Privacy Policy

1. Who We Are

PG Insights LLC dba Sellphone ("Sellphone," "we," "us," or "our") operates the Sellphone personal business phone system, available at sellphone.pro and its subdomains (the "Service"). Our mailing address is 3324 Rue Royale St. #1406, St. Charles, MO 63301. Questions about this policy may be directed to support@sellphone.pro.

2. Information We Collect

2.1 Account and Profile Information

When you register for the Service, we collect information you provide directly, which may include your name, email address, company name, and password (stored as a bcrypt hash — we never store your plaintext password). If you sign in via Google or Microsoft OAuth, we receive your name and email from that provider and store them in your account.

2.2 Information We Collect About Your Communications

Because Sellphone is a telephony platform, we collect call and SMS metadata and content as part of operating the Service:

• Call logs: call direction (inbound/outbound), duration, date/time, status (answered, missed, voicemail), and the phone numbers involved.
• Voicemails: audio recordings of voicemails left for you, automated transcriptions of those recordings, and caller phone number and timestamp.
• Call recordings: if you enable the call-recording feature, audio recordings of your calls are captured and stored. Recordings are subject to a storage quota and are offloaded to private cloud storage. See Section 5 for full details.
• SMS/MMS messages: message content and metadata (sender, recipient, direction, timestamp, number of segments) for messages sent or received through the Service via Twilio Conversations.
• Contacts: names, phone numbers, email addresses, company names, and notes you enter into your contact book.

2.3 Payment and Billing Information

Payments are processed by Stripe. We collect your billing email and subscription details. We do not store your full credit card number, CVV, or bank account details — those are handled exclusively by Stripe and are subject to Stripe's privacy policy. We retain your Stripe customer ID and subscription ID to manage your account and process charges such as wallet top-ups and auto-reloads.

2.4 Usage and Technical Information

We automatically collect technical information when you use the Service, including:

• IP address and approximate geolocation
• Device type, operating system, and browser type and version
• Pages visited, features used, and time spent in the application
• Error logs and application performance data
• Marketing and advertising data such as Google click IDs (gclid) and UTM parameters, plus analytics and advertising cookie identifiers, used to measure how our ads and campaigns perform, attribute signups to the campaign that drove them, and show you Sellphone ads on other sites (see Sections 4 and 6)

2.5 Cookies and Tracking Technologies

We use session cookies necessary to operate your authenticated session and the progressive web application, analytics cookies (Google Analytics) to understand how users interact with the Service, and advertising cookies (Google Ads) for conversion measurement and remarketing. See our Cookie Policy for full details on what cookies we use, how long they are retained, and how you can opt out.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service, including routing calls, delivering SMS messages, storing voicemails, and managing your contact book.
• Process payments, manage your subscription and prepaid wallet balance, and send billing-related communications (receipts, low-balance alerts, payment failure notices).
• Enable call routing to your browser or cell phone based on your availability settings.
• Generate and deliver transcriptions of your voicemails.
• Provision your dedicated phone number and connect it to the A2P 10DLC messaging infrastructure required for business SMS delivery.
• Send you transactional notifications, security alerts, and account updates necessary to operate your account.
• Monitor and analyze usage to improve the reliability and performance of the Service.
• Measure the effectiveness of our advertising, attribute signups to the marketing campaigns that drove them, and show you Sellphone ads on other websites and apps (remarketing).
• Detect, investigate, and prevent fraud, abuse, and violations of our Terms of Service.
• Comply with applicable laws and respond to lawful requests from governmental authorities.

We do not use your call or SMS content to train machine learning models or to serve advertising.

