Privacy Policy
Last Updated: February 23, 2026 · Version 1.0
Unbusy ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service at unbusy.dev.
By using Unbusy, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, do not use our Service.
Information We Collect
1. Information You Provide to Us
Account Information:
- Name
- Email address
- Password (encrypted)
- Company name
- Business address (if provided)
- Payment information (processed by Stripe — we never see full card numbers)
Phone and Voicemail Data:
- Business phone number(s)
- Voicemail recordings
- Voicemail transcriptions
- Caller phone numbers
- Timestamps of calls
- AI-generated summaries of voicemails
Support Communications:
- Messages you send us
- Feedback and feature requests
- Support tickets
2. Information Collected Automatically
Usage Data:
- Pages you visit on our website
- Features you use
- Time spent on the Service
- Browser type and version
- Device information
- IP address
- Referring/exit pages
Cookies and Tracking:
- We use cookies to maintain your session and remember your preferences
- You can disable cookies in your browser, but some features may not work properly
Technical Logs:
- API calls and errors
- System performance data
- Security logs (login attempts, IP addresses)
3. Information from Third Parties
Twilio:
- Call metadata (duration, timestamp, caller ID)
- Phone numbers we provision for you
- Call recordings and transcriptions
Stripe:
- Payment status
- Billing information
- Transaction history
AI Services (OpenAI / Anthropic):
- We send voicemail audio and transcriptions to AI services for processing
- These services process the data according to their own privacy policies
- We use business-tier API agreements with data processing terms
How We Use Your Information
We use your information to:
Core Service Functions
- Provide voicemail transcription and AI summaries
- Route calls to your configured phone numbers
- Display voicemail history and analytics
- Process payments and manage subscriptions
- Send transactional emails (receipts, password resets, service notifications)
Service Improvement
- Analyze usage patterns to improve the Service
- Debug technical issues and errors
- Develop new features
- Monitor Service performance
Communication
- Respond to your support requests
- Send important service updates (downtime, new features, policy changes)
- Request feedback (you can opt out of optional marketing emails)
Legal and Security
- Prevent fraud and abuse
- Enforce our Terms of Service
- Comply with legal obligations
- Protect our rights and property
- Investigate security incidents
How We Share Your Information
We do NOT sell your personal information to third parties.
We share your information only in these limited circumstances:
Third-Party Service Providers
Twilio (Voice/SMS Services)
Purpose: Process calls and voicemails
Data Shared: Phone numbers, call recordings, metadata
Privacy PolicyOpenAI / Anthropic (AI Processing)
Purpose: Transcribe voicemails and generate summaries
Data Shared: Voicemail audio and text transcriptions
Stripe (Payment Processing)
Purpose: Process payments and subscriptions
Data Shared: Billing information, transaction details
Privacy PolicyVercel (Application Hosting)
Purpose: Host our application
Data Shared: All Service data
Privacy PolicyResend (Email Delivery)
Purpose: Deliver transactional emails
Data Shared: Email addresses, email content (receipts, notifications)
Privacy PolicyAll third-party providers are subject to data processing agreements and are prohibited from using your data for their own commercial purposes.
Legal Requirements
We may disclose your information if required to:
- Comply with legal process (subpoenas, court orders)
- Enforce our Terms of Service
- Protect our rights, property, or safety
- Prevent fraud or security threats
- Protect the rights of third parties
Business Transfers
If we are acquired, merge with another company, or undergo bankruptcy, your information may be transferred to the acquiring entity.
Data Retention
Active Accounts
We retain your data as long as your account is active.
Canceled Accounts
- You have 30 days after cancellation to export your data
- After 30 days, we may delete your voicemails and transcriptions
- We retain account information (name, email) for billing and legal purposes for 7 years
Backups
Data may persist in encrypted backups for up to 90 days after deletion.
Legal Holds
We may retain data longer if required by law or legal proceedings.
Your Privacy Rights
Depending on your location, you may have these rights:
Access and Portability
- View all personal data we have about you
- Export your data in a common format (CSV, JSON)
- Request a copy of your information
Correction
- Update inaccurate information in your account settings
- Request we correct data we hold about you
Deletion
- Delete your account and data at any time
- Request deletion of specific information (subject to legal retention requirements)
Objection and Restriction
- Object to certain data processing activities
- Request we restrict processing of your data
Opt-Out
- Unsubscribe from marketing emails (link in every email)
- Disable cookies in your browser settings
How to Exercise Your Rights
Contact us at contact@unbusy.dev with your request. We will respond within 30 days. Note: some requests may be limited by legal or contractual obligations.
Data Security
We take data security seriously and implement industry-standard measures:
Technical Safeguards
- Encryption in transit (TLS/HTTPS)
- Encryption at rest for sensitive data
- Secure authentication (hashed passwords)
- Regular security updates and patches
- Restricted database access
Operational Safeguards
- Employee access limited to those who need it
- Logging of key system events
- Regular security reviews
- Incident response procedures
No system is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials.
Children's Privacy
Unbusy is not intended for users under 18 years old. We do not knowingly collect information from children. If you believe we have collected data from a child, contact us immediately and we will delete it.
International Data Transfers
Our servers are located in the United States. If you access the Service from outside the U.S., your information will be transferred to and processed in the United States. By using the Service, you consent to this transfer and processing according to this Privacy Policy.
Third-Party Links
Our Service may contain links to third-party websites (e.g., Stripe for billing). We are not responsible for the privacy practices of these sites. We encourage you to read their privacy policies.
California Privacy Rights (CCPA)
If you are a California resident, you have additional rights:
- Right to Know: What personal information we collect and how we use it
- Right to Delete: Request deletion of your personal information
- Right to Opt-Out: We don't sell personal information, so opt-out doesn't apply
- Right to Non-Discrimination: We won't discriminate against you for exercising your rights
To exercise these rights, contact us at contact@unbusy.dev.
European Privacy Rights (GDPR)
If you are in the European Economic Area (EEA), you have additional rights under GDPR:
Legal Basis for Processing
We process your data based on:
- Contract: To provide the Service you've subscribed to
- Legitimate Interest: To improve our Service and prevent fraud
- Consent: For optional marketing communications (you can withdraw anytime)
- Legal Obligation: To comply with laws and regulations
Data Controller
Unbusy LLC is the data controller for your personal information. We primarily serve US-based businesses. If you are located in the EEA and have concerns about our data practices, you have the right to lodge a complaint with your local data protection authority.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by:
- Posting a notice on our website
- Sending an email to your registered address
Changes take effect 30 days after notice. Your continued use of the Service after changes take effect constitutes acceptance of the updated Privacy Policy.
Do Not Track Signals
Some browsers transmit "Do Not Track" (DNT) signals. We do not currently respond to DNT signals, as there is no industry standard for how to respond.
Contact Us
If you have questions or concerns about this Privacy Policy or our data practices:
- Email: contact@unbusy.dev
- Website: unbusy.dev
For data subject access requests, privacy complaints, or to exercise your rights, please use the email address above.
Last Reviewed: February 23, 2026