Legal

Privacy Policy

Last updated July 24, 2026

1. Introduction

This Privacy Policy explains what information NextGen Response ("we," "us," or "our") collects, how we use it, and the choices you have. It applies to business owners who use the Service and to callers whose calls are answered on behalf of those businesses.

2. Information We Collect

Account information: your name, email, business name, and password, collected when you sign up.

Notification details: the phone number and email address you provide in Settings for receiving call and lead notifications.

Call data:when a customer calls your business number, we collect the caller's phone number, a recording and transcript of the call, and any details the AI agent captures (such as name, address, issue description, and preferred appointment time).

Payment information: subscription and usage billing is handled by Stripe. We do not store your full card number — Stripe processes and stores payment details on our behalf.

Usage data: basic technical information (such as log data) generated by your use of the dashboard.

3. How We Use Information

  • To answer calls, generate summaries, and assist with booking on your behalf
  • To send you call and lead notifications by SMS and email
  • To process subscription billing and usage charges
  • To maintain, secure, and improve the Service
  • To comply with legal obligations

4. Call Recording

Calls answered by the Service may be recorded and transcribed by our AI voice agent to deliver the Service and generate summaries for the business being called. By default, callers are informed that the call may be recorded. Recordings and transcripts are associated with the business account the call was made to and are not shared with other businesses using the Service.

5. SMS Messaging

If you opt in to SMS notifications, we use your phone number solely to send you call and lead alerts related to your account. We do not use this number for marketing, and we do not sell or share it with third parties for their own marketing purposes. See our SMS Terms for message frequency and opt-out details.

6. Third-Party Service Providers

We share data with the following subprocessors solely to operate the Service:

  • Supabase — database, authentication, and file storage
  • Retell AI — the voice AI platform that answers and transcribes calls
  • Twilio — phone number provisioning, call routing, and SMS delivery
  • Resend — transactional email delivery
  • Stripe — subscription and usage billing
  • Vercel — application hosting

Each provider is only given the data necessary to perform its function.

7. Data Retention

We retain call recordings, transcripts, and account data for as long as your account is active, or as needed to provide the Service and comply with legal obligations. You can request deletion of your account and associated data at any time by contacting us.

8. Your Rights

Depending on where you live, you may have the right to access, correct, or request deletion of your personal information, or to opt out of certain uses of it. To exercise any of these rights, contact us at privacy@nextgenresponse.co.

9. Security

We use industry-standard safeguards — including encryption in transit, row-level access controls, and restricted service-role database access — to protect the data we hold. No system is perfectly secure, and we work to continually improve these protections.

10. Children's Privacy

The Service is intended for business use and is not directed at children under 13. We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by email or through the Service.

12. Contact

Questions about this Privacy Policy? Contact us at privacy@nextgenresponse.co.