NextTyr LLC — Privacy Policy
Effective Date: Last Updated:
Also see our Terms of Service.
This Privacy Policy ("Policy") describes how NextTyr LLC, an Idaho limited liability company ("NextTyr," "Company," "we," "us," or "our"), collects, uses, processes, discloses, and retains information in connection with our software-as-a-service platform, including the Front Desk AI call-answering feature, websites, and related services (collectively, the "Services").
This Policy should be read together with our Terms of Service, which govern use of the Services and are incorporated by reference.
1. Scope; Who This Policy Applies To
This Policy applies to three distinct groups, and different portions apply to each.
1.1 Customers
Businesses and individuals who subscribe to the Services ("Customers"). Where this Policy uses "you," it refers to a Customer unless otherwise stated.
1.2 Callers and End Users
Individuals who call, message, or otherwise communicate with a Customer through the Services, and individuals whose information a Customer stores in the Services as a contact or lead ("Callers and End Users"). If you are a Caller or End User, Sections 3.2, 5, 6, 7, 8, 10, 12, and 13 describe how your information is handled and what rights you have. NextTyr processes your information on behalf of the business you contacted. That business, not NextTyr, decides what information to collect about you and why. Direct requests about that information to the business you contacted; see Section 13.6 if you are unable to reach them.
1.3 Website Visitors
Individuals who visit NextTyr's own website or a website NextTyr hosts for a Customer.
1.4 Geographic Scope
The Services are offered and intended for use only in the United States. The Services are not offered to, and are not intended for use by, individuals located in the European Economic Area, the United Kingdom, or Switzerland. NextTyr does not knowingly market to or solicit customers in those jurisdictions.
2. Our Role: Controller and Processor
NextTyr's role depends on the information at issue, and it is not the same for all information we handle.
2.1 Where NextTyr Acts as a Processor / Service Provider
With respect to Customer Data — including contacts, leads, call recordings, transcripts, messages, and other content processed on a Customer's behalf — NextTyr acts as a "processor" or "service provider." The Customer determines the purposes and means of that processing and acts as the "controller" or "business." Customers are responsible for the lawfulness of the data they collect and for providing required notices to their own Callers and End Users.
2.2 Where NextTyr Acts as a Controller / Business
NextTyr acts as a controller or business with respect to: (a) Customer account, billing, and payment information; (b) Usage Data and technical telemetry about how the Services perform; (c) information collected through NextTyr's own website and marketing activities; and (d) de-identified and aggregated information derived from Customer Data that NextTyr uses to operate, secure, analyze, and improve the Services and its AI systems as described in Section 6.
2.3 Why This Distinction Matters
NextTyr discloses in Section 2.2(d) that it uses information derived from calls and other Customer Data for its own product-improvement purposes. We identify this expressly rather than characterizing ourselves solely as a processor, so that Customers, Callers, and End Users understand the full scope of our processing.
3. Information We Collect
3.1 Information Customers Provide
Name, business name, email address, telephone number, mailing address, business contact details, account credentials, preferences and configuration settings, support communications, and payment information (payment card details are collected and processed by our payment processor, not stored by NextTyr).
3.2 Call Recordings, Transcripts, and Voice Information
When the Front Desk answers a call, NextTyr may collect and process: audio recordings of the call; automated transcripts of the conversation; caller telephone number and carrier-provided caller identification; call metadata including date, time, duration, ring time, routing path, and disposition; information the caller states during the call, such as name, address, contact details, the reason for calling, appointment preferences, and any other details the caller volunteers; and derived information such as intent classification, sentiment indicators, summaries, and extracted appointment or lead details.
3.3 Customer Data
Contacts, leads, messages, notes, scheduling records, website content, and other materials a Customer or its authorized users submit to or generate through the Services.
3.4 Information Collected Automatically
IP address, browser type and version, device identifiers and characteristics, operating system, referring URLs, pages and features accessed, session duration, interaction events, error and diagnostic logs, and information collected through cookies and similar technologies as described in Section 9.
3.5 Information From Third Parties
Information from payment processors, telecommunications and messaging providers, carriers, AI and model providers, hosting and infrastructure providers, analytics providers, and — where a Customer enables an integration — information from the Customer's connected third-party accounts.
3.6 Categories of Personal Information Collected
For purposes of the California Consumer Privacy Act and comparable state laws, NextTyr collects the following categories of personal information. We collect each category from the sources described in Sections 3.1 through 3.5, use it for the purposes described in Section 4, and disclose it for a business purpose to the categories of recipients described in Section 8.2.
| Category | Examples | Collected |
|---|---|---|
| Identifiers | Name, postal address, email, telephone number, IP address, account ID | Yes |
| Customer records | Billing address, payment information, business contact details | Yes |
| Commercial information | Subscription and transaction records, services purchased, usage history | Yes |
| Internet or network activity | Browsing and interaction data, feature usage, diagnostic logs | Yes |
| Geolocation data | Approximate location derived from IP address or telephone area code | Yes |
| Audio and electronic information | Call recordings, transcripts, voice data, messages, emails | Yes |
| Professional or employment information | Business name, role, industry, business contact details | Yes |
| Inferences | Intent, interest, sentiment, lead quality and similar derived characteristics | Yes |
| Sensitive personal information | Account credentials; any sensitive details a caller volunteers during a call (see Section 3.7) | Limited — see Section 3.7 |
| Biometric information | — | No |
| Education information | — | No |
We do not knowingly collect information revealing racial or ethnic origin, religious beliefs, union membership, or sexual orientation, and we do not use any personal information to infer characteristics about an individual.
