, and intent. Review important call outcomes rather than relying solely on generated summaries.

When you send a fax through Get Assistant we store the PDF you upload, the destination fax number, page count, sending and delivery records, and any error details. Outbound faxes are sent through a shared Get Assistant fax service; customers are not assigned a receiving fax number. Fax documents are isolated to your business account.

Get Assistant subscriptions are sold only through the Apple App Store. We store your plan, subscription status, renewal state, trial eligibility, usage such as call minutes, and the Apple transaction identifiers needed to keep your subscription in sync. We never receive or store payment-card numbers; all payment details are handled by Apple.

The iOS app stores a session token on your device to keep you signed in. If you enable push notifications, we store a push token associated with your account and device so we can deliver alerts for calls, messages, and faxes. You can disable push notifications in your device settings.

Each customer's business data is isolated from other customers by account. We use row-level access controls and business-scoped queries so that your calls, messages, contacts, appointments, faxes, and AI assistant history are only accessible to you and users you authorize on your account.

We rely on a small number of providers to run the service:

• Supabase — authentication, databases, storage, and server functions.
• Telnyx — phone numbers, calling, messaging, fax delivery, and telephony routing.
• Retell — conversational AI voice infrastructure for call handling.
• OpenAI — language models for Luna, summaries, transcripts, and other AI-assisted features.
• Expo — iOS app build, update, and push-notification delivery services.
• Apple — App Store subscriptions, device services, and push delivery.
• Resend — transactional email such as verification and account notifications.
• Sentry — privacy-filtered crash diagnostics only.

Providers are permitted to use your data only to deliver services to us.

Sentry receives only privacy-filtered crash diagnostics. We remove call and message contents, transcripts, fax documents, authentication tokens, and direct user identifiers from crash reports before they are sent. Sentry does not receive full phone numbers, email addresses, or business data.

Performance tracing and profiling are disabled. Crash diagnostics are used solely to identify and fix bugs, and are retained for up to 90 days.

• To answer, route, transcribe, and summarize calls as configured.
• To send and receive messages and organize caller conversations.
• To create and display appointments and calendar entries.
• To send, store, and display outbound fax PDFs and delivery status.
• To power the AI assistant and generate replies and summaries.
• To authenticate you and secure your account.
• To provide support and respond to your requests.
• To monitor reliability, prevent abuse, and debug failures.
• To meet legal obligations.

We do not sell personal information. We do not use your data for cross-context behavioral advertising. We share information with the service providers described above, with parties you direct us to (such as an integration you connect), when required by law or valid legal process, to protect rights and safety, and in connection with a merger, acquisition, or asset sale — in which case this policy continues to apply to the transferred data until replaced.

We keep account and business configuration data for as long as your account is active. Operational retention for other data is as follows:

• Messages (SMS/MMS content and delivery records): up to 12 months.
• Caller contacts and notes: while the account is active, or until you delete them.
• Appointments: up to 12 months after the appointment date.
• Call records and transcripts: up to 12 months.
• Fax documents and delivery records: up to 12 months.
• Crash diagnostics: up to 90 days.

You can delete individual records from the app or dashboard where the feature is available. You can delete your entire account in the iOS app under Settings > Account > Delete Account. Deletion disables calling, messaging, fax, and the AI receptionist immediately, then permanently removes customer data and connected telephony resources after a seven-day waiting period, subject to required retention for legal, accounting, fraud-prevention, or security purposes.

A minimal non-content deletion record is retained for three years. Transaction, invoice, tax, and payment evidence may be retained for seven years or the legally required period. Provider backups expire on a rolling schedule and are not restored for ordinary use after deletion.

We use encryption in transit, row-level access rules that isolate each customer's data, scoped access for administrative operations, signed webhook verification, and server-side storage of provider credentials. Credentials such as API keys are never exposed to the browser or app.

No system is perfectly secure, and we do not claim any specific certification or audit status. If you require a formal compliance program, contact us before relying on the service for regulated data.

As the business using Get Assistant, you are responsible for:

• Determining what information your receptionist collects and how long you keep it.
• Providing any privacy, AI, messaging, and recording notices your callers or jurisdiction require.
• Responding to your callers' privacy requests, with our reasonable assistance.
• Keeping your account credentials secure and managing who on your team has access.
• Not using the service for regulated data categories your own compliance program does not permit.

You are solely responsible for obtaining any legally required disclosures and consents before calls are answered by an AI system, transcribed, analyzed, or recorded. Recording and AI-disclosure laws vary by country, state, and province, and some require all-party consent. Configure your greeting to include the disclosures your jurisdiction requires, and disable recording or transcription if you cannot obtain valid consent.

The service is intended for businesses and is not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child's information reached us, contact us and we will delete it.

Our service and providers may store and process data in countries other than yours, including the United States. Where required, we rely on appropriate safeguards for those transfers. By using the service you understand that your data may be processed outside your country of residence.

Depending on where you live, you may have rights to access, correct, export, or delete personal information, to object to or restrict certain processing, and to withdraw consent. You can update most account and business information directly in the app or dashboard. You can delete your account in the iOS app under Settings > Account > Delete Account.

To make a privacy request, email us at support@getassistant.ai. We may need to verify your identity. If you are a caller rather than a customer, contact the business you called first — they control that call data.

We may update this policy as the product evolves. When we do, we will revise the "Last updated" date at the top of this page, and for material changes we will provide additional notice in the app, dashboard, or by email.

Questions about this policy or a privacy request? Reach us at support@getassistant.ai or through the contact page with Privacy/legal selected. We respond to privacy requests as promptly as we reasonably can.