Privacy Policy

1. Introduction

Privacy1st ("we," "us," or "our") operates the privacy1st.app website and related services. This Privacy Policy explains how we collect, use, and protect your information when you use our AI-powered call screening service.

2. Information We Collect

We collect only what is necessary to provide the service:

• Account information: email address and password hash when you register.
• Phone numbers: the phone number(s) you configure for call screening.
• Call metadata: caller ID, call time, duration, and the screening outcome (blocked, forwarded, voicemail). We do not store full call recordings unless you explicitly enable voicemail transcription.
• Voicemail transcriptions: if enabled, AI-generated text summaries of voicemail messages. Audio is processed in real-time and not retained after transcription.
• Usage data: anonymized analytics such as feature usage and error logs to improve the service.

3. How We Use Your Information

• To screen and route incoming calls according to your configured policies.
• To display call history and analytics in your dashboard.
• To send service-related notifications (e.g., missed VIP calls).
• To improve and maintain the reliability of our service.

4. What We Never Do

• We never sell your personal data or call history to third parties.
• We never share your contact list with advertisers or data brokers.
• We never use your call data to build advertising profiles.
• We never retain raw call audio beyond real-time processing.

5. Data Storage & Security

All data is encrypted at rest (AES-256) and in transit (TLS 1.3). Call metadata and account data are stored in secured, access-controlled databases. We apply the principle of least privilege across all internal systems.

6. Data Retention

Call metadata is retained for 90 days by default. You can adjust this in your dashboard settings or request immediate deletion at any time. Account data is deleted within 30 days of account closure.

7. Third-Party Services

We use third-party providers for voice processing and telephony infrastructure. These providers process data in real-time only and do not retain your data beyond the duration of each call. We vet all providers for compliance with our privacy standards.

8. Your Rights

You have the right to:

• Access and export all data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data and account.
• Withdraw consent for optional features (e.g., voicemail transcription).

9. Changes to This Policy

We may update this policy from time to time. We will notify registered users of material changes via email at least 14 days before they take effect.

10. Contact

For privacy-related questions, reach us at privacy@privacy1st.app.