Privacy Policy
This Privacy Policy explains how Neyvo AI Inc. ("Neyvo", "we", "us") collects, uses, shares, and protects personal information when you visit neyvo.ai, use the Neyvo dashboard, or interact with an AI operator that a business has deployed on Neyvo.
Last updated: October 18, 2026
1. Our role
Neyvo is an omnichannel AI operator platform. Businesses (our Customers) use Neyvo to answer and place phone calls, send and reply to SMS, respond to email, and run web chat on their behalf.
- For information about our Customers' own accounts (for example, a dashboard user's name, email, and billing details), and for visitors to our website, Neyvo is the controller.
- For information processed on behalf of a Customer, such as the calls, messages, and contact lists of that Customer's own customers, Neyvo is a processor acting on the Customer's instructions. If you spoke with or received a message from a business using Neyvo, that business's privacy policy governs how your information is used, and requests should go to that business first. We will help them respond.
2. Information we collect
Information you give us
- Account information: name, work email, phone number, company name, and password or sign-in credentials.
- Billing information: billing contact and address. Card details are collected and stored by Stripe; we never store full card numbers.
- Contact and demo requests: name, email, subject, and message submitted through our contact form.
- Customer configuration: operator scripts, knowledge base content, business hours, and integration settings.
Information processed through the platform (on behalf of Customers)
- Voice: call audio, recordings (when enabled by the Customer), transcripts, phone numbers, call duration, and call outcomes.
- SMS and email: message content, sender and recipient addresses, delivery status, and opt-out status.
- Web chat: chat transcripts and any details a visitor chooses to share.
- Contact records: information the Customer imports or syncs from connected systems such as CRMs and calendars.
Information collected automatically
- Device and log data such as IP address, browser type, pages viewed, and timestamps.
- Product usage data in the dashboard, used to operate, secure, and improve the service.
3. How we use information
- To provide the service: route calls and messages, generate operator responses, book appointments, and record outcomes.
- To create and manage accounts, process payments, and maintain your credit wallet.
- To send transactional emails such as account verification, password resets, low-balance alerts, campaign status, and export-ready notices.
- To send product updates to account users who have not opted out. Every such email can be turned off in notification settings or via the unsubscribe link.
- To respond to support and demo requests.
- To monitor reliability, detect abuse, enforce our Acceptable Use Policy, and keep the platform secure.
- To comply with legal obligations.
We do not sell personal information, and we do not use Customer content (call audio, transcripts, or messages) to train general-purpose AI models.
4. Legal bases (EEA/UK visitors)
Where GDPR or UK GDPR applies, we rely on: performance of a contract (providing the service); legitimate interests (securing and improving the service, responding to inquiries); consent (where required, for example for optional marketing); and legal obligation.
5. How we share information
We share personal information only with:
- Service providers (sub-processors) that help us run the platform, listed below, under written data-protection terms.
- Integrations a Customer connects, such as a CRM or calendar, as directed by that Customer.
- Authorities, when required by law or to protect the rights, safety, and security of Neyvo, our Customers, or others.
- A successor entity in connection with a merger, acquisition, or sale of assets, subject to this policy.
6. Sub-processors
| Provider | Purpose | Location |
|---|---|---|
| Amazon Web Services | Cloud hosting, compute, storage, and email delivery | United States |
| Fly.io | Application hosting | United States |
| Vercel | Marketing website hosting | United States |
| Supabase | Database and authentication | United States |
| Twilio (incl. SendGrid) | Telephony, phone numbers, SMS, and email delivery | United States |
| LiveKit | Real-time voice and media transport | United States |
| Deepgram | Speech-to-text transcription | United States |
| ElevenLabs, Cartesia | Text-to-speech voice synthesis | United States |
| OpenAI, Anthropic, Google Cloud | Large language model processing | United States |
| Stripe | Payment processing and billing | United States |
| Sentry, Axiom | Error monitoring and operational logging | United States |
We will update this list before adding a new sub-processor that handles Customer content.
7. Data retention
- Call recordings and recording links are retained for 30 days by default. Customers can shorten or extend retention in their workspace settings.
- Transcripts, messages, and call outcomes are kept while the Customer's account is active, or until the Customer deletes them.
- Account and billing records are kept for the life of the account and afterward as required for tax, accounting, and legal purposes.
- Contact form submissions are kept for up to 24 months.
When a Customer closes their account, we delete or anonymize their workspace data within 90 days, except where law requires us to keep it.
8. Security
We encrypt data in transit (TLS 1.2+) and at rest, isolate each Customer's workspace, restrict production access to authorized personnel, and monitor systems continuously. See our Security page for details.
9. Cookies
Our marketing website uses only cookies needed for it to work (for example, keeping a preview session signed in). The dashboard uses essential cookies for authentication. We do not use third-party advertising cookies. You can block cookies in your browser settings, but parts of the dashboard may stop working.
10. Your rights and choices
Depending on where you live (for example, under GDPR or the California Consumer Privacy Act), you may have the right to:
- access the personal information we hold about you;
- correct inaccurate information;
- delete your information;
- object to or restrict certain processing;
- receive a portable copy of your information; and
- withdraw consent at any time, without affecting earlier processing.
Opting out of communications: click “unsubscribe” in any non-transactional email, change notification settings in the dashboard, reply STOP to any SMS, or tell an AI operator during a call that you do not want to be contacted again. We honor opt-outs across channels.
To exercise a right, email hi@neyvo.ai with the subject “Privacy request”. We respond within 30 days and may need to verify your identity. We will not discriminate against you for exercising your rights.
11. International transfers
Neyvo is based in the United States, and our sub-processors primarily process data there. Where we transfer personal information from the EEA, UK, or Switzerland, we use Standard Contractual Clauses or another lawful transfer mechanism.
12. Children
Neyvo is a business service and is not directed to children under 16. We do not knowingly collect their personal information.
13. Changes to this policy
We may update this policy from time to time. We will post the new version here with a new “Last updated” date and, for material changes, notify account owners by email.
14. Contact us
Neyvo AI Inc.
Email: hi@neyvo.ai
Website: neyvo.ai/contact