Privacy policy

• Contact and account details: your name, email address, phone number, agency or business name, and any other details you provide in a form or in your account.
• Job applications: the role, where you're based, links to your work and anything else you include when you apply on our careers page.
• Sign-in details: the sign-in codes and links we email you. If you sign in with Google or GitHub, it shares your name, email address and account ID with us. We never see your Google or GitHub password.
• Billing details: your balance, fees, usage and invoices. Card details are collected and stored by our payment processor, Stripe. We never see your full card number.
• Communications: when a business uses AgencyPhone, we store its calls (numbers, times and durations), text messages, voicemails, contacts and notes, and call recordings if the business turns recording on. We store them so the service can work.
• Device and usage details: IP address, browser and device type, approximate location based on your IP address, and a log of sign-ins and account changes for security.
• Cookies: only the cookies needed to keep you signed in, remember a trusted device and keep the site secure. We do not use advertising cookies.

By submitting your information or using AgencyPhone, you agree that we may use it to:

• Provide AgencyPhone: connect calls, deliver texts and voicemails, show your inbox, and send events to the software your agency connects.
• Provide information about your request and support your account.
• Keep accounts secure, for example with sign-in codes, fraud and abuse prevention, and security logs.
• Bill for subaccounts, numbers and usage.
• Meet legal and carrier requirements, such as texting registration.
• Send service emails, such as sign-in codes, receipts and important account notices.
• Send you marketing communications about our company, if you agreed to receive them.
• Improve our services and customer support.

If you choose to sign in with Google, Google shares your Google account's name, email address and account ID with us, and your profile picture if your account has one. We do not ask Google for any other data.

• We use this information only to sign you in and to match you to your AgencyPhone account.
• We do not sell it, use it for advertising, or share it with anyone other than the service providers listed below that host AgencyPhone.
• We keep it while your account is open and delete it when your account is deleted. You can also remove AgencyPhone's access at any time in your Google account settings.
• AgencyPhone's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

AgencyPhone is used by agencies and the businesses they serve. When a business calls or texts people from its AgencyPhone number, that business and its agency decide what information is collected and why, and we process it on their behalf to provide the service.

If you called or texted a business that uses AgencyPhone and have a question about your information, contact that business first. We help businesses answer these requests, and you can also reach us at the address below.

• We do not sell or rent your information.
• We share information only with the service providers that run AgencyPhone, and only for that purpose:
  • Telnyx connects calls and delivers text messages.
  • Supabase hosts our database and file storage.
  • Vercel hosts our website and app.
  • Resend sends our emails.
  • Stripe processes payments.
  • Google and GitHub provide Google and GitHub sign-in, if you choose them.
• We never share mobile phone numbers or text message opt-in data and consent with third parties or affiliates for their marketing or promotional purposes.
• Inside an account: an agency can see its subaccounts' settings and usage, and its team can read and reply to those clients' calls and texts, limited to the clients the agency gives each person access to.
• Connected software: an agency can connect its own software through the AgencyPhone API and webhooks. That software receives call, text and voicemail information for the agency's subaccounts, and the agency is responsible for how it is used.
• We may share information when the law requires it, to respond to valid legal requests, or to protect someone's safety, including with emergency services.
• Your data is encrypted in transit, stored securely and only accessible to authorized personnel. Sign-in codes, API keys and device tokens are stored only in a form that cannot be read back.

Our database is hosted in Canada. Our website and some of our service providers process information in the United States.

• Text messages and call records: 2 years.
• Call recordings and voicemails: 1 year.
• When a subaccount is closed, its numbers are released and its information is deleted after a 30-day closing period.
• Account details are kept while your account is open, and afterwards only as long as the law requires, for example for tax and accounting records and security logs.

• You may opt out of marketing communications at any time by clicking “unsubscribe” in our emails or replying “STOP” to our text messages.
• If you receive texts from a business that uses AgencyPhone, reply STOP to stop texts from that number.
• You can ask to see, correct or delete your information. To request data removal, contact us at info@creativecodeca.com. We may keep records the law requires us to keep, such as billing records.
• Client team members can also delete their account in the AgencyPhone mobile app.

AgencyPhone is a service for businesses and is not intended for children. We do not knowingly collect information from children.

We may update this policy occasionally. When we make significant changes, we will update the effective date and tell account owners by email. Please review it periodically. Our terms of service explain the rules for using AgencyPhone.

CreativeCodeCA Web Inc., info@creativecodeca.com