Privacy Policy

• Account: name, email address (via Google OAuth or magic-link).
• Practice activity: scenario choices, scores, coaching messages.
• Voice recordings & transcripts of practice sessions (created via Vapi).
• Subscription & billing metadata (held by Stripe; we store a customer ID).
• Standard server logs (IP, user agent) for security and abuse prevention.

Voice recordings are produced and stored on Vapi's infrastructure under their Data Processing Addendum. We retrieve transcripts and recording URLs to display in your session history. See Vapi's privacy policy for their handling and retention practices.

• Vapi — voice transport, transcription, and recording.
• OpenAI — scoring and coaching (transcripts are sent for analysis).
• Stripe — payment processing and subscription management.
• Resend — transactional email (magic-link sign-in).
• Google — optional OAuth sign-in.
• Neon — PostgreSQL hosting for your account data.
• Sentry — error and performance monitoring (may capture technical error details).

We do not sell your personal data. We share only what is necessary for each provider to perform its function.

You can export or delete your data at any time from your Settings page. Deletion is immediate and irreversible.

• Voice recordings: stored on our voice provider's (Vapi) infrastructure; Vapi does not auto-delete on a fixed schedule. Deleting your account removes your account data, scores, and transcripts from our systems; recordings held by Vapi are deleted on request.
• Account data, scores, transcripts: retained until you delete your account.
• Stripe billing records: retained per Stripe's policies for tax/compliance.

If you are a California resident, you have the right to know what personal information we collect, to request a copy of it, to request correction or deletion, and to opt out of any “sale” or “sharing” of personal information. We do not sell or share your personal information for cross-context behavioral advertising. You can exercise your access and deletion rights yourself from the Settings page, or contact us. We will not discriminate against you for exercising these rights.

We protect your data with industry-standard measures: encrypted connections (HTTPS), access controls, and reputable infrastructure providers. No system is perfectly secure, but we work to safeguard your information and limit access to what is necessary to run the Service.

The Service is intended for real estate professionals and is not directed to anyone under 18. We do not knowingly collect personal information from children.

We may update this policy; we will revise the “last updated” date above. Material changes will be reflected here.

Questions or requests: jason@systmatik.com.