← Back

Privacy Policy

Effective date: January 1, 2026 · RelayFox Inc., Vancouver, Canada

1. Who we are

RelayFox Inc. (“RelayFox,” “we,” “us”) operates the RelayFox missed-call recovery service at relayfox.ai. We are subject to Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation.

2. Information we collect

Business account information: When you create a RelayFox account we collect your name, email address, business name, industry, service area, and phone numbers used for notifications and call forwarding.

Caller data: When a missed call is forwarded to your RelayFox number, we collect the caller’s phone number and the content of any SMS conversation initiated on your behalf. Where the business has enabled live answering, we also collect the written transcript of the call the AI assistant answers, and the lead details spoken during it (such as name, service needed, urgency and address). The audio of these calls is not recorded or stored — neither by us nor by our voice provider; it is transcribed as the call happens and the audio is discarded. Callers are told at the start of these calls that they are speaking to an assistant.

Usage data: We log API requests, call and message events, and billing activity to operate and improve the service.

Payment information: Billing is handled by Stripe. We do not store credit card numbers. We retain subscription status and billing history.

3. How we use your information

  • To provide the missed-call recovery service on your behalf
  • To answer your missed calls with an AI assistant where the business has enabled it, including transcribing those calls to extract the lead
  • To send automated SMS messages to your callers (with their implicit consent as described in §7)
  • To send you lead alerts and account notifications
  • To process billing and prevent fraud
  • To improve our AI models and service quality (using anonymised, aggregated data only)

4. Sub-processors

We share data with the following third-party processors as necessary to operate the service:

ProcessorPurposeData shared
TwilioPhone number provisioning, inbound call routing, SMS deliveryCaller phone numbers, SMS message content
OpenAIAI-powered conversation and lead scoringSMS conversation text (no PII beyond phone numbers)
Retell AIReal-time AI voice assistant that answers missed calls (hosted in the United States)Call audio, processed live to speak and transcribe and not stored, and the resulting transcript
StripePayment processingBilling contact, subscription status
Amazon Web ServicesCloud infrastructure (us-east-1)All data — our primary hosting provider
ResendTransactional email (verification, lead alerts)Email addresses, notification content
PostHogProduct analytics, error tracking, and session replay (hosted in the United States)Usage events, error reports, and masked interface recordings — form inputs and on-screen text are masked in the browser before anything is sent

5. Data retention

We retain your account data for as long as your account is active and for 90 days after deletion to allow recovery. Transcripts of calls answered by our AI assistant (there is no audio recording of those calls), voicemail recordings and their transcripts, and SMS conversation logs are retained for 12 months. Billing records are retained for 7 years as required by Canadian law.

6. Data security

All data is encrypted in transit (TLS 1.2+). Stored files (voicemail audio and greetings) are encrypted at rest; we are extending at-rest encryption to our database storage. Our infrastructure runs on Amazon Web Services in the United States (us-east-1). We restrict access to personal data to personnel who need it to operate the service.

7. Caller consent, call transcripts and messaging

AI-answered calls. Where a business has enabled live answering, calls it misses are answered by an AI assistant. Every such call opens with a spoken notice that identifies the assistant — delivered before any information is collected, so the caller can hang up or ask for a person. That notice cannot be switched off by the business. These calls are not recorded: no audio is retained by us or by our voice provider. What is kept is the written transcript, which is what lets us extract the lead and show it to the business. The assistant will always confirm it is an AI if asked, and a caller who asks for a human is passed to the business with their callback details. This is how we meet our openness and consent obligations under PIPEDA, and the transparency requirements for automated processing under Quebec’s Law 25. Transcripts are deleted on the retention schedule in §5.

Voicemail. When the assistant cannot take a call, the caller reaches the business’s RelayFox voicemail. Recordings are transcribed so the business can act on them, and are deleted on the retention schedule in §5.

SMS. RelayFox does not send text messages to callers. Text messages go only to the business that subscribes to the service — lead notifications, voicemail alerts and account notices sent to the phone number that business gave us. If you called a business and reached RelayFox, you will not receive a text from us.

8. Your rights under PIPEDA

You have the right to access, correct, or request deletion of personal information we hold about you. To exercise these rights, email us at hello@relayfox.ai. We will respond within 30 days.

9. Changes to this policy

We may update this policy from time to time. Material changes will be communicated by email to account holders at least 14 days before taking effect.

10. Contact

RelayFox Inc.
Privacy Officer
hello@relayfox.ai

Terms of Service  ·  Home