4. How We Share Your Information

4.1 Sub-processors

We share the minimum information necessary with the following sub-processors, each of which is contractually obligated to protect your data and use it only as we direct:

Sub-processor	Purpose
Twilio	Telephony infrastructure: call routing, SMS/MMS delivery, voicemail recording, A2P 10DLC campaign registration, and call recording storage (before offload).
Stripe	Payment processing, subscription billing, off-session auto-reload charges, and Customer Portal.
Supabase	PostgreSQL database hosting and private object storage for voicemails and call recordings.
Resend	Transactional email delivery (account setup, payment notifications, A2P status updates).
Google	OAuth identity verification (Google Sign-In), analytics (Google Analytics 4), and advertising (Google Ads conversion measurement and remarketing).

4.2 Advertising, and "Sale" or "Sharing" of Personal Information

We do not sell your personal information for money, and we never share your communications data — your calls, messages, voicemails, transcriptions, or contacts — with anyone for advertising.

To promote Sellphone, we do use Google's advertising and analytics services. This involves sharing limited website and usage information (such as cookie identifiers, device and browser data, pages visited, and ad-click identifiers) with Google to measure our ad performance and to show you Sellphone ads on other sites (remarketing). Under some U.S. state privacy laws — including the California Consumer Privacy Act as amended (CCPA/CPRA) — this kind of advertising-related data sharing may be treated as a "sale" or "sharing" of personal information even though no money changes hands. You can opt out at any time; see Section 9 and our Cookie Policy.

Apart from this advertising use, we do not rent, sell, or license your personal data to third parties for their own independent marketing.

4.3 Legal Requirements and Business Transfers

We may disclose your information if required by law, regulation, or valid legal process (such as a court order or subpoena), or if we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others. In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction, and we will notify you of any such change in ownership or control.

4.4 With Your Consent

We may share your information for other purposes when we have obtained your explicit consent to do so.

5. Communications Data and Call Recordings

Because Sellphone routes real telephone calls and SMS messages through your dedicated business number, certain data handling is inherent to the Service:

• Voicemails are audio recordings made by your callers when you are unavailable. Un-saved voicemails are retained for 60 days and then automatically purged from Twilio's storage. If you tap "Save" on a voicemail, it is transferred to private cloud storage (Supabase) where it is retained until you delete it. Transcriptions are generated automatically and stored alongside the voicemail record.
• Call recordings are an opt-in feature. If you enable call recording in your Settings, calls are recorded from the moment they are answered. Recordings are stored on Twilio and then offloaded to our private Supabase storage bucket, after which the Twilio copy is deleted. Recording storage is metered against a per-account quota. When quota is reached and auto-expansion is disabled, new recordings will not be captured until quota is freed or expanded. We never automatically delete recordings that are already stored — you control deletion.
• Your callers: If you enable call recording, it is your responsibility under applicable law to notify your callers that the call is being recorded. Requirements vary by jurisdiction. You must comply with all applicable wiretapping, eavesdropping, and recording consent laws in your jurisdiction and your callers' jurisdictions.
• SMS messages sent and received through the Service are processed by Twilio and our platform in order to route them to and from your dedicated number. Message content is visible to you in the Sellphone application interface.

6. Cookies and Analytics

We use session cookies that are strictly necessary to maintain your authenticated session and deliver the Service, analytics tools (such as Google Analytics 4) to understand how the application is used, and advertising tools (such as Google Ads) to measure our marketing and show you Sellphone ads on other sites. For a full list of cookies, their purposes, retention periods, and how to opt out, please see our Cookie Policy.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you the Service. Specific retention periods for key data categories are:

• Account information (name, email, settings): retained for the life of your account. If you cancel your subscription and your account is closed, we will delete or anonymize your personal data within 30 days, except where legal or regulatory obligations require longer retention.
• Call logs and voicemail metadata: retained for the life of your account.
• Un-saved voicemail recordings: automatically purged at 60 days from the date of receipt.
• Saved voicemail recordings: retained in private cloud storage until you delete them or your account is closed.
• Call recordings: retained in private cloud storage subject to your account's storage quota until you delete them or your account is closed. Storage usage is tracked and metered; you can view and manage recordings from the Settings page.
• SMS message content: managed through Twilio Conversations and retained for the life of the conversation; deleted when you archive and delete a conversation thread.
• Wallet ledger: transaction records (charges, credits, usage debits) are retained for at least 7 years from the transaction date for accounting, tax, and legal compliance purposes.
• Payment records: Stripe retains payment records pursuant to Stripe's own policies and applicable financial regulations.

