Privacy Policy

Last updated: February 28, 2026

This Privacy Policy describes how Westbridge Solutions LLC ("Company", "we", "us", "our") collects, uses, and protects your information when you use Phone4.ai ("Service").

1. Information We Collect

Information you provide

Data	Purpose	Stored where
Phone number (E.164)	Account identifier, SMS delivery	Neon Postgres
Stripe customer ID	Subscription management	Neon Postgres
Stripe subscription ID	Billing lifecycle	Neon Postgres

Information generated by usage

Data	Purpose	Stored where
Call metadata (direction, duration, timestamp)	Usage tracking, billing cap enforcement	Neon Postgres
Provisioned phone number	Service delivery	Neon Postgres
Agent webhook URL	Inbound call routing	Neon Postgres

Information we do NOT collect

• Call audio or recordings — we never record calls
• Call transcripts — we never transcribe calls
• Voicemail content
• Email addresses (unless you contact support)
• Names, physical addresses, or government IDs
• IP addresses or device identifiers
• Cookies or tracking pixels on our payment pages

2. How We Use Your Information

• Provide the Service — provision numbers, route calls, enforce limits
• Process payments — manage your Stripe subscription
• Send SMS — activation links, confirmations, usage alerts, and responses to STOP/USAGE commands
• Enforce limits — rate limiting, minute caps, abuse prevention

We do not use your information for advertising, profiling, analytics, or any purpose beyond operating the Service.

3. Information Sharing

We do not sell, rent, or trade your personal information. We share data only with:

• Stripe — payment processing (your phone number is passed as metadata for subscription management)
• Twilio — voice and SMS delivery (your phone number is used to route calls and send messages)
• Your AI agent — inbound call notifications are sent to the webhook URL registered by the agent that requested your number

We may disclose information if required by law, court order, or to protect the rights and safety of our users.

4. Data Security

• All data is transmitted over HTTPS/TLS.
• Database connections use SSL.
• Stripe webhook signatures are verified cryptographically.
• Activation tokens use HMAC-SHA256 with time-limited validity.
• We use parameterized SQL queries to prevent injection attacks.

5. Data Retention

• Active accounts: Data is retained for the duration of your subscription.
• Canceled accounts: Account records are retained for 90 days after cancellation for billing reconciliation, then deleted.
• Call metadata: Usage events are retained for 12 months for billing dispute resolution.

6. Your Rights

You have the right to:

• Access your data — text USAGE to see your minutes, or contact us for a full export
• Delete your data — reply STOP to cancel and request deletion via email
• Opt out of SMS — reply STOP at any time

To exercise any of these rights, email support@phone4.ai.

7. Children's Privacy

Phone4.ai is not intended for use by anyone under 18 years of age. We do not knowingly collect information from children.

8. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected
• Right to request deletion of personal information
• Right to opt out of the sale of personal information (we do not sell your data)
• Right to non-discrimination for exercising your rights

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify active users of material changes via SMS. Continued use of the Service after changes constitutes acceptance.

10. Contact

For privacy-related questions or requests:

Westbridge Solutions LLC
30 N Gould St Ste R
Sheridan, WY 82801
Email: support@phone4.ai