Privacy Policy

Effective Date: May 15, 2026
Last Updated: May 15, 2026

BeAuthentic Inc. ("BeAuthentic," "we," "us," or "our") provides voice AI agent services and related communications, including SMS/text messaging used in connection with those services (collectively, the "Services"). This Privacy Policy explains what information we collect, how we use it, how we share it, and the choices you have. By using the Services, calling or being called by one of our voice AI agents, or by opting in to receive text messages from us, you consent to the practices described below.

1. Scope

This Privacy Policy applies to information we collect through:

• Inbound and outbound phone calls handled by our voice AI agents;
• SMS and MMS messages sent to or received from numbers operated by BeAuthentic;
• Our websites, web forms, and customer support channels; and
• Any other interaction in which this Privacy Policy is referenced or linked.

BeAuthentic operates as a service provider for business customers ("Clients") who use our platform to interact with their own end users. When we process information on behalf of a Client, we do so under that Client's instructions and the privacy policy of that Client also applies.

2. Information We Collect

2.1 Information you provide directly

• Contact details: name, phone number, email address, mailing address, and company name.
• Account and billing information for Clients, including authorized contacts and payment details processed by our payment processor.
• Consent records: the time, source, and method by which you provided consent to be contacted by voice and/or SMS, and any later opt-out.
• Content of communications: what you say during a call, what you type or send in a text message, and any attachments.

2.2 Voice and call data

• Call audio: recordings of inbound and outbound calls handled by our voice AI agents, where permitted by law and after appropriate notice and/or consent.
• Voice transcripts: automated speech-to-text transcripts of those calls.
• Call metadata: caller ID / ANI, dialed number / DNIS, call direction, date, time, duration, disposition, hold and transfer events, and the AI agent or workflow used.

2.3 SMS / text messaging data

• Mobile phone numbers, opt-in source, opt-in timestamp, opt-out events, message content, message status (delivered, failed), and carrier-provided metadata.

2.4 Automatically collected information

• Device, browser, and network information when you visit our websites, including IP address, user agent, referring page, and pages viewed.
• Cookies and similar technologies for authentication, analytics, and preference storage.

3. How We Use Information

We use the information described above to:

• Provide, operate, and maintain the voice AI agent and messaging Services, including placing and receiving calls, sending and receiving texts, routing, transcription, and call summarization;
• Authenticate callers, prevent fraud, and protect the security of the Services;
• Improve our AI models and Services, including by analyzing call audio and transcripts (we use de-identified or aggregated data wherever practical for this purpose);
• Respond to support requests, comply with Client instructions, and communicate with Clients and end users;
• Send transactional, account, and (where consented) marketing communications;
• Comply with legal obligations, including telecommunications, consumer-protection, and recordkeeping requirements; and
• Enforce our Terms of Service and protect our rights, property, and users.

4. SMS / Text Messaging Program (A2P 10DLC Disclosure)

5. Call Recording, Monitoring, and AI Processing

Calls to or from BeAuthentic voice AI agents may be recorded, transcribed, and analyzed for quality assurance, training, fraud prevention, compliance, and improvement of our AI models. Before recording begins in jurisdictions that require notice or consent of all parties, the voice AI agent will provide an audible disclosure that the call may be recorded and that an automated AI system is being used. If you do not consent, you may end the call or request a human representative where available; declining consent may limit our ability to provide the Services.

We do not use the contents of calls for any purpose unrelated to providing and improving the Services, and we do not sell call audio or transcripts.

6. How We Share Information

We share information only as described below:

• With Clients. When you interact with a voice AI agent or SMS program operated on behalf of a Client, we share the information from that interaction with that Client.
• Service providers / subprocessors. We use vetted vendors for cloud hosting, telecommunications and messaging delivery, speech-to-text, large language model inference, analytics, customer support, and payment processing. These vendors are bound by contractual confidentiality and data-protection obligations and may only use the information to provide services to us.
• Legal and safety. We may disclose information if required by law, subpoena, or court order, or where we believe in good faith that disclosure is necessary to protect rights, safety, or property, to investigate fraud, or to respond to a government request.
• Business transfers. If BeAuthentic is involved in a merger, acquisition, financing, reorganization, or sale of assets, information may be transferred as part of that transaction, subject to the receiving party honoring this Privacy Policy.
• With your direction or consent. We may share information at your request or with your consent.

We do not sell personal information, and we do not share SMS opt-in or phone-number data with third parties for their own marketing or promotional purposes.

7. Data Retention

We retain personal information for as long as needed to provide the Services, comply with our legal obligations (including recordkeeping for telecommunications, tax, and consumer-protection laws), resolve disputes, and enforce our agreements. Call recordings and transcripts are typically retained for up to 24 months unless a Client configures a shorter or longer period or a legal hold applies. Consent and opt-out records are retained for at least 4 years.

8. Security

We use administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit, encryption at rest for sensitive data stores, role-based access controls, logging, and vendor security reviews. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

9. Your Choices and Rights

• Opt out of SMS: reply STOP to any message.
• Opt out of marketing email: use the unsubscribe link in any marketing email.
• End a call: you may end a call with a voice AI agent at any time, and you may request a human representative where available.
• Access, correction, deletion, and portability: depending on where you live (including California, Virginia, Colorado, Connecticut, Utah, and the EEA/UK), you may have the right to request access to, correction of, deletion of, or a portable copy of your personal information, and to object to or restrict certain processing. To exercise these rights, contact us at info@beauthentic.io. We will verify your request and respond within the time required by applicable law.
• Authorized agents: you may use an authorized agent to submit a request on your behalf, subject to verification.
• Appeals: if we deny a request, you may appeal by replying to our response.

10. California Privacy Notice

Under the California Consumer Privacy Act (as amended), California residents have the rights listed in Section 9. In the prior 12 months we have collected the categories of information described in Section 2 (identifiers, customer records, commercial information, internet/network activity, geolocation inferred from IP address, audio/electronic information, and inferences). We do not sell personal information and do not share personal information for cross-context behavioral advertising. We retain information for the periods described in Section 7.

11. Children's Privacy

The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us so we can delete it.

12. International Users

BeAuthentic is based in the United States, and information we collect is processed in the United States and other countries where our service providers operate. If you are located outside the United States, you understand that your information will be transferred to, and processed in, the United States, which may have data-protection laws different from those of your country.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date above and, for material changes, provide additional notice (for example, by email or an in-product notice). Your continued use of the Services after the effective date constitutes acceptance of the updated policy.

14. Contact Us

If you have questions about this Privacy Policy or our privacy practices, contact:

BeAuthentic Inc.
PO Box 478
Santa Clara, CA
Email: info@beauthentic.io