Effective 2026

Privacy policy

Katie processes phone calls and lead information on behalf of businesses that use the service. This policy explains what we collect, why we process it, and how to contact us about privacy requests.

Data we process

• Account information, such as name, email, business name, website, and team roles.
• Caller information, such as phone number, name, address, requested service, urgency, and notes shared during a call.
• Call metadata, transcripts, summaries, recordings where enabled, Vapi call IDs, and delivery status.
• Integration settings, OAuth account metadata, webhook URLs, and delivery logs.
• Billing identifiers and subscription status from Stripe. Full card details are handled by Stripe, not stored by Katie.
• Operational metadata such as IP-derived rate-limit hashes, user agent strings, audit/admin notes, and error logs.

How we use data

We use data to provide the receptionist service, authenticate users, route calls, personalize assistant prompts, extract and deliver leads, process subscriptions, prevent abuse, troubleshoot issues, and improve reliability and product quality.

Subprocessors

Katie uses third-party providers for core functionality, including Vapi for voice orchestration, Supabase for database and authentication, Stripe for payments, hosting providers for deployment, AI model providers for extraction and prompt generation, and email/SMS providers where messaging tools are enabled.

Integrations

If you connect Google, webhook, CRM, calendar, email, or partner integrations, Katie processes the minimum data needed to authenticate and deliver the configured handoff. You can disconnect integrations from the dashboard where supported.

Retention

We retain account, billing, call, and lead data while your account is active and as needed for legal, security, backup, and operational purposes. You may request deletion; we will delete or de-identify eligible data within a reasonable period unless retention is required by law or legitimate business obligations.

Security

We use access controls, row-level security, webhook signature verification, OAuth state checks, encrypted credential storage, and secret-managed service keys to protect data. No internet service can be guaranteed perfectly secure, but we work to reduce risk and limit access to operational need.

Your choices and rights

Depending on your location, you may have rights to access, correct, export, delete, or object to certain processing of personal information. Businesses using Katie are responsible for responding to caller requests where they are the data controller.

Contact

For privacy questions or data requests, contact [email protected].