ThunderPhone Calls Privacy Notice

01What this notice covers

ThunderPhone Calls lets you ask an AI assistant, such as ChatGPT, to phone a business for you: book a table, ask about opening hours, check on an order. Our AI agent calls the business, says it is an AI calling for you, and reports back.

This notice covers what Calls collects from the people who use it and from the businesses it calls. Our main Privacy Policy covers our website and our business customers, and applies to Calls wherever this notice does not say otherwise. The Calls Terms of Use cover how you may use the service.

02Who we are

Autophonix, LLC d/b/a ThunderPhone ("ThunderPhone," "we," "us") runs Calls and decides how Calls data is used.

Address: 505 Montgomery St. Suite 1100 #1019, San Francisco, CA 94111, USA
Privacy questions and requests: privacy@thunderphone.com

03What we get from your assistant

• Your search: the business name or type you are looking for and the area to search near. ChatGPT may also share an approximate location (city, region, country and rough coordinates). We use these to search for the business and do not keep them with your calls.
• The business you choose: its Google Maps listing.
• Your request: the errand as your assistant sends it once you confirm it, your first name, and a callback number if you give one.
• An anonymous ID: ChatGPT gives us an ID for you that is not your name or email. In Claude without sign-in, we give the conversation its own ID instead. We store only a keyed hash of it, which we use to apply daily limits and to show a call's result only to the person who asked for it. If you sign in with a ThunderPhone account, we use a keyed hash of your account ID instead, and our main Privacy Policy covers your account.
• Network address: the IP address the request comes from, which is normally your assistant's server, not your device. We check it against the address ranges the assistant publishes. When a search arrives with no other ID, we count it against a keyed hash of that address.

04What we collect on the call

• Recording and transcript of the whole call, including what the business says.
• Summary and outcome: what the business said, whether the errand was done, who or what answered (a person, a phone menu, voicemail), whether our agent gave its AI disclosure, and whether the business asked not to be called again. An AI model writes these from the transcript.
• Call details: the numbers involved, the time and the length of the call.
• The listing as checked before dialing: the business's name, address, phone number and opening hours, and the type of phone line (landline, mobile, VoIP or toll-free).

Do not put payment, health or other sensitive details in a request. We refuse requests that need them, but the text you send is still checked by our providers, and anything in an accepted request is said to the business on the call.

05How we use it

• Find the business and check it can be called: open, within its hours, in the United States, on a business line, and not opted out.
• Check that your request is one we place. An AI model reads it and sorts it, for example as an ordinary errand, an emergency, a payment, or marketing.
• Place the call and have our AI agent run your errand.
• Report the result to you through your assistant.
• Apply limits, prevent abuse, honor businesses' requests not to be called, and keep a record of what each call was based on.
• Improve ThunderPhone's service, including our AI, as our main Privacy Policy describes.
• Comply with the law and enforce our terms.

06Who we share it with

• The business you call hears your first name and your request. It hears your callback number only if it asks how to reach you.
• Your assistant (OpenAI for ChatGPT, Anthropic for Claude) receives the search results and the call result, including the outcome, summary and transcript, so it can tell you. Its own privacy policy covers what it does with them.
• Google receives your search and location hint to find businesses, and the chosen listing's ID when we re-check it before dialing.
• Telnyx receives the business's phone number to tell us what type of line it is.
• Providers that run the call for us: telephony, speech recognition, voice, AI model and hosting providers, acting on our instructions. They are listed in our DPA.
• Legal and safety: when the law requires it, to protect rights and safety, or as part of a merger or sale of the business.

We do not sell Calls data, and we do not use it for advertising.

07How long we keep it

• Your request and the call: your request (the errand text, your first name and any callback number), the recording, the transcript and the call result are deleted 30 days after the call. Ask us and we delete them sooner.
• Call record: for each call we keep a record with no request text, name or callback number for 4 years. It holds when you confirmed the call, a fingerprint (SHA-256 hash) of the request as your assistant sent it, the listing we checked, the phone numbers, the line type, the hashed ID, the call's status, whether the AI disclosure was given, and any opt-out. It shows what each call was based on if a question about it comes up later.
• Business opt-outs: kept permanently, so we never call that business again.
• Limits and abuse checks: counts kept against hashed IDs, with no request text, as long as needed to enforce limits and investigate abuse, and no longer than 4 years.
• Technical logs: as our main Privacy Policy describes.

08If we called your business

Calls phones only the number a business lists on Google Maps. It calls only during the business's listed opening hours, when it lists them, and never before 9am or after 9pm its local time. It does not call mobile numbers. Our agent starts by saying it is an AI assistant from ThunderPhone calling for a named person and that the call is recorded. It gives the number to reach us on before it hangs up, or right away if asked. It hangs up on voicemail without leaving a message.

We keep the recording and transcript of the call for 30 days, and the call record described above, which includes your listing details, for 4 years.

To stop calls: on any call, tell our agent "please don't call again." It apologizes and ends the call, and we add your number and listing to our do-not-call list. To be sure, email privacy@thunderphone.com with your business name and phone number. Opt-outs are permanent and cover both your phone number and your Google listing.

To ask for a copy of a call within its 30 days, or for its deletion, email privacy@thunderphone.com with your phone number and roughly when we called.

09Your rights

Depending on where you live, you can ask to access, correct or delete your data, or object to how we use it. Email privacy@thunderphone.com. We store only a hashed ID for you, so tell us the call ID your assistant can show you, or the business, roughly when the call was made, and the first name used. Our main Privacy Policy explains these rights and lists our EU and UK representatives.

In the EEA and UK, we rely on contract to place the calls you ask for, on legitimate interests for safety, abuse prevention, call records and improving the service, and on legal obligations where the law requires us to keep or share data.

10Security

We protect Calls data with the same technical and organizational measures as the rest of ThunderPhone, described in our main Privacy Policy.

11Adults only

Calls is for adults 18 and older. We do not knowingly collect data from anyone younger. If you believe someone under 18 has used Calls, email privacy@thunderphone.com and we will delete their data. Our main Privacy Policy covers children and our website.

12Changes to this notice

We will post any update here and change the date at the top. If a change is material, we will also say so in the app where we can.

13Contact us

Autophonix, LLC d/b/a ThunderPhone
505 Montgomery St. Suite 1100 #1019, San Francisco, CA 94111, USA
privacy@thunderphone.com · legal@thunderphone.com