Gracebot

Privacy Policy

Who we are

Gracebot is operated by Enid Labs LLC, a California limited liability company. For any privacy question, or to ask us to delete something, email business@gracebot.io.

What we collect

• Account: your email address and a hashed password. We never store your password itself.
• Billing: a record of credit purchases and usage. Card details go straight to Stripe and are never stored on our servers.
• Your Grace number: the number we assign you and whether you have verified forwarding to it.
• Calls Grace answers for you: the caller's number, the time and length of the call, a transcript, a one-line summary, and — if you leave recording switched on — the audio.
• Conversations you have with Grace yourself by chat or voice.

We do not use tracking cookies, analytics pixels, or advertising networks. The only cookie we set is the one that keeps you signed in.

Calls from other people

When you forward a call to your Grace number, the person calling is not our customer and has no account with us. We keep their number, the transcript, and any recording solely so that you can review what happened on your own line. That material is private to your account. We do not sell it, publish it, share it with other customers, or use it to train models. It is deleted automatically after 14 days.

You can switch recording off for your number at any time and still have Grace answer calls. If a call was captured that should not have been — a wrong number, or someone you did want to speak to — email us and we will delete it.

How long we keep things

• Recordings, transcripts and summaries: 14 days, then deleted automatically.
• Billing records: kept as long as the law requires us to keep financial records.
• Account details: until you ask us to close your account.

Who else handles your data

We use a small number of service providers to run the Service. Each receives only what it needs to do its job:

• Amazon Web Services — hosting and encrypted storage (United States).
• Stripe — payments. Stripe receives your card details directly; we never see them.
• Twilio — supplies your Grace phone number and carries the calls.
• Vapi — connects calls to Grace and produces the recording.
• Deepgram — converts speech to text.
• Anthropic — generates Grace's replies and the one-line call summaries.
• ElevenLabs — generates Grace's voice.

Your rights

You can ask us to show you what we hold about you, correct it, delete it, or send you a copy. If you are a California resident, the CCPA/CPRA gives you these rights explicitly, along with the right not to be discriminated against for using them. We do not sell or share personal information as those laws define it. Email business@gracebot.io and we will respond within 45 days.

Security

Data is encrypted in transit and at rest. Recordings are served only over short-lived links to the signed-in account that owns them. No system is perfect, and we will tell you promptly if a breach affects your data.

Children

The Service is not intended for anyone under 18 and we do not knowingly collect information from children.

Changes

If we change this policy, the "Last updated" date above changes. If the change is significant, we will email you.