We protect caller and business data by default.

Information we collect

Everything we collect is tied to operating the AI receptionist and supporting your workspace.

• Account details you provide: name, email, organization, role, and billing contact.
• Telephony metadata: numbers involved, timestamps, call duration, routing outcomes, and retry counts.
• Content you enable: call recordings, transcripts, tags, and automation payloads.
• Usage signals: feature flags, login timestamps, IP addresses, and device data for security and abuse prevention.

How we use it

Data stays inside EarlyBird unless you authorize an integration or export.

• Deliver the service, including call handling, integrations, analytics, and support.
• Provide incident response and audit logs so you can understand how every call was handled.
• Process invoices, detect fraud, and comply with legal obligations.
• Improve voice quality, routing accuracy, and AI prompts using aggregated, de-identified metrics.

Retention & deletion

Call recordings, transcripts, and automations follow the retention schedule you configure in the dashboard. By default we retain 180 days of recordings and transcripts.

Delete a workspace or email privacy@earlybird.ai to request export or deletion. We respond within two business days and complete verified deletion within 30 days unless applicable law requires longer retention.

AI, voice, and human oversight

EarlyBird agents run in isolated sandboxes. Prompts, transcripts, and automation payloads are versioned so you can audit what was said and why.

We never train public models on your data. When we evaluate AI performance we use de-identified snippets and only with employees under NDA.

Subprocessors

We use a short list of subprocessors to host infrastructure and deliver features. Each vendor is under a data processing agreement and must meet our security requirements.

• Amazon Web Services (US) – core hosting and storage
• Vercel (US) – edge delivery of the marketing site
• Postmark (US) – transactional email
• Stripe (US) – billing and invoicing
• Google Cloud Platform (US) – speech-to-text processing when you enable transcripts

Your rights

You can access, correct, export, or delete your data at any time by emailing privacy@earlybird.ai. Workspace owners can configure retention and access controls directly from the dashboard.

We honor GDPR, CCPA, and similar regional requests. If you are an end caller, EarlyBird acts as a processor on behalf of the business you called—contact them directly to exercise your rights and we will assist.