3.7 Sensitive Information Volunteered During Calls
Because callers speak freely, a caller may volunteer sensitive information that neither NextTyr nor the Customer requested — for example, health details, financial account information, or a payment card number read aloud. NextTyr does not solicit this information and instructs Customers not to configure the Services to request it. Where such information is captured incidentally, NextTyr processes it only as necessary to provide the Services and does not use or disclose it for any purpose that would require an opt-out right under applicable law. Customers are prohibited under our Terms of Service from using the Services to collect protected health information subject to HIPAA, payment card data, government identification numbers, or biometric identifiers. If you believe sensitive information was captured in error, contact us at the address in Section 18 and we will work to remove it.
4. How We Use Information
We use information to provide, operate, maintain, and secure the Services; answer, route, record, transcribe, and summarize calls; create and manage accounts and authenticate users; process payments, manage subscriptions, and calculate usage and overages; send communications including SMS and email at a Customer's direction and configuration; provide customer support and respond to inquiries; monitor, troubleshoot, and improve performance, reliability, and accuracy; develop new features and services; produce analytics and reporting for Customers; detect, investigate, and prevent fraud, abuse, security incidents, and violations of our Terms of Service; improve and train our AI systems as described in Section 6; and comply with legal obligations and enforce our agreements.
5. Automated Processing and AI
5.1 Automated Decision-Making
The Services use artificial intelligence and automated systems to answer calls, generate responses, classify intent, extract information, schedule appointments, route communications, and produce insights. These systems operate without human review in real time. Outputs may be inaccurate or incomplete.
5.2 No High-Stakes Automated Decisions
NextTyr does not use the Services to make decisions producing legal or similarly significant effects concerning individuals — such as decisions about credit, housing, employment, insurance, or healthcare — and prohibits Customers from doing so without independent human review.
5.3 Disclosure of AI Interaction
The Front Desk identifies itself as an automated assistant. Customers are responsible for ensuring their configuration maintains any AI disclosure required by applicable law in the jurisdictions where they and their callers are located.
6. Use of Call Content to Improve Our AI Systems
6.1 What We Do
NextTyr uses de-identified and aggregated information derived from Customer Data — including call recordings and transcripts — to operate, evaluate, secure, and improve the Services and to develop, train, tune, and improve our artificial intelligence and machine learning systems.
6.2 De-identification
Before information is used for the purposes described in Section 6.1, we apply commercially reasonable measures designed to remove or obscure information that identifies a Customer, a caller, or any other individual. We do not attempt to re-identify de-identified information, and we contractually prohibit recipients from doing so.
6.3 Ownership and Retention
NextTyr owns de-identified and aggregated information and may retain and use it during and after a Customer's subscription, including after Customer Data has been deleted under Section 10.
6.4 Third-Party AI Providers
Certain AI functionality is provided by third-party model providers. Where NextTyr transmits call content to such providers to deliver the Services, we contract for those providers not to use that content to train their own general-purpose models, except where a Customer has enabled an integration that provides otherwise.
6.5 Customer Choice
Customers on eligible plans may request that their call content be excluded from the uses described in Section 6.1 by contacting us at the address in Section 18. Exclusion does not affect processing necessary to deliver the Services.
7. Call Recording, Consent, and Communications Compliance
7.1 Recording Is a Core Function
Calls answered by the Front Desk are recorded and transcribed as an inherent part of the Services.
7.2 Consent Laws Vary by State
Some states require the consent of all parties to a call before it may be recorded; others require only one party's consent. The applicable rule generally depends on where the parties are located.
7.3 Customer Responsibility
Customers are solely responsible for determining whether recording is permitted for their calls, for enabling and maintaining any required recording disclosure, for obtaining all legally required consents from callers and their own personnel, and for honoring requests not to be recorded. NextTyr provides configurable disclosure functionality but does not determine what disclosure is legally sufficient for any Customer.
7.4 Messaging and Marketing Compliance
The Services enable SMS, email, and other outbound communications. Customers are solely responsible for compliance with the Telephone Consumer Protection Act, the CAN-SPAM Act, state telemarketing and do-not-call laws, and carrier and industry messaging requirements, and represent that they have obtained all necessary consents from recipients and maintain records of those consents.
7.5 No Legal Advice
Tools, templates, disclosures, and guidance provided by NextTyr are offered for convenience only and do not constitute legal advice or any assurance of compliance.
