SAM Privacy Policy

The short version: SAM is a voice AI assistant that handles calls, captures action items, and helps you manage your day. To do that, we collect call audio and transcripts, your calendar and email data (only when you connect them), and the tasks you create. We use this data only to provide the service to you — we never sell it or use it to train AI models. You can request deletion at any time.

Who We Are

SAM Smart Assistant Manager LLC ("SAM," "we," "us," or "our") operates the AI voice assistant service available at callsam.app. SAM is designed to help busy professionals manage calls, tasks, and daily coordination through an AI-powered voice interface.

This Privacy Policy applies to your use of callsam.app, the SAM phone number, any associated mobile applications, and all related services (collectively, the "Service").

What We Collect

Information you provide directly

Your name, email address, and phone number when you register
Account preferences and settings you configure in the dashboard
Action items, tasks, and notes you add to your board
Feedback or support requests you send to us

Information from voice calls

Call audio: Recordings of calls made to or from your SAM number
Transcripts: Text transcriptions of those calls
Call metadata: Date, time, duration, and caller/recipient numbers
Extracted content: Action items, tasks, and commitments SAM identifies during calls

Information from connected accounts (optional)

SAM integrates with third-party services only when you explicitly connect them. When connected, we access:

Service	What we access	Why
Google Calendar	Events, titles, times, attendees	To include your schedule in daily briefs
Microsoft Outlook	Calendar events and email inbox	To include your schedule and flagged emails in briefs
Gmail	Inbox messages, sender, subject, preview	To surface unread emails during calls and draft replies

Technical information

IP address and browser or device type when you use the dashboard
Usage logs (pages visited, actions taken, errors encountered)
Cookies and session tokens required to keep you logged in

How We Use Your Data

We use your information only to provide and improve the Service to you. Specifically:

To answer your calls and conduct AI-assisted voice conversations
To extract, organize, and display your action items on the dashboard
To send you email summaries, action plans, meeting minutes, and call recaps
To deliver scheduled morning briefs and afternoon debriefs
To surface your calendar events, emails, and tasks during calls
To send SMS notifications, voicemail alerts, and reminders
To authenticate you and keep your account secure
To troubleshoot errors and improve service reliability

We do not sell your data, share it with advertisers, or use it to train AI models. Your call transcripts and task data are your own.

Third-Party Services

SAM is built on several third-party platforms. Each is subject to its own privacy policy:

Provider	Purpose	Data shared
VAPI	AI voice call infrastructure	Call audio, transcripts, phone numbers
Twilio	Phone number, SMS delivery	Phone numbers, SMS content
Supabase	Database and authentication	All stored account and task data
Resend	Transactional email delivery	Your email address and email content
OpenAI	AI language model (via VAPI)	Call context and transcripts
WeatherAPI	Weather data for daily briefs	Your approximate location (city-level)
Render	Cloud hosting for our servers	Server logs, request data

We select providers who maintain appropriate security standards and contractual data protection obligations. We do not authorize any provider to use your data for their own purposes.

Data Retention

We retain your data for as long as your account is active or as needed to provide the Service:

Call transcripts and audio: Retained for 12 months from the date of the call, then deleted
Action items and tasks: Retained until you delete them or close your account
Email and calendar data: Accessed in real time; we do not permanently store your emails or calendar events beyond what is necessary for immediate call delivery
Account information: Retained until you request deletion or your account is terminated
Usage logs: Retained for up to 90 days for security and debugging purposes

When you close your account, we delete your personal data within 30 days, except where we are required to retain it for legal or compliance reasons.

Your Rights

Depending on where you are located, you may have the following rights regarding your personal data:

Access: Request a copy of the data we hold about you
Correction: Request that we correct inaccurate or incomplete data
Deletion: Request that we delete your account and personal data
Portability: Request your data in a structured, machine-readable format
Objection: Object to certain types of processing
Withdrawal of consent: Disconnect any connected account at any time from your dashboard settings

To exercise any of these rights, contact us at the address below. We will respond within 30 days.

If you are located in California, you have additional rights under the California Consumer Privacy Act (CCPA). If you are located in the European Economic Area or United Kingdom, you have additional rights under the General Data Protection Regulation (GDPR).

Security

We take the security of your data seriously. Our measures include:

All data transmitted between your device and our servers is encrypted using TLS
Database access is restricted and authenticated; all connections are encrypted at rest
API keys and credentials are stored as environment secrets and never exposed in code
Phone number verification and optional 4-digit PIN security for sensitive actions such as sending emails
Access logs are maintained and reviewed for anomalous activity
Third-party providers are selected based on their security practices and compliance certifications

No method of transmission over the internet or method of electronic storage is 100% secure. If you believe your account has been compromised, contact us immediately at the address below.

AI Processing

SAM uses AI to conduct voice conversations, extract action items, generate summaries, and draft emails on your behalf. This involves sending portions of your call content and context to third-party AI providers (currently OpenAI, via VAPI).

Your call audio is transcribed and processed by AI to understand and respond to what you say
Your calendar events, action items, and email subjects are provided to the AI as context during calls
SAM uses AI to generate written documents such as action plans and meeting minutes

We do not use your data to train AI models. Your transcripts and task data are not used to improve AI models, either by us or by our providers, under the terms of our agreements with those providers.

AI responses are generated automatically. You should review AI-generated content — such as drafted emails or meeting minutes — before relying on it.

Children's Privacy

SAM is designed for use by business professionals and is not directed at children under the age of 18. We do not knowingly collect personal information from anyone under 18. If we become aware that someone under 18 has provided us with personal information, we will delete it promptly.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the effective date at the top of this page and, for material changes, notify you by email or by a notice in the dashboard.

Your continued use of the Service after any changes take effect constitutes your acceptance of the revised policy.

Contact Us

For privacy-related questions, data requests, or to report a security concern:

Data Controller

SAM Smart Assistant Manager LLC

callsam.app

privacy@callsam.app

We aim to respond to all privacy-related inquiries within 5 business days.