Privacy policy
- We hold what the product needs to answer your calls: your account, what you teach your AI, your calls and your billing.
- We never sell personal data, and we don’t use your calls to train anybody’s general-purpose model.
- Recordings and transcripts are deleted on a timer, every night, without anyone having to ask.
- Our public pages use our own analytics, not a third party’s — and in the EEA, UK and Switzerland only if you accept.
- You can ask for everything to be deleted, and a person handles it.
01Who we are
prepaid.ai and postpaid.ai are trading names of PAID AI LIMITED (NZBN 9429053109132), a company registered in New Zealand, which is the data controller. The same team runs both, and this policy covers both.
02What we hold
Your account and workspace
The email address you signed in with, your business name, country and time zone, and who else you have invited.
What we receive if you sign in with Facebook, Google, Apple or Microsoft
If you use one of the sign-in buttons instead of an email link, we receive your name, your email address, your profile picture, and the account identifier that provider uses for you — that identifier is how we recognise you the next time you press the same button. We ask for nothing beyond the provider’s basic profile and your email address. We use your name and email address to create and identify your account; the picture is stored with your login record and is not shown anywhere in the product, because the picture in your console is one you chose or uploaded yourself. We never post anything, we do not read your friends, contacts, pages or posts, and we do not use the connection for advertising. Signing in this way is optional — an email link does the same job. If a provider gives us no email address we stop and ask you for one rather than guessing, because it is how we reach you.
What you teach your AI
What we read from the website you gave us, the services and hours you set, your greeting, and the words you flag as urgent.
Your calls
For each call your AI answers: the caller’s number as the carrier presents it, when it happened and how long it lasted, a recording and a written transcript where the law of that number’s country allows one, what the AI did, and any message it took.
People who contact you
Names, numbers and notes for contacts you import or that your AI collects on a call, and any bookings made.
Money
Your plan, your credit balance, and an append-only ledger of every charge and top-up. We never hold your card number.
03Who else touches it
These companies process data on our behalf so the product can work. Each does one job, and none of them is given data for their own purposes.
Telnyx, Supabase, Vercel, Stripe, Resend, Anthropic, Composio.
04Callers’ data, and whose responsibility it is
When your AI answers a call, the person calling is your customer, not ours — you are responsible for the notices and consents your own callers are owed. Two things we do by default to help: the AI says at the start of every call that it is an AI, in wording set per country, and recording follows the rules of the country the number belongs to rather than a single global setting.
05How long it is kept
Call recordings are deleted after 90 days and written transcripts after 365 days. The account audit log is kept for 2 years. Your contacts, your bookings and your billing ledger are not on a timer — the first two are your own business records, and the ledger stays because tax law says it must. A job runs every night and deletes whatever is past its date; it does not wait for anyone to ask. These periods are the same for every account and there is no setting for them today, so if you need something shorter, write to us. Deleting your account removes the rest — see the deletion page.
06Analytics on our public pages
Our public pages — the prepaid.ai and postpaid.ai home pages, sign-in and sign-up, these legal pages and the documentation — use our own first-party analytics, not a third party’s. It sets two cookies on our own domain: pa_vid, a random identifier kept for one year, and pa_sid, which starts a new visit after 30 minutes of inactivity.
With them we record the page you opened (without its query string), the site that sent you there, any campaign tags in the link, the name of a tracked button you pressed, a link you followed off our site, your approximate location (country, region and city, as our hosting provider reports it) and your browser, operating system and device type. We do not store your IP address or your full browser identification string, and none of it is sent to anyone else.
If you then create or sign in to an account, that visitor identifier is linked to the account so we can see which pages and sources bring us customers. The signed-in console is not tracked this way. These records are deleted after 13 months.
If you are in the European Economic Area, the United Kingdom or Switzerland, none of this happens unless you accept it in the notice on the page; if you decline, no analytics cookie is set and nothing is recorded. Your choice is kept in a cookie called pa_consent for six months.
07The launch list
Until the full sites launch, prepaid.ai and postpaid.ai show a coming-soon page with one box for your email address. When you use it we keep:
- Your email address. It is the only thing the box asks for.
- Which site and when. The date and time, and whether it came from prepaid.ai or postpaid.ai, so we know whether you asked to hear about the launch or asked for early access.
A copy goes to our own inbox so a person sees it. We use the address only to tell you when we launch, or to reply to an early-access request — never for anything else, and never shared with anyone. Leaving your address is not an account and signs you up for nothing. Any email we send you about it carries an unsubscribe link, and we remove your address whenever you ask.
08What we do not do
We do not sell personal data, we do not use your calls or your customers’ data to train anybody’s general-purpose model, and we do not hold your card number — our payment processor does.
09Your choices
You can see and correct everything your AI knows about your business from the console at any time, export your call history, and ask for the account to be deleted. Requests are read by a person. If you are not happy with how we have handled your information, tell us first; you can also complain to the Office of the Privacy Commissioner at privacy.org.nz.
10Deleting your data
There is a route, it is short, and a person handles it.
How to delete your data11Contact us
Questions or requests about your information:
privacy@prepaid.ai