Privacy policy
Version 1 · effective 2026-09-08
This page is a structural placeholder for Oomph Agentic Relay's privacy policy. The sections below are the ones this product cannot ship boilerplate privacy copy for. The rest of the document is not yet written.
Decided: do not soften into standard boilerplate
Sub-processors
We share data with third parties in the categories below to operate the product. We list categories, not company names, on this public page; a named list is maintained internally and is available on request (e.g. for a Data Processing Agreement).
| Category | Purpose | Data shared |
|---|---|---|
| Cloud AI providers | Power the AI voice agent during live calls, and generate call summaries and transcripts after a call ends. | Live call audio, call transcripts, and AI-generated call summaries. |
| Cloud hosting & infrastructure providers | Host the application, its databases, and stored call recordings. | All data described in this policy, as needed to operate the product. |
| A payment processor | Processes subscription and prepaid credit top-up payments. | Billing contact details and payment information. Card numbers are handled by the payment processor directly — we do not store them. |
In particular: live call audio and call transcripts are sent to cloud AI providers in order to run the voice agent and generate summaries.
Decided: do not soften into standard boilerplate
Data retention
We retain call recordings, transcripts, and account data indefinitely. There is currently no automatic expiry or deletion schedule. This is a deliberate, pre-launch decision (not an oversight) made on the basis that deletion is irreversible and real usage patterns are not yet known.
Do not replace the sentence above with standard “retained only as long as necessary” phrasing when this page's real copy is written. That phrasing would misstate what the product actually does.
Stated as fact: verified against the codebase, not a legal judgment call
No targeted deletion capability exists today
There is no way to delete a specific person's call recordings, transcripts, or data on request. This is a separate, open gap (plan D8); it is not resolved by the retention decision above, and no cleanup or expiry job has been added to work around it.
Stated as fact: verified against the codebase, not a legal judgment call
Cookies
We set exactly one cookie: auth-token, a strictly-necessary cookie used to keep you signed in. We do not use analytics cookies, advertising cookies, or any third-party tracking scripts.