Privacy Policy

What this policy covers

This Privacy Policy explains how JPM Inc. ("Yapper," "we," "us") collects, uses, stores, and shares information when you use our AI phone receptionist service at tryyapper.com and any related tools, dashboards, or APIs (the "Service"). It applies to business owners who sign up for Yapper and to callers who interact with the AI receptionist.

Information we collect

From business owners (account holders)

When you create an account and set up Yapper, we collect:

• Email address and password (for authentication through Supabase Auth)
• Business details you provide or that we extract from your website: business name, address, phone number, hours of operation, services offered, and a description of your business
• Payment information processed through Stripe (we do not store card numbers on our servers)
• Mobile phone number if you opt into SMS notifications (verified through a one-time code)

From callers

When someone calls your Yapper phone number, we collect:

• The caller's phone number (via caller ID)
• A full transcript of the conversation between the caller and the AI receptionist
• Call duration
• An AI-generated summary of the call, including whether the call was flagged as an emergency
• Call recordings (when enabled by our voice provider)

From your website

During onboarding, if you provide your website URL, we fetch and analyze the publicly available content on that page to auto-configure your AI receptionist. We extract business information like your name, address, phone number, hours, and services. We do not store your website's HTML after extraction is complete.

Automatically collected data

We use basic analytics to understand how people use the Yapper dashboard and website. This may include page views, device type, and general location data. We do not use third-party ad trackers.

How we use your information

• To provide the Service: answering calls, generating transcripts and summaries, and delivering notifications to you
• To configure your AI receptionist with accurate information about your business
• To process payments and manage your subscription
• To send you call summaries by email or SMS based on your notification preferences
• To improve the Service, fix bugs, and monitor for security issues
• To respond to support requests

Third-party services

Yapper relies on several third-party providers to operate. Each has their own privacy policy:

• Retell AI — handles AI voice calls, including real-time conversation and call recordings
• Supabase — hosts our database and handles authentication
• Stripe — processes all payment transactions
• Twilio — sends SMS notifications and handles phone verification
• Anthropic (Claude API) — analyzes website content during onboarding and generates call summaries
• Vercel — hosts the Yapper website and application

We only share the minimum data necessary for each provider to perform its function. We do not sell your data to any third party.

Data retention

We retain your account data and call records for as long as your account is active. If you cancel your subscription and request deletion, we will delete your business data, call logs, and transcripts within 30 days. Some data may be retained longer if required by law or for legitimate business purposes like resolving disputes.

Data security

All data is transmitted over HTTPS. Database access is protected by row-level security policies so users can only access their own data. API endpoints validate authentication on every request. Webhook signatures are verified for both Stripe and Retell. We do not store passwords in plain text. No system is 100% secure, and we cannot guarantee absolute security.

Caller awareness

When someone calls your Yapper number, they are interacting with an AI receptionist. It is your responsibility as the business owner to comply with any local or federal laws regarding call recording and AI disclosure in your jurisdiction. We recommend configuring your AI greeting to let callers know they are speaking with an automated system.

Your rights

You have the right to:

• Access the personal data we hold about you and your business
• Correct inaccurate information through your dashboard settings
• Request deletion of your account and associated data
• Export your call data
• Opt out of SMS notifications at any time through your dashboard

To exercise any of these rights, email us at hello@tryyapper.com.

Children's privacy

Yapper is not intended for use by anyone under the age of 18. We do not knowingly collect information from children. If you believe a child has provided us with personal information, contact us and we will delete it.

Changes to this policy

We may update this Privacy Policy from time to time. If we make significant changes, we will notify you by email or through the dashboard. The "last updated" date at the top of this page reflects the most recent revision.

Contact

Questions about this Privacy Policy or how we handle your data? Email us at hello@tryyapper.com.