Privacy Policy
Last updated: 6/11/2026
1. Who we are
ReplyMaya, Inc. ("ReplyMaya", "we", "us") provides an AI receptionist service that answers, transcribes, and routes phone calls on behalf of small businesses ("Customers"). This Policy explains how we handle information from Customers and from people who call a Customer's business line ("Callers").
2. Information we collect
From Customers: name, email, business name, business phone, payment information (processed by Stripe), and configuration data such as business knowledge, calendar links, and forwarding numbers.
From Callers: phone number, voice recordings, transcripts, names and contact details voluntarily provided during a call, and call metadata (duration, timestamp, outcome).
3. How we use information
To provide the service: answer calls, transcribe audio, generate summaries, book appointments, deliver notifications to Customers, and improve speech recognition and response quality. Aggregate, de-identified usage may be used to improve the product.
4. Call recording & consent
ReplyMaya records inbound calls. Maya is configured to disclose recording at the start of every call. Customers are responsible for complying with two-party consent laws in their jurisdiction (including California, Florida, Illinois, Maryland, Massachusetts, Montana, New Hampshire, Pennsylvania, and Washington in the US, plus EU/UK/Canada/AUS equivalents). By using ReplyMaya, Customers represent they have authority to record their inbound calls and that recordings will be handled in compliance with applicable law.
5. Sharing
We share data with subprocessors strictly to deliver the service: Vapi.ai (call handling), ElevenLabs & Deepgram (voice and transcription), OpenAI (response generation), Stripe (payments), Supabase / Lovable Cloud (hosting and storage). We do not sell personal information.
6. Retention
Call recordings and transcripts are retained for up to 12 months by default. Customers can request earlier deletion at any time by emailing privacy@replymaya.com.
7. Your rights
Depending on your jurisdiction, you may have rights to access, correct, delete, or port your personal data, and to object to or restrict processing. Contact privacy@replymaya.com to exercise these rights.
8. Security
We use industry-standard encryption in transit and at rest. No system is perfectly secure; we will notify affected users of confirmed breaches as required by law.
9. Contact
ReplyMaya, Inc. — privacy@replymaya.com