Privacy Policy

1. Introduction

TECHMOOSE AI ("we", "us", or "our") is committed to protecting the privacy of our users ("you", "your"). This Privacy Policy explains how we collect, use, store, and protect information when you use the TECHMOOSE platform ("the Service"). By using the Service, you consent to the practices described in this policy.

2. Information We Collect

2.1 Account Information

When you register for the Service, we collect your email address, name (if provided), and account credentials. If you sign up via Google OAuth, we receive your Google profile information (name and email) as authorized by you.

2.2 Agent Configuration Data

We store the agent configurations you create, including agent names, system prompts, greeting messages, voice selections, language model preferences, data collection field definitions, and notification settings. This data is necessary to provide the core functionality of the Service.

2.3 Call Data

When calls are handled by your AI agents, we collect and store: caller phone numbers, call duration, call status, AI-generated transcripts and summaries, and data collected during the call based on your agent's configuration (such as caller name, email, or other fields you define). Call data is stored in our database and used to provide call logs, analytics, and email notifications to you.

2.4 Usage Data

We track usage metrics including minutes consumed, number of calls, agents created, and phone numbers provisioned. This data is used for billing, plan enforcement, and to provide usage analytics in your dashboard.

2.5 Technical Data

We automatically collect certain technical information including IP addresses, browser type, device information, and access timestamps. This data is used for security monitoring, abuse prevention, and service improvement.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Process and manage your AI voice agents and phone calls
• Send post-call notification emails to your configured recipients
• Send usage alert emails when you approach or reach your plan limits
• Track usage for billing and plan enforcement purposes
• Communicate with you about your account, service updates, and support requests
• Detect and prevent fraud, abuse, and security incidents
• Comply with legal obligations

4. Third-Party Service Providers

We share data with the following third-party providers as necessary to operate the Service:

• Supabase — Database hosting and authentication. Stores account data, agent configurations, and call records.
• Twilio — Telephony provider. Receives caller phone numbers and call routing data to facilitate phone calls.
• ElevenLabs — AI voice provider. Processes call audio and generates AI responses in real-time during calls. Provides post-call transcripts and summaries.
• OpenAI / Anthropic / Google / Groq — Language model providers. Process conversation context to generate AI responses (via ElevenLabs).
• Resend — Email delivery. Sends notification and alert emails on our behalf.
• Vercel — Hosting provider. Serves the application and processes API requests.

Each third-party provider processes data according to their own privacy policy. We do not sell your personal information to any third party.

5. Data of Your Callers

When someone calls your AI agent, their phone number and the content of their conversation is collected and stored as part of the call record. As the agent owner, you are the data controller for your callers' data, and you are responsible for ensuring that your use of the Service complies with applicable privacy laws in your jurisdiction (including but not limited to GDPR, CCPA, Australian Privacy Act, and TCPA). This includes providing appropriate disclosures to callers about data collection and recording, and responding to data subject access requests from callers. We act as a data processor on your behalf with respect to your callers' data.

6. Data Retention

Account data is retained for the duration of your active account. Call records and transcripts are retained for as long as your account is active and for 30 days after account deletion. Usage records are retained for billing and audit purposes for up to 12 months after the relevant billing period. You can request deletion of your data at any time by contacting us at support@techmoose.ai. Upon receiving a deletion request, we will permanently delete your data within 30 days, except where retention is required by law.

7. Data Security

We implement appropriate technical and organizational measures to protect your data, including encryption in transit (TLS/HTTPS), secure authentication (including OAuth), webhook signature validation (HMAC-SHA256), rate limiting and abuse prevention, and access controls on our database and infrastructure. While we take reasonable measures to protect your information, no method of transmission over the Internet or method of electronic storage is 100% secure, and we cannot guarantee absolute security.

8. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access — Request a copy of the personal data we hold about you
• Correction — Request correction of inaccurate or incomplete data
• Deletion — Request deletion of your personal data
• Portability — Request your data in a structured, commonly used format
• Objection — Object to certain types of data processing
• Restriction — Request restriction of processing in certain circumstances

To exercise any of these rights, please contact us at support@techmoose.ai. We will respond to your request within 30 days.

9. Cookies and Tracking

The Service uses essential cookies for authentication and session management. These cookies are strictly necessary for the Service to function and cannot be disabled. We do not use advertising cookies, tracking pixels, or third-party analytics that track you across websites. We may use basic server-side analytics to understand service usage patterns in aggregate.

10. Children's Privacy

The Service is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child under 18, we will take steps to delete that information promptly.

11. International Data Transfers

Your data may be processed and stored in countries outside your country of residence, including the United States and Australia, where our service providers operate their infrastructure. By using the Service, you consent to the transfer of your data to these locations. We ensure that any international data transfer is conducted in accordance with applicable data protection laws.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. For significant changes, we may also send you an email notification. Your continued use of the Service after any changes constitutes acceptance of the updated policy.

13. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have concerns about how your data is being processed, please contact us at support@techmoose.ai.