Privacy Policy

This document is a reference draft and has not yet been reviewed by a lawyer. It should not be treated as legal advice or a final version until validated.

Last updated: 2026-08-04

This Privacy Policy explains what information AfterHours AI (operated by Thingstrade LLC, "we") collects when you use our site and dashboard, and how we use, share, and protect it.

1. Information we collect

Account data: name, email, phone, and password (managed by Supabase Auth) when you create an account.
Call data: origin and destination number, duration, audio recording, transcript, and AI-generated summary of calls your Twilio number receives outside business hours.
Billing data: subscribed plan and payment details processed by Stripe (we do not store card numbers on our servers).
Usage data: pages visited, actions taken in the dashboard, IP address, and device/browser data.

2. Call recording notice

AfterHours AI records and transcribes calls the AI answers. If you enable this for your business, you are responsible for complying with your jurisdiction's laws on call recording notice and consent (for example, including an audible notice at the start of the call where required).

3. How we use information

We use data to operate the service (answering calls, generating summaries, notifying your team), process payments, provide support, improve the product, and comply with legal obligations.

4. Who we share information with

We only share data with the providers we need to operate the service:

Twilio — telephony, recording, and SMS messaging.
Supabase — authentication and database, with Row Level Security per organization.
Stripe — payment processing and billing.

We do not sell your personal information to third parties.

5. Data retention

Recordings and transcripts are kept according to your plan's retention days (see the Pricing section). Account data is kept while your account is active.

6. Your rights

You can request access, correction, or deletion of your personal data by reaching out through the Contact page.

7. Security

We enforce per-organization access controls through Row Level Security and transmit data over encrypted connections (HTTPS).

8. Children's privacy

Our service is directed at businesses and is not intended for minors.

9. Changes to this policy

We may update this policy. We will post the last updated date at the top of this page.