Privacy policy

1. Who is responsible for what

The calls your company uploads contain third-party data: its customers and its agents. For that data, your company is the controller and Lapryx is the processor: it processes the data only to provide the service and on your company’s instructions.

For user account data (name, email, sign-ins), Lapryx is the controller.

2. What data we process

From calls: the recording, the transcript, the audit, the supervisor’s review and the agent’s comments.

From users: name, email, company and role, language, and access logs (date, browser and network) for account security.

We do not use the data for advertising and we do not sell it.

3. How we protect calls

Before the AI reads a transcript, cards, IDs, phone numbers, emails and passwords are hidden. Recordings are stored encrypted.

Every company is isolated in the database: no company can see another’s data, and this is tested on every change. Corrections made by a company’s supervisors are only used for that company.

Every view and change of an audit is logged.

4. How long we keep data

Recordings: 30 days by default. Each company can choose 7, 15 or 30 days, and up to 90 days on the Business plan. When the period ends, the recording is deleted; the transcript with hidden data, the audit and the review remain while the company has an account.

Deleting the company deletes all of its data and recordings. The audit log keeps only identifiers, with no content.

The transcription and AI providers delete what they process under their own terms (see subprocessors).

5. Subprocessors

Supabase (database and user accounts), in the US.

Cloudflare (application, recording storage and queues), in the US.

AssemblyAI (transcription), in the US. Lapryx asks AssemblyAI to delete each transcript and its recording as soon as processing ends.

Anthropic (AI auditing), in the US. It receives the transcript with sensitive data already hidden.

Resend (platform emails), in the US.

Paddle (payments and invoicing), [country]. It only receives the company’s billing data.

We notify admins [30] days in advance before adding or changing a subprocessor.

6. Your rights

If you are a customer or agent of a company that uses Lapryx, ask that company for access, correction or deletion: it decides about its data and we help it respond.

If you are a Lapryx user, write to hello@lapryx.com. We reply within [30] days.

7. Incidents

If a security incident affects your company’s data, we notify its admins without undue delay and no later than [72] hours after we confirm it.

8. Contact

hello@lapryx.com · [legal name and address]