Privacy Policy

Last Updated: February 23, 2026  ·  Version 1.0

Unbusy ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service at unbusy.dev.

By using Unbusy, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, do not use our Service.

Information We Collect

1. Information You Provide to Us

Account Information:

  • Name
  • Email address
  • Password (encrypted)
  • Company name
  • Business address (if provided)
  • Payment information (processed by Stripe — we never see full card numbers)

Phone and Voicemail Data:

  • Business phone number(s)
  • Voicemail recordings
  • Voicemail transcriptions
  • Caller phone numbers
  • Timestamps of calls
  • AI-generated summaries of voicemails

Support Communications:

  • Messages you send us
  • Feedback and feature requests
  • Support tickets

2. Information Collected Automatically

Usage Data:

  • Pages you visit on our website
  • Features you use
  • Time spent on the Service
  • Browser type and version
  • Device information
  • IP address
  • Referring/exit pages

Cookies and Tracking:

  • We use cookies to maintain your session and remember your preferences
  • You can disable cookies in your browser, but some features may not work properly

Technical Logs:

  • API calls and errors
  • System performance data
  • Security logs (login attempts, IP addresses)

3. Information from Third Parties

Twilio:

  • Call metadata (duration, timestamp, caller ID)
  • Phone numbers we provision for you
  • Call recordings and transcriptions

Stripe:

  • Payment status
  • Billing information
  • Transaction history

AI Services (OpenAI / Anthropic):

  • We send voicemail audio and transcriptions to AI services for processing
  • These services process the data according to their own privacy policies
  • We use business-tier API agreements with data processing terms

How We Use Your Information

We use your information to:

Core Service Functions

  • Provide voicemail transcription and AI summaries
  • Route calls to your configured phone numbers
  • Display voicemail history and analytics
  • Process payments and manage subscriptions
  • Send transactional emails (receipts, password resets, service notifications)

Service Improvement

  • Analyze usage patterns to improve the Service
  • Debug technical issues and errors
  • Develop new features
  • Monitor Service performance

Communication

  • Respond to your support requests
  • Send important service updates (downtime, new features, policy changes)
  • Request feedback (you can opt out of optional marketing emails)

Legal and Security

  • Prevent fraud and abuse
  • Enforce our Terms of Service
  • Comply with legal obligations
  • Protect our rights and property
  • Investigate security incidents

How We Share Your Information

We do NOT sell your personal information to third parties.

We share your information only in these limited circumstances:

Third-Party Service Providers

Twilio (Voice/SMS Services)

Purpose: Process calls and voicemails

Data Shared: Phone numbers, call recordings, metadata

Privacy Policy

OpenAI / Anthropic (AI Processing)

Purpose: Transcribe voicemails and generate summaries

Data Shared: Voicemail audio and text transcriptions

Stripe (Payment Processing)

Purpose: Process payments and subscriptions

Data Shared: Billing information, transaction details

Privacy Policy

Vercel (Application Hosting)

Purpose: Host our application

Data Shared: All Service data

Privacy Policy

Supabase (Database Hosting)

Purpose: Host our database

Data Shared: All Service data

Privacy Policy

Resend (Email Delivery)

Purpose: Deliver transactional emails

Data Shared: Email addresses, email content (receipts, notifications)

Privacy Policy

All third-party providers are subject to data processing agreements and are prohibited from using your data for their own commercial purposes.

Legal Requirements

We may disclose your information if required to:

  • Comply with legal process (subpoenas, court orders)
  • Enforce our Terms of Service
  • Protect our rights, property, or safety
  • Prevent fraud or security threats
  • Protect the rights of third parties

Business Transfers

If we are acquired, merge with another company, or undergo bankruptcy, your information may be transferred to the acquiring entity.

Data Retention

Active Accounts

We retain your data as long as your account is active.

Canceled Accounts

  • You have 30 days after cancellation to export your data
  • After 30 days, we may delete your voicemails and transcriptions
  • We retain account information (name, email) for billing and legal purposes for 7 years

Backups

Data may persist in encrypted backups for up to 90 days after deletion.

Legal Holds

We may retain data longer if required by law or legal proceedings.

Your Privacy Rights

Depending on your location, you may have these rights:

Access and Portability

  • View all personal data we have about you
  • Export your data in a common format (CSV, JSON)
  • Request a copy of your information

Correction

  • Update inaccurate information in your account settings
  • Request we correct data we hold about you

Deletion

  • Delete your account and data at any time
  • Request deletion of specific information (subject to legal retention requirements)

Objection and Restriction

  • Object to certain data processing activities
  • Request we restrict processing of your data

Opt-Out

  • Unsubscribe from marketing emails (link in every email)
  • Disable cookies in your browser settings

How to Exercise Your Rights

Contact us at contact@unbusy.dev with your request. We will respond within 30 days. Note: some requests may be limited by legal or contractual obligations.

Data Security

We take data security seriously and implement industry-standard measures:

Technical Safeguards

  • Encryption in transit (TLS/HTTPS)
  • Encryption at rest for sensitive data
  • Secure authentication (hashed passwords)
  • Regular security updates and patches
  • Restricted database access

Operational Safeguards

  • Employee access limited to those who need it
  • Logging of key system events
  • Regular security reviews
  • Incident response procedures

No system is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials.

Children's Privacy

Unbusy is not intended for users under 18 years old. We do not knowingly collect information from children. If you believe we have collected data from a child, contact us immediately and we will delete it.

International Data Transfers

Our servers are located in the United States. If you access the Service from outside the U.S., your information will be transferred to and processed in the United States. By using the Service, you consent to this transfer and processing according to this Privacy Policy.

Third-Party Links

Our Service may contain links to third-party websites (e.g., Stripe for billing). We are not responsible for the privacy practices of these sites. We encourage you to read their privacy policies.

California Privacy Rights (CCPA)

If you are a California resident, you have additional rights:

  • Right to Know: What personal information we collect and how we use it
  • Right to Delete: Request deletion of your personal information
  • Right to Opt-Out: We don't sell personal information, so opt-out doesn't apply
  • Right to Non-Discrimination: We won't discriminate against you for exercising your rights

To exercise these rights, contact us at contact@unbusy.dev.

European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), you have additional rights under GDPR:

Legal Basis for Processing

We process your data based on:

  • Contract: To provide the Service you've subscribed to
  • Legitimate Interest: To improve our Service and prevent fraud
  • Consent: For optional marketing communications (you can withdraw anytime)
  • Legal Obligation: To comply with laws and regulations

Data Controller

Unbusy LLC is the data controller for your personal information. We primarily serve US-based businesses. If you are located in the EEA and have concerns about our data practices, you have the right to lodge a complaint with your local data protection authority.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

  • Posting a notice on our website
  • Sending an email to your registered address

Changes take effect 30 days after notice. Your continued use of the Service after changes take effect constitutes acceptance of the updated Privacy Policy.

Do Not Track Signals

Some browsers transmit "Do Not Track" (DNT) signals. We do not currently respond to DNT signals, as there is no industry standard for how to respond.

Contact Us

If you have questions or concerns about this Privacy Policy or our data practices:

For data subject access requests, privacy complaints, or to exercise your rights, please use the email address above.

Last Reviewed: February 23, 2026