Privacy Policy

Last updated: April 17, 2026

SDN Bros Inc. (“Voipy”, “we”, “us”) operates voipy.app, call67.app, and related AI voice products. This policy explains what we collect and how we use it.

Information We Collect

Account data you give us (name, email, phone, facility name, organization).
Call data from inbound calls handled by our service: caller number, timestamp, duration, transcript, recording (when recording is enabled), and AI-extracted fields such as appointment requests.
Billing data handled by our payment processor, Stripe. We store your Stripe customer and subscription IDs; we do not store card numbers.
Usage and device data such as IP, browser, and pages viewed, used to operate and protect the service.

How We Use It

To provide the service, route calls, run the AI pipeline, send receipts and service notifications, improve the product, and comply with law. We do not sell your data.

Sharing

We share data with sub-processors only as needed to run the service: the phone carrier (Telnyx), payment processor (Stripe), infrastructure providers, email providers, and analytics. We require each to protect your data to at least the standards in this policy.

Security

Customer data is encrypted in transit (TLS 1.2+) and at rest. Call recordings are stored with per-tenant isolation. API keys are rotatable. For healthcare customers, a Business Associate Agreement is available on request.

Your Rights

You can request access, correction, export, or deletion of your personal data by emailing privacy@voipy.app. If you are a resident of California, the EU, or the UK, you have additional rights under CCPA / GDPR / UK GDPR that we will honor.

Retention

We retain account and call data for the life of your subscription plus 90 days. Recordings older than 180 days are deleted unless you have a legal hold in place.

Children

Voipy is not directed to children under 13 and we do not knowingly collect information from them.

Contact

SDN Bros Inc. · privacy@voipy.app