Aggregated and anonymized data that cannot reasonably identify you may be retained indefinitely for analytics and product improvement purposes.

8. Data Security

We implement commercially reasonable technical and organizational measures to protect your personal information against unauthorized access, disclosure, alteration, or destruction. These include:

• Encryption of data in transit using TLS/SSL on all connections between your browser, our servers, and our sub-processors.
• Encryption of data at rest in our database and cloud storage (Supabase enforces AES-256 at rest).
• Row-level security (RLS) policies enforced at the PostgreSQL level, ensuring that one customer's data is never accessible to another customer's session.
• Access controls limiting employee and system access to personal data on a strict need-to-know basis.
• Bcrypt password hashing; plaintext passwords are never stored.
• Single-use, time-limited OAuth handoff tokens to prevent session fixation during authentication.

No method of electronic storage or transmission is 100% secure. While we take security seriously, we cannot guarantee absolute security against all threats. In the event of a data breach that triggers notification obligations under applicable law, we will notify affected users as required.

9. Your Rights

Depending on your jurisdiction, you may have certain rights regarding your personal information. Regardless of where you are located, you may exercise the following rights by contacting us at support@sellphone.pro:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data. You can update most account information directly in the Settings page.
• Deletion: Request deletion of your personal data. We will delete your data subject to legal retention requirements (such as the 7-year wallet ledger retention described above).
• Portability: Request a machine-readable export of your data.
• Objection: Object to certain processing of your personal data.
• Restriction: Request restriction of processing under certain circumstances.
• Opt out of "sale" or "sharing" for targeted advertising: You can opt out of our advertising and analytics cookies, and of any "sharing" of your information for targeted advertising, at any time — by adjusting your browser cookie settings, installing the Google Analytics Opt-out Add-on, turning off ad personalization in your Google Ad Settings, using the Cookie Preferences link on our site, enabling Global Privacy Control (GPC) in your browser (which we honor as an opt-out), or emailing us at support@sellphone.pro. See our Cookie Policy for details.

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including the right to know what categories of personal information we collect, the right to delete it, and the right to opt out of the "sale" or "sharing" of your personal information for cross-context behavioral advertising. You can exercise the opt-out using any of the methods described above, and we honor Global Privacy Control signals. We will not discriminate against you for exercising your privacy rights.

If you are in the European Economic Area (EEA), United Kingdom, or Switzerland, you also have the right to lodge a complaint with your local supervisory authority if you believe we have not handled your personal information in accordance with applicable law.

We will respond to rights requests within the timeframe required by applicable law (generally 30 to 45 days). We may need to verify your identity before fulfilling your request.

10. Children's Privacy

The Service is not directed to individuals under the age of 16, and we do not knowingly collect personal information from children under 16. If you believe a child under 16 has provided us with personal information, please contact us at support@sellphone.pro and we will take steps to delete that information promptly.

11. International Users and Data Location

The Service is operated from and primarily directed toward users in the United States. Our sub-processors (Twilio, Stripe, Supabase, Resend, Google) may process your data in the United States and other countries. If you access the Service from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States or other jurisdictions where data protection laws may differ from those in your country of residence. By using the Service, you acknowledge this transfer.

12. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by posting the updated policy on the Service with a revised effective date, and where appropriate, by email to the address associated with your account. Your continued use of the Service after any such changes constitutes your acceptance of the updated policy. We encourage you to review this page periodically.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our handling of your personal information, please contact our privacy team:

PG Insights LLC dba Sellphone
3324 Rue Royale St. #1406, St. Charles, MO 63301
Email: support@sellphone.pro