10. Data Retention
10.1 General
We retain information for as long as necessary to provide the Services, maintain your account, comply with legal obligations, resolve disputes, and enforce our agreements.
10.2 Call Recordings and Transcripts
Audio recordings are retained for thirty (30) days, after which they are deleted. Transcripts, call metadata, and derived summaries are retained for the life of the Customer's account unless deleted earlier by the Customer.
10.3 On Termination
Upon termination or cancellation, Customer Data is retained for up to thirty (30) days to allow the Customer to request an export, after which it may be permanently deleted.
10.4 Exceptions
Following deletion, we may continue to retain information: where required by law or to comply with a legal hold; in routine backup and disaster-recovery media until those media are overwritten in the ordinary course; as necessary to resolve disputes or enforce agreements; and in de-identified or aggregated form as described in Section 6.
11. Data Security
We maintain commercially reasonable administrative, technical, and physical safeguards designed to protect information against unauthorized access, use, alteration, and destruction. These include encryption in transit, access controls and authentication, monitoring and logging, and periodic review of our security practices. No system is completely secure, and we cannot guarantee absolute security. Customers are responsible for safeguarding their account credentials, managing user access, and maintaining their own backups.
12. Data Breach Notification
If we become aware of a security incident affecting personal information, we will investigate promptly, take reasonable steps to mitigate, and provide notification to affected Customers and, where required, to individuals and regulators, in accordance with applicable law and within the timeframes those laws require. Where NextTyr acts as a processor, we will notify the affected Customer without undue delay so the Customer can meet its own notification obligations.
13. Your Privacy Rights
13.1 Rights
Subject to applicable law and depending on your state of residence, you may have the right to: confirm whether we process your personal information and access it; obtain a copy in a portable format; correct inaccurate information; delete your information; know the categories of information collected, the sources, the purposes, and the categories of recipients; opt out of the sale or sharing of personal information and of targeted advertising; limit the use of sensitive personal information; opt out of certain profiling with legal or similarly significant effects; and not be discriminated or retaliated against for exercising any of these rights.
13.2 State Coverage
These rights are provided under laws including the California Consumer Privacy Act as amended, and the comprehensive privacy laws of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and other states as they take effect. The specific rights available to you depend on your state of residence.
13.3 How to Exercise
Submit a request to the email or mailing address in Section 18. We will acknowledge and respond within the period required by applicable law, generally forty-five (45) days, and may extend once where permitted with notice to you.
13.4 Verification
To protect your information, we will take reasonable steps to verify your identity before acting on a request, which may require you to provide information matching our records. We may decline a request we cannot verify.
13.5 Authorized Agents
You may use an authorized agent to submit a request. We may require proof of the agent's authorization and separate verification of your identity.
13.6 Requests From Callers and End Users
If your information is held in the Services on behalf of a Customer, that Customer controls it. Please direct your request to the business you contacted. If you are unable to identify or reach that business, contact us using the details in Section 18 and we will make reasonable efforts to route your request to the responsible Customer or to respond directly where required by law.
13.7 Appeals
If we deny your request, you may appeal by replying to our response or writing to the address in Section 18 with the word "Appeal" and a brief explanation. We will respond to an appeal within the period required by applicable law, generally forty-five (45) days, and will explain our reasoning. If your appeal is denied, you may contact your state attorney general to submit a complaint.
14. California Notice at Collection
Consistent with Section 3.6, NextTyr collects the categories of personal information listed there, for the purposes described in Section 4, from the sources described in Sections 3.1 through 3.5. We disclose personal information for business purposes to the categories of recipients in Section 8.2. We retain personal information for the periods described in Section 10, or where a specific period cannot be provided, for as long as reasonably necessary for the purposes described in this Policy. We do not sell or share personal information. California residents may exercise the rights described in Section 13.
15. Children's Privacy
The Services are intended for business use and are not directed to children. NextTyr does not knowingly collect personal information from children under 13, and our Terms of Service prohibit Customers from submitting information about children under 13 to the Services. Because callers to a Customer's business may include minors, information about a minor may be captured incidentally in a call recording or transcript. If we learn that we have collected personal information from a child under 13 without appropriate consent, we will delete it. Parents or guardians who believe a child's information has been collected may contact us at the address in Section 18.
16. Data Processing Addendum
Where NextTyr processes personal information on a Customer's behalf that is subject to applicable data protection laws, the parties' respective obligations are governed by NextTyr's Data Processing Addendum, which is incorporated into the Terms of Service and is available on request. In the event of a conflict between the Data Processing Addendum and this Policy with respect to Customer Data, the Data Processing Addendum controls.
17. Changes to This Policy
We may update this Policy from time to time. We will post the revised Policy with an updated "Last Updated" date and, for material changes, will provide reasonable advance notice by email or in-product notification before the changes take effect. Continued use of the Services after the effective date constitutes acceptance of the updated Policy.
18. Contact Information
NextTyr LLC
408 S Eagle Rd
Eagle, ID 83616
Privacy requests: privacy@nexttyr.com
General support: support@nexttyr.com
Legal notices: legal@nexttyr.com