Privacy Policy

Effective Date: September 24, 2026 · Last Updated: September 24, 2026

i3Simple is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, share, and protect information when you use the i3Simple AI voice calling platform.

Who is responsible for what

i3Simple provides a platform that our customers use to handle their own phone calls and contacts.

• For your account information — your name, business details, billing — i3Simple is the data controller.
• For the calls your AI agents handle and the contacts you upload — your customers’ names, numbers, recordings and transcripts — you are the data controller and i3Simple is your processor. We handle that information on your instructions and only to provide the service.

This distinction matters: you decide what to collect from your callers, how long to keep it, and what to tell them. We give you the tools and the controls.

Information We Collect

Information You Provide: Account registration information (name, business name, email, phone, address), payment information (processed by Stripe), and business configuration information (AI agent scripts, conversation flows, knowledge base content, pricing and hours you configure the agent to quote), and communications you send us.

Team Member Information: If you give staff their own logins, we store their name, email address, password (hashed, never in readable form), role and permissions, the mobile number you enter so incoming calls can ring them, their availability status, and a record of which calls, leads and tasks they handled. Staff work inside your account, so this information is visible to you as the account owner.

Contacts and Calling Lists You Upload: Names, business names, phone numbers, email addresses and any notes in the lists you import from Google Sheets, paste into the dialer, or assign to your staff. This is your data about your prospects and customers. We store it so your team can work through it, and we do not use it for any other purpose.

Automatically Collected: Log data (IP address, browser type, operating system, pages visited), device information, usage data, and cookies.

Call and Communication Data: Call recordings, transcripts, AI-generated summaries and, where you enable it, sentiment analysis; call metadata (phone numbers, duration, timestamps, which of your staff handled the call); and contact information of individuals who interact with your AI agents or are called by your team through our dialer.

From Third Parties: Information from payment processors (Stripe), telephony providers (Telnyx), voice and conversation providers (ElevenLabs), and integration partners you connect to the Service.

How We Use Your Information

• To create and manage your account and provide access to the platform
• To process payments and manage your subscription
• To operate AI voice agents on your behalf
• To connect incoming calls to you and your staff, and to place the calls your team makes
• To generate call recordings, transcripts, summaries and analytics
• To show you who on your team handled which call, lead or task
• To provide customer support and respond to your inquiries
• To detect, investigate, and prevent fraudulent activity and abuse of the calling system
• To comply with applicable laws and legal processes
• To analyze usage patterns and improve the platform using aggregated, anonymized data

We do not use your call recordings, transcripts, contacts or configuration to train AI models, ours or anyone else’s.

Call Recording and Consent

Calls handled by your AI agents, and calls your staff place through our browser dialer, may be recorded and transcribed so you have a record of what was said.

You are responsible for telling callers that calls are recorded, and for complying with the recording and calling laws that apply to you and to the people you call. Recording laws differ by state: Kentucky requires only one party to consent, while several states require all parties to consent. Our agents can be configured to announce recording at the start of a call, and we recommend you enable that.

If you use the platform to make outbound calls or run calling campaigns, you are responsible for complying with the Telephone Consumer Protection Act, state telemarketing rules, and Do Not Call requirements. You must honour an opt-out request immediately, and the platform records opt-outs so they are not called again.

How We Share Your Information

We do not sell your personal information. We share information only with:

Service Providers:

All are contractually bound to use your data only to provide services to us. A current list of subprocessors is available from legal@i3simple.com, and we will give notice before adding a new one that handles call or contact data.

Business Transfers: In the event of a merger or acquisition, with prior notice.

Legal Requirements: When required by law, subpoena, court order, or to protect rights and safety.

With Your Consent: When you have provided explicit consent.

Google API Services User Data & Limited Use Disclosure

i3Simple’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

When you connect your Google Calendar to i3Simple, we access and write calendar event data solely to create, update, or cancel appointments booked through your AI voice agent on your own connected calendar. This data is never used to train or improve any AI or machine learning model, including those provided by our third-party AI service providers (OpenAI, ElevenLabs), and is never transferred to those providers for any purpose other than the specific appointment-booking functionality you have enabled.

When you connect Google Sheets or Google Drive, we access only the specific spreadsheets you select, in order to import your contact lists into the dialer or write appointment and form data back to a sheet you have chosen. We do not browse, index or access any other file in your Drive.

Data obtained via Google API integrations is used exclusively for the features you have explicitly enabled within your own account, is never sold, and is never used for advertising purposes.

Data Retention

• Account Data: Retained while your account is active and for 90 days after termination.
• Call Recordings & Transcripts: Retained for your subscription duration plus 90 days. You may delete individual recordings at any time.
• Contact Data and Calling Lists: Retained for your subscription duration, then deleted 90 days after termination. You may delete a list, or an individual contact, at any time.
• Team Member Records: Retained while the member is active on your account. Removing a member deletes their login; the record of calls and work they completed remains in your account history, because it is your business record.
• Payment Records: Retained for 7 years as required by financial regulations.
• Log Data: Retained for a maximum of 12 months.

Data Security

We implement industry-standard security measures including TLS 1.2 or higher for data in transit, encryption at rest, access controls on a need-to-know basis, regular security monitoring and vulnerability assessments, and secure data centers.

Access within your own account is controlled by the role you give each staff member, and every request is checked against that role on our servers, not only hidden in the interface. Each staff member calls with their own credentials, so calls are attributable and access can be withdrawn for one person without affecting anyone else.

In the event of a breach affecting your personal information, we will notify you within 72 hours as required by applicable law.

Your Rights and Choices

• Access and Correction: Access and update most account information through platform settings.
• Data Portability: Request a copy of your data by contacting support@i3simple.com. Fulfilled within 30 days.
• Deletion: Request deletion by contacting support@i3simple.com. Processed within 30 days.
• Opt-Out of Marketing: Use the unsubscribe link in any marketing email.
• California (CCPA/CPRA) Rights: Right to know, delete, correct, and opt out of sale or sharing (we do not sell or share personal information as those terms are defined). Contact privacy@i3simple.com.
• GDPR Rights (EEA/UK): Rights of access, rectification, erasure, restriction, portability, and objection. Where we act as your processor, we will assist you in responding to requests from your own callers and contacts. Contact privacy@i3simple.com.

If you are a caller, not a customer: If an i3Simple AI agent answered your call to a business, that business decides what happens to the recording and your details. Contact them directly, or write to privacy@i3simple.com and we will pass your request to them.

Cookies and Tracking

We use essential cookies (required for platform function) and preference cookies. We do not currently use analytics or marketing cookies. See our full Cookie Policy for details.

International Data Transfers

Our servers are located in Europe and the United States, and calls are carried by providers operating internationally. For EEA and UK customers, international transfers are conducted pursuant to Standard Contractual Clauses adopted by the European Commission. Copies available at legal@i3simple.com.

Children’s Privacy

The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13.

Changes to This Policy

We will notify you of material changes by posting the updated Policy on our website and sending an email notification at least 14 days before changes take effect.

Contact

i3Simple Privacy Team
Email: privacy@i3simple.com
Support: support@i3simple.com