Recepta ("we," "us," "our") operates the website hirecepta.com and the Recepta AI phone-receptionist service. This Privacy Policy explains what data we collect, how we use it, and what choices you have. By using Recepta you agree to the practices described here.
1. Information we collect
1.1 Account information
When you sign up we collect your name, email address, and a hashed password. We may also collect your business name, country, and other profile details you provide.
1.2 Agent configuration
You configure AI agents by providing a system prompt, greeting, voice preference, and language. We store these to deliver the service.
1.3 Phone-call data
When a call is routed through Recepta we receive (via our voice provider Vapi.ai) the caller's phone number, call duration, audio transcript, and AI-generated summary. Call audio is processed by our third-party voice infrastructure providers and is not retained by Recepta after the call ends. Transcripts and summaries are stored in your account.
1.4 Billing data
Payments are processed by LemonSqueezy (our Merchant of Record). We do not store credit-card information. We receive subscription status, plan, and limited customer identifiers from LemonSqueezy via secure webhooks.
1.5 Technical data
We collect standard server logs (IP address, user-agent, timestamps) and use session cookies to keep you signed in.
2. How we use your data
- To operate the Recepta service (authentication, AI calls, transcripts, dashboard).
- To bill you and prevent abuse or fraud.
- To send transactional emails (sign-up confirmation, call summaries, billing receipts).
- To improve product quality (aggregated, de-identified analytics only).
- To comply with legal obligations.
We do not sell your personal data. We do not train AI models on your conversation transcripts.
3. Third-party services we rely on
- Vapi.ai — voice infrastructure and AI orchestration.
- OpenAI — language model inference for live calls.
- ElevenLabs — text-to-speech for AI replies.
- Deepgram — speech-to-text transcription.
- LemonSqueezy — payment processing and tax handling (Merchant of Record).
- Vercel — application hosting.
- Neon — Postgres database hosting.
Each provider is responsible for their own privacy practices on data they receive.
4. Data retention
We retain account, agent, and call data for as long as your account is active. You may request deletion at any time by emailing privacy@hirecepta.com. After deletion we retain only what's required for legal, tax, or audit purposes (typically 7 years for billing records).
5. Your rights
Depending on your jurisdiction (EU/UK GDPR, California CCPA, and others) you may have the right to access, correct, port, or delete your personal data, and to object to certain processing. To exercise these rights, contact us at privacy@hirecepta.com.
6. Security
We use encryption in transit (HTTPS/TLS) and at rest, hashed password storage (bcrypt), and scoped API tokens for all third-party integrations. No service is perfectly secure — please notify us promptly if you suspect a breach affecting your account.
7. Children
Recepta is a business service and is not intended for users under 16. We do not knowingly collect data from children.
8. International transfers
Our hosting and processors may be located outside your country (primarily in the US and EU). Where applicable, we rely on standard contractual clauses with these providers.
9. Changes to this policy
We may update this policy from time to time. Material changes will be announced in-app or by email at least 14 days before taking effect.
10. Contact
For privacy questions email privacy@hirecepta.com or general support at hello@hirecepta.com.