Wysper

Privacy Policy

Effective Date: June 3, 2026

Wysper ("we," "us," or "our") is operated by the Nuralyn Foundation for Ethical and Constitutional AI Governance. This Privacy Policy explains how we collect, use, store, and protect information when you use the Wysper platform at wysper.cc and app.wysper.cc (the "Service").

1. Information We Collect

Account Information

When you register, we collect your name, email address, and password. Passwords are stored as bcrypt hashes and never in plaintext. Your name and email are encrypted at rest using AES-256-GCM with a per-tenant encryption key.

Call Data

When a call is processed through Wysper, we collect and process:

  • Caller phone number (encrypted at rest)
  • Call audio recordings (encrypted before storage; retained for 90 days by default)
  • Transcripts generated from call audio (encrypted at rest)
  • AI-generated coaching insights and entity extractions
  • Quick quotes and call summaries

Business Information

We collect business details you provide during setup (shop name, address, phone number) and may enrich this with publicly available data from Google Business Profiles.

Usage Data

We collect anonymized usage data including page views, feature usage patterns, and performance metrics. IP addresses are hashed before logging and never stored in plaintext.

2. How We Use Your Information

  • Provide real-time sales coaching during active calls
  • Generate post-call analysis, scoring, and quick quotes
  • Build and display analytics dashboards
  • Improve our AI coaching models and product experience
  • Communicate service updates and account notifications
  • Enforce security, prevent fraud, and comply with legal obligations

3. Third-Party Services

We use the following third-party services to operate Wysper:

  • Deepgram— Speech-to-text transcription. Audio is streamed in real time and not retained by Deepgram after processing.
  • Anthropic (Claude)— AI analysis for coaching prompts, entity extraction, and call scoring. Transcript data sent to Claude is not used to train Anthropic's models.
  • Telnyx / Twilio— Telephony and call routing. Call metadata is processed per their respective privacy policies.
  • Google Places API— Business enrichment using publicly available information.

4. Data Security

We implement the following security measures:

  • All personally identifiable information (PII) is encrypted at rest using AES-256-GCM
  • Each tenant has a unique Data Encryption Key (DEK), wrapped by a master key
  • Call recordings are encrypted before storage and decrypted only on authorized playback
  • All data transmission uses TLS/HTTPS encryption
  • Row-level security in our database enforces strict tenant isolation
  • Authentication uses short-lived JWT tokens with refresh token rotation
  • All data access is logged in tamper-resistant audit logs

5. Tenant Isolation

Wysper is a multi-tenant platform. Each shop's data is strictly isolated at the database level using PostgreSQL row-level security policies. Shop A can never access Shop B's calls, transcripts, quotes, leads, or any other data. This isolation is enforced by the database, not application code, and is continuously verified by automated tests.

6. Data Retention

  • Call recordings: 90 days by default (configurable per shop; automatically deleted after the retention period)
  • Transcripts and call data: retained while the account is active
  • Account data: retained until account deletion is requested
  • Audit logs: retained for 1 year

7. Your Rights

You have the right to:

  • Access the personal information we hold about you
  • Request correction of inaccurate information
  • Request deletion of your account and associated data
  • Export your data in a portable format
  • Opt out of non-essential communications

To exercise any of these rights, contact us at privacy@wysper.cc.

8. Children's Privacy

Wysper is a business tool and is not intended for use by individuals under 18. We do not knowingly collect information from minors.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email. The effective date at the top of this page indicates when the policy was last revised.

10. Contact

For questions about this Privacy Policy or our data practices, contact:

Nuralyn Foundation for Ethical and Constitutional AI Governance
Email: privacy@wysper.cc