Legal
Privacy Policy
Effective date: September 30, 2026
The short version
- We process your call recordings only to transcribe, analyze, and report on them for you.
- For call data, you are in control. We act on your instructions as your service provider.
- We don't sell personal information, and we don't train AI models on your calls.
- You can ask us to delete your data at any time.
APX Intelligence ("APX," "we," "us," or "our") provides an AI platform that analyzes business phone calls, along with our website at apxintelligence.com (together, the "Services"). This Privacy Policy explains what information we collect, how we use and share it, and the choices you have.
1. Our Role: Customer Data vs. Account Data
We handle two kinds of information differently:
- Customer Data is the call information our customers send through the Services: call recordings, transcripts, call metadata, and the analyses, scores, and reports we generate from them. For Customer Data, our customer (the business that uses APX) decides what is collected and why, and we process it on their behalf and according to their instructions. If you were a caller on a call analyzed by APX and have questions about your information, please contact the business you called. We will help them respond to your request.
- Account and Website Data is information about the people who sign up for, use, or visit our Services. We decide how this information is used, as described below.
2. Information We Collect
Information you give us
- Account details: name, email address, password, organization name, and role
- Early access and demo requests: email address, plus the page you came from and any campaign parameters in the link
- Configuration: the agents, prompts, scorecards, thresholds, and call types you create
- Phone-system connection details, such as API credentials for Twilio, Telnyx or Aircall, or a webhook integration
- Messages you send us, such as support requests or security questions
- Billing details, which are handled by our payment processor. We do not store full payment card numbers.
Customer Data from your phone system
- Call recordings
- Call metadata, such as phone numbers, call direction, duration, and timestamps
- Transcripts produced from recordings, or transcripts you send us directly
- Analyses, scores, tags, and reports generated by your agents
Calls can include personal information about your callers and your team, such as names, contact details, account information, and anything else said on the call.
Information collected automatically
- Usage and log data: pages visited, features used, IP address, browser, and device type
- Website analytics through Umami and Vercel Analytics, which measure visits and button clicks without advertising cookies
- Email events, such as whether a notification was delivered or bounced
3. How We Use Information
- To provide the Services: fetch recordings, transcribe calls, run your agents, generate reports, and send the alerts and digests you configure
- To operate your account, authenticate you, and provide support
- To secure the Services, prevent abuse, and investigate errors
- To respond to early access and demo requests and send service or product updates (you can unsubscribe from non-essential email at any time)
- To understand how the website and product are used so we can improve them
- To bill for the Services and meet legal obligations
We do not use Customer Data to train or fine-tune AI models. We use Customer Data only to provide the Services to the customer it belongs to.
4. How We Share Information
We do not sell or rent personal information, and we do not share it for cross-context behavioral advertising. We share information only as follows:
Service providers (subprocessors)
We use vendors to host and run the Services, including Supabase (database, storage, authentication, and server functions), Vercel (hosting), AssemblyAI (transcription), Groq (AI model inference), and Resend (email). They may only use information to provide their services to us. The current list is on our Security page.
Within your organization
Customer Data is visible to the members of the organization it belongs to. Organization admins control who is a member.
Legal and safety
We may disclose information if required by law or valid legal process, or to protect the rights, safety, or security of APX, our customers, or others. Where allowed, we will notify the affected customer before disclosing Customer Data.
Business transfers
If APX is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction, subject to this Privacy Policy.
5. Security
We protect information with technical and organizational measures, including:
- Encryption in transit (TLS) and at rest
- Additional application-level encryption (AES-256-GCM) for phone-system credentials
- Database-level isolation so each organization can only access its own data
- Private storage for recordings, accessible only through short-lived signed links
Details are on our Security page. No system is perfectly secure. If we become aware of a security incident affecting your data, we will notify you as required by law and our agreements with you.
6. Data Retention
While your account is active, we keep Customer Data until you delete it or ask us to. Raw webhook payloads are deleted automatically after 30 days, and phone-system credentials are deleted as soon as you disconnect an integration.
When an account is closed
Within 30 days of account closure, we permanently delete the call content and related sensitive data:
- Call recordings and transcripts
- Analyses, scores, reports, and tags
- Call metadata that identifies people, such as phone numbers
- Agent prompts, scorecards, and phone-system credentials
Copies in backups are removed as those backups expire on their normal schedule.
We keep a limited set of records after closure, for as long as they are needed for the purposes below:
- Billing and account records, such as invoices, payment history, organization name, and account contacts, for tax, accounting, and legal purposes
- Usage statistics, such as the number of calls processed, processing volumes, and costs, stored without call content, to run and improve our business
- Security and system logs, for security, fraud prevention, and troubleshooting
- Email suppression records, so we continue to honor unsubscribe requests
- Anything else we are required to keep by law or need to resolve disputes or enforce our agreements
7. Your Rights and Choices
Depending on where you live, you may have the right to:
- Access the personal information we hold about you
- Correct inaccurate information
- Delete your information
- Export your information in a portable format
- Object to or restrict certain processing
- Opt out of marketing email by using the unsubscribe link in any such email
To make a request, email security@apxintelligence.com. We will verify your request and respond within the time required by law. If your request is about Customer Data (for example, you were a caller on a recorded call), we will forward it to the relevant customer and help them respond. We will not discriminate against you for exercising your rights.
California residents: the rights above include the rights to know, delete, and correct under the California Consumer Privacy Act. We do not sell or share personal information as those terms are defined in that law.
8. Cookies and Local Storage
We use cookies and browser storage that are needed to keep you signed in and to remember preferences such as light or dark mode. Our website analytics (Umami and Vercel Analytics) are designed to work without advertising or cross-site tracking cookies. We do not use third-party advertising cookies.
9. Call Recording Consent
Customers who record and send calls to APX are responsible for giving callers any required notice and obtaining any required consent under applicable call-recording and privacy laws. Some jurisdictions require the consent of every party to a call.
10. International Transfers
APX is based in the United States, and our service providers may process information in the United States and other countries. Where required, we use appropriate safeguards for these transfers.
11. Children
The Services are for businesses and are not directed to anyone under 18. We do not knowingly collect personal information from children through our website or accounts. If you believe we have, contact us and we will delete it.
12. Changes to This Policy
We may update this Privacy Policy. If we make material changes, we will update the effective date and notify account holders by email or in the Services before the changes take effect.
13. Contact Us
APX Intelligence
Email: security@apxintelligence.com