Privacy Policy
HelloSri LLC d/b/a Vectoryze · Last updated: August 15, 2026
Effective date: August 15, 2026 · Version: v2-2026-08
Vectoryze (HelloSri LLC, Texas) provides AI phone receptionists to businesses. This policy explains what we collect, why, and what happens to it — in plain English, because your callers' trust is the product.
1. Two kinds of data, two roles
- Your account data (your name, business, email, billing, knowledge base, settings): we are the controller — we decide how it's used, as described here.
- Your callers' data (recordings, transcripts, messages, bookings, phone numbers of people who call your receptionist): we are the processor — we handle it only to provide the service to you. You are the controller of your callers' data and responsible for any notice you owe them.
2. What we collect and why
| Data | Why | Legal basis |
|---|---|---|
| Account + billing info | provide and bill the service | contract |
| Knowledge base you provide | it's what your AI answers from | contract |
| Call recordings + transcripts | so you can review every call; quality | contract |
| Caller phone numbers | callbacks, booking confirmations, your alerts | contract |
| Usage metrics (minutes, call counts) | metering, billing, abuse prevention | contract / legitimate interest |
| Payment card | handled by Stripe — we never see the number | contract |
We do NOT sell data. We do NOT use your data or your callers' data to advertise to anyone. We do not train AI models on your data, and our AI providers process it under agreements that prohibit them from training on it. We do not create voiceprints or biometric identifiers — audio is transcribed to text; no speaker-identification or voice-matching technology is used (Tex. Bus. & Com. Code §503.001 and similar biometric laws are respected by design). Our websites and dashboard use no advertising trackers.
3. Retention (the actual schedule)
| Data | Kept |
|---|---|
| Call recordings | deleted within 14 days (our voice vendor's retention window) |
| Transcripts + call logs | life of your account + 30 days |
| Knowledge base | deleted 30 days after account close |
| Expired trial accounts (never activated) | fully purged 60 days after expiry |
| Signup/lead records | 12 months |
| Billing records | as tax law requires |
Closing your account starts the clocks; nothing waits for a request. You can also request earlier deletion (§6).
4. Where your data lives (subprocessors)
We run on a small set of vendors, each doing one job. The current list is always at vectoryze.ai/subprocessors. We add a subprocessor only when the service needs it, and the page is updated before new categories of data flow.
5. Security
Data is encrypted in transit and at rest; access is tenant-isolated at the database layer (row-level security); per-tenant webhook secrets authenticate voice traffic; sensitive patterns (card numbers, SSNs) are redacted from transcripts before storage; a human is paged on anomalies. No system is perfect — if a breach affects your data, we'll notify you without unreasonable delay.
6. Your rights (and your callers')
Email info@vectoryze.ai from your account email to access, correct, export, or delete your data — no forms, no fee, answered within 30 days. If one of your callers asks us to delete their data, we'll route the request to you (their controller) and help you honor it. We honor these rights for everyone, not just where a specific state law requires it — including voluntary alignment with the Texas Data Privacy and Security Act's principles (as a small business we are largely exempt from it; we follow its spirit anyway and never sell sensitive data). US-only service: Vectoryze is offered to US businesses; GDPR is out of scope by design.
7. Children
The service is for businesses and not directed at children; we don't knowingly collect children's data.
8. Changes and contact
Material changes are emailed 14 days before taking effect. Contact: info@vectoryze.ai · HelloSri LLC d/b/a Vectoryze, Sugar Land, TX.
Google user data (Calendar integration)
If you connect your Google Calendar, we access only: (1) your free/busy intervals — start and end times only, never event titles, descriptions, or attendees — so your receptionist never offers callers a time you already have booked; and (2) permission to create and manage the calendar events our service books for you. We do not read your other events or any other Google data.
The use of raw or derived user data received from Workspace APIs will adhere to the Google User Data Policy, including the Limited Use requirements. Google user data is used solely to provide the features above. We do not transfer it to third parties except as necessary to provide those features; we do not use it for advertising; we do not sell it; and we do not use it — raw, aggregated, anonymized, or derived — to create, train, or improve any machine-learning or artificial-intelligence models, ours or anyone else's. Humans do not read this data. Free/busy responses are processed in memory per request and are not stored. You can disconnect at any time from your dashboard or from your Google Account security settings, which revokes our access.
SMS / text messaging
- Text messages are sent on behalf of the business whose receptionist you interacted with: when you speak with a Vectoryze AI receptionist, you may verbally consent during the call to receive transactional text messages (such as appointment or booking confirmations) from that business at the number you're calling from. Vectoryze sends those messages as the business's service provider.
- Message frequency varies; typically one message per booking, plus replies to messages you send us.
- Message and data rates may apply.
- Reply STOP to opt out at any time, or HELP for help. Consent to receive texts is not a condition of any purchase.
- No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent are not shared with any third parties, except for vendors acting on our behalf to deliver the messages.