The short version
You can talk to Sam without worrying. We keep your call transcripts so we can remember you between calls and so a human can review safety-flagged conversations. We delete recordings after 30 days unless you ask us to keep them. We don't sell your data. We don't share it with advertisers. We don't train any AI on what you say. If you delete your account, we delete your data.
What we collect
Account info. Email (required). Optional: your display name, phone number, billing address.
Call content. Audio recordings of your calls, text transcripts generated from those recordings, and short summaries our AI extracts to remember you between calls. The extracted memory is stored as plain text on your account and is visible + editable by you anytime at /account.
Usage data.How many calls you've had, their duration, when they happened, whether they completed or failed. This powers your billing, your retention reports, and our service reliability.
Payment data. Handled by Stripe. We never see your full card number — Stripe gives us a token, an amount, and a billing state. That billing state is stored for revenue reporting (this is how revenue-by-state breakdowns work).
Rate-limit data. Anonymous Try-It calls are capped per-IP per day. We store a SHA-256 hash of your IP and the date — never the raw IP.
What we use it for
Delivering the service.Your account info, call history, and memory exist so Sam can be a friend who remembers you. That's the entire product.
Safety review. Every call transcript is scanned by an automated pattern matcher (the source of which is public in our repo) for crisis or advice patterns. Flagged calls go to a small human team for review within 24 hours. We do this to make sure the assistant responded appropriately, not to monitor your conversation.
Billing + product analytics. Usage data drives your billing page, the admin dashboards we use to improve the product, and aggregate reporting (like revenue-by-state — never with your personal identifiers).
Engagement texts (opt-in only).If you give us a phone number and opt in, we may text you when it's been a while since you last called, or when your minute balance is low. Reply STOP anytime to opt out — handled automatically.
What we do NOT do
- We do not sell your data, ever.
- We do not share your transcripts or memory with advertisers, data brokers, or anyone outside our small team and the third-party services listed below.
- We do not train any AI model on what you say. Not ours, not anyone else's.
- We do not listen to your calls in real time. Recordings are created and stored; nobody at CallByrd listens unless a call is automatically safety-flagged.
- We do not have ads. The product is funded by the minutes you buy, not by selling attention.
Third-party services we use
CallByrd is a small operation. To deliver the product we rely on a few external providers, each of which sees the slice of data necessary for their job:
- Supabase — hosts our database (your account, memory, call metadata, billing records) and authentication.
- Vapi — runs the actual phone-call infrastructure and stores call recordings for the 30-day retention window.
- Anthropic— our AI assistant uses Anthropic's Claude model to generate responses and to extract durable memory from transcripts after each call. Anthropic does not retain or train on data we send via their API.
- Stripe— payment processing. Stripe sees your card details; we don't.
- Twilio — SMS delivery for opt-in engagement texts.
- Resend — transactional email (receipts, account confirmations).
- Vercel — web hosting + infrastructure.
- Google Analytics— anonymous traffic metrics on our public marketing pages only (never on /admin, /account, /sign-in, /auth). You can opt out via Google's opt-out browser extension.
How long we keep things
- Call recordings: 30 days, then auto-deleted from Vapi. You can request earlier deletion of a specific recording from your account.
- Transcripts + summaries + extracted memory: kept while your account is active. You can edit or wipe them at any time from /account.
- Account + billing records: kept while your account is active. Required to be retained for 7 years after account deletion for tax/audit purposes.
- IP-hash rate-limit records: 90 days, then auto-purged. We never have the raw IP.
Your choices
Edit or delete what we remember. Visit /account to see and change the facts and notes the assistant has on you, or to delete specific recordings.
Opt out of SMS. Reply STOP to any text. Or uncheck the SMS box at /account.
Delete your account. Email hello@callbyrd.com and we'll wipe everything except records we're legally required to keep. Same-day turnaround in most cases.
Get a copy of your data.Same email — write and ask. We'll export it.
Crisis + safety
CallByrd is not a substitute for licensed mental health support. If you're in crisis, please call or text 988 (Suicide and Crisis Lifeline). Sam and Claire are instructed to refer to 988 immediately if they detect crisis language. See our safety page for the full stance.
Kids
CallByrd is for adults. You must be at least 18 to create an account. If we learn we have data on someone under 18, we delete it immediately. Parents — if your kid signed up, write to hello@callbyrd.com and we'll handle it the same day.
Changes to this policy
If we change anything material, we'll update the date at the top of this page and notify active users by email at least 30 days before the change takes effect.
Contact
Questions about anything here? Write to hello@callbyrd.com. A real human answers.
CallByrd is operated by Call Byrd LLC, 30 N Gould St Ste N, Sheridan, WY 82801, USA.