Privacy Policy
HelloSri LLC d/b/a Vectoryze · Last updated: October 27, 2026
Effective date: October 27, 2026 · Version: v3-2026-10 · Replaces v2-2026-08
Vectoryze (HelloSri LLC, Texas) provides AI assistants that answer phones and web chat for businesses. This policy explains what we collect, why, and what happens to it — in plain English, because your callers' trust is the product.
1. Two kinds of data, two roles
- Your account data (your name, business, email, billing, knowledge base, settings): we are the controller — we decide how it's used, as described here.
- Your callers' data (recordings, transcripts, messages, bookings, phone numbers of people who call your assistant): we are the processor — we handle it only to provide the service to you. You are the controller of your callers' data and responsible for any notice you owe them.
2. What we collect and why
| Data | Why | Legal basis |
|---|---|---|
| Account + billing info | provide and bill the service | contract |
| Knowledge base you provide | it's what your AI answers from | contract |
| Call recordings + transcripts | so you can review every call; quality | contract |
| Caller phone numbers | callbacks, booking confirmations, your alerts | contract |
| Usage metrics (minutes, call counts) | metering, billing, abuse prevention | contract / legitimate interest |
| Payment card | handled by Stripe — we never see the number | contract |
| Ad measurement (Meta) | The Meta Pixel on vectoryze.ai, on the signup pages of app.vectoryze.ai, and on our own booking page (demos.vectoryze.ai/b/vectoryze) measures whether our ads bring visits, trial starts, booked calls and first payments. When you start a trial, book a call with us, or make your first payment, we also send Meta your email, phone and name, hashed (scrambled) before they leave us, so Meta can match the event to an ad. Never on the dashboard, never on a customer's booking page, never call recordings, transcripts or your callers' data | legitimate interest (opt out via your Meta ad settings, a browser tracker blocker, or by emailing info@vectoryze.ai) |
We do NOT sell data. We do NOT use your business data or your callers' data to advertise to anyone; the only data we share for advertising is the ad-measurement signal in the table above. We do not train AI models on your data, and our AI providers process it under agreements that prohibit them from training on it. We do not create voiceprints or biometric identifiers — audio is transcribed to text; no speaker-identification or voice-matching technology is used (Tex. Bus. & Com. Code §503.001 and similar biometric laws are respected by design). The Meta Pixel runs on vectoryze.ai, on the signup pages, and on our own booking page so we can tell whether our ads work. The customer dashboard, your own booking page, and the assistants themselves use no advertising trackers.
3. Retention (the actual schedule)
| Data | Kept |
|---|---|
| Call recordings | deleted within 14 days (our voice vendor's retention window) |
| Transcripts + call logs | life of your account + 30 days |
| Knowledge base | deleted 30 days after account close |
| Expired trial accounts (never activated) | fully purged 60 days after expiry |
| Signup/lead records | 12 months |
| Billing records | as tax law requires |
Closing your account starts the clocks; nothing waits for a request. You can also request earlier deletion (§6).
4. Where your data lives (subprocessors)
We run on a small set of vendors, each doing one job. The current list is always at vectoryze.ai/subprocessors. We add a subprocessor only when the service needs it, and the page is updated before new categories of data flow.
5. Security
Data is encrypted in transit and at rest; access is tenant-isolated at the database layer (row-level security); per-tenant webhook secrets authenticate voice traffic; sensitive patterns (card numbers, SSNs) are redacted from transcripts before storage; a human is paged on anomalies. No system is perfect — if a breach affects your data, we'll notify you without unreasonable delay.
6. Your rights (and your callers')
Email info@vectoryze.ai from your account email to access, correct, export, or delete your data — no forms, no fee, answered within 30 days. If one of your callers asks us to delete their data, we'll route the request to you (their controller) and help you honor it. We honor these rights for everyone, not just where a specific state law requires it — including voluntary alignment with the Texas Data Privacy and Security Act's principles (as a small business we are largely exempt from it; we follow its spirit anyway and never sell sensitive data). US-only service: Vectoryze is offered to US businesses; GDPR is out of scope by design.
7. Children
The service is for businesses and not directed at children; we don't knowingly collect children's data.
8. Changes and contact
Material changes are emailed 14 days before taking effect. Contact: info@vectoryze.ai · HelloSri LLC d/b/a Vectoryze, Sugar Land, TX.
Google user data (Calendar integration)
If you connect your Google Calendar, we access only: (1) your free/busy intervals — start and end times only, never event titles, descriptions, or attendees — so your assistant never offers callers a time you already have booked; and (2) permission to create and manage the calendar events our service books for you. We do not read your other events or any other Google data.
The use of raw or derived user data received from Workspace APIs will adhere to the Google User Data Policy, including the Limited Use requirements. Google user data is used solely to provide the features above. We do not transfer it to third parties except as necessary to provide those features; we do not use it for advertising; we do not sell it; and we do not use it — raw, aggregated, anonymized, or derived — to create, train, or improve any machine-learning or artificial-intelligence models, ours or anyone else's. Humans do not read this data. Free/busy responses are processed in memory per request and are not stored. You can disconnect at any time from your dashboard or from your Google Account security settings, which revokes our access.
SMS / text messaging
- Text messages are sent on behalf of the business whose assistant you interacted with: when you speak with a Vectoryze AI assistant, you may verbally consent during the call to receive transactional text messages (such as appointment or booking confirmations) from that business at the number you're calling from. Vectoryze sends those messages as the business's service provider.
- Message frequency varies; typically one message per booking, plus replies to messages you send us.
- Message and data rates may apply.
- Reply STOP to opt out at any time, or HELP for help. Consent to receive texts is not a condition of any purchase.
- No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent are not shared with any third parties, except for vendors acting on our behalf to deliver the messages.