Privacy Policy

This Privacy Policy explains how Reconnect (“Reconnect,” “we,” “us,” or “our”), operated by Reconnect, Inc., located at 123 Memory Lane, Suite 100, Wilmington, DE 19801, USA, collects, uses, shares, retains, and protects personal information when you use our website, mobile experiences, and related services (collectively, the “Service”).

If you do not agree with this policy, please do not use the Service.

We collect the following categories of information:

• Account and identity information. When you sign in, our authentication provider, Clerk, processes your name, email address, and login identifiers. If you sign in through Google, Facebook, or Apple, we receive basic profile information that you authorize that provider to share.
• Voice recordings. Audio files you upload to create or enrich a persona.
• Voiceprints (biometric identifiers). To reproduce a voice, our voice provider derives a mathematical voice model from your recordings. Depending on applicable law, this may be considered biometric information. See Section 4.
• Persona content. Names, biographical details, personality traits, interests, and stories you provide so a persona sounds and responds true to the person.
• Conversation and call data. Information related to calls and conversations with a persona, which may include call metadata and, where you enable it, transcripts.
• Usage, device, and log data. IP address, browser and device type, pages viewed, and similar diagnostic information.
• Cookies and similar technologies. Used to keep you signed in and to operate and secure the Service. See Section 11.

We use personal information to:

• Create, operate, and improve the voice personas you request.
• Authenticate you and keep your account secure.
• Provide, maintain, troubleshoot, and develop the Service.
• Communicate with you about your account, security, and changes to the Service.
• Detect, prevent, and address fraud, abuse, and security incidents.
• Comply with legal obligations and enforce our Terms of Service.

Where required (for example, under the GDPR), we rely on the following legal bases: performance of our contract with you; your consent (including explicit consent for biometric data); our legitimate interests in operating and securing the Service; and compliance with legal obligations.

Creating a persona requires a voiceprint - a mathematical representation of a voice generated from your recordings. We collect, generate, and use voiceprints solely to produce and operate the persona you request.

• We do not sell voice recordings or voiceprints.
• We do not use your private recordings or voiceprints to train general-purpose models for unrelated purposes.
• We use voiceprints only to provide the Service to you, and we retain them only as described in Section 8.
• Where the law requires consent for biometric data (for example, the Illinois Biometric Information Privacy Act), we ask you to confirm you have obtained any consent required from the person whose voice is used. See Section 5.

Personas are usually created from the voice of someone other than the account holder. You are responsible for having a lawful basis to upload and use that person's voice and likeness:

• For a living person, this generally means their informed consent.
• For a person who has passed, this means you hold the appropriate authority or rights to do so.

By uploading a recording, you represent that you have obtained any consent or authority required by law. If you believe a persona was created using your voice or that of someone you represent without authorization, contact us at contact@reconnect.family.

We do not sell your personal information. We share information only with service providers that help us operate the Service, under contracts that limit their use of the information to providing services to us:

• Clerk - authentication and identity management.
• Amazon Web Services (AWS) - cloud hosting and storage of recordings and account data.
• ElevenLabs - voice cloning and speech generation.
• OpenAI - generating the persona's conversational profile.
• Vapi - powering voice calls with a persona.

We may also disclose information to comply with law, to protect our rights and the safety of others, or in connection with a merger, acquisition, or sale of assets, subject to this policy.

We retain personal information only as long as necessary for the purposes described in this policy:

• Account and profile data - for as long as your account is active. After you close your account, we delete it from active systems within 30 days and purge it from backups within 90 days.
• Voice recordings and voiceprints - until you delete the associated persona or your account. Upon deletion, we remove them from active systems promptly and instruct our voice provider to delete the corresponding voiceprint; backups are purged within 90 days.
• Persona content - for the life of the persona; deleted on the same schedule as recordings.
• Conversation and call data - retained until you choose to delete it, so you keep your conversations for as long as you want them. (We plan to offer an archiving option in the future.)
• Logs and security data - retained for 3 months for security and diagnostics.
• Records we must keep by law - retained for the period required by applicable law.

See Section 13 and our Data Deletion page to delete your data.

We use administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit, access controls, and reputable cloud infrastructure. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

We and our service providers may process and store information in the United States and other countries. Where we transfer personal information across borders, we rely on appropriate safeguards, such as standard contractual clauses, where required by law.

Depending on where you live, you may have some or all of the following rights:

• Access the personal information we hold about you.
• Correct inaccurate information.
• Delete your information (see Section 13).
• Port a copy of your information.
• Object to or restrict certain processing, and withdraw consent, including consent for biometric data.

California residents (CCPA/CPRA). You have the right to know, delete, and correct your personal information, and to limit the use of sensitive personal information. We do not sell or share your personal information for cross-context behavioral advertising, and we do not use sensitive personal information (including biometric data) for purposes beyond providing the Service. We will not discriminate against you for exercising your rights.

To exercise any right, contact us at contact@reconnect.family. We will verify your request and respond within the timeframe required by law.

The Service is not directed to children under 13 (or the minimum age required in your jurisdiction), and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it.

We use strictly necessary cookies to keep you signed in and to secure the Service. If you sign in through Google, Facebook, or Apple, your use of that login is also governed by that provider's privacy policy, and you can revoke Reconnect's access from that provider's account settings at any time.

You can delete individual personas and their recordings from your dashboard at any time, and you can request deletion of your entire account. For full instructions and timelines, see our dedicated Data Deletion page, or email contact@reconnect.family with the subject line “Data Deletion Request.”

We may update this Privacy Policy from time to time. When we do, we will revise the effective date above and, for material changes, provide additional notice. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

For privacy questions or requests, contact us at contact@reconnect.family or Reconnect, Inc., 123 Memory Lane, Suite 100, Wilmington, DE 19801, USA. If you are in the EEA or UK, you may also have the right to lodge a complaint with your local data protection authority.