Privacy Policy
AgentMasher ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our platform.
1. Information We Collect
Account Information: When you accept an invitation, we collect your name and email address. Your password is hashed using bcrypt and never stored in plain text.
Usage Data: We log the date and time of your last login, and activity within the platform such as leads created, emails sent, and calls initiated.
Business Lead Data: Data scraped from Google Places (business names, addresses, phone numbers, reviews, photos) is stored in our database and associated with your account.
Call Recordings and Transcripts: AI voice calls made through the platform may be recorded and transcribed by Vapi.ai. This data is stored and associated with the relevant lead record.
2. How We Use Your Information
- To provide and maintain the Service
- To send transactional emails (invitations, password resets, welcome messages)
- To manage your account and user session
- To enforce our Terms of Service
- To improve the platform based on usage patterns
3. Third-Party Services
AgentMasher uses the following third-party services that may process your data:
- Google Places API — for business discovery. Subject to Google's Privacy Policy.
- AWS SES (Simple Email Service) — for sending emails. Subject to AWS's Privacy Policy.
- Vapi.ai — for AI voice calls. Call audio and transcripts are processed by Vapi. Subject to Vapi's Privacy Policy.
- MySQL Database — your data is stored in a MySQL database hosted on infrastructure you or your organisation controls.
4. Data Sharing
We do not sell, trade, or rent your personal information to third parties. We may share data with service providers (listed above) only to the extent necessary to operate the platform. We may disclose information if required by law or to protect the rights, property, or safety of our users.
5. Data Retention
We retain your account information for as long as your account is active. Lead data, call logs, and outreach logs are retained indefinitely unless you or an administrator deletes them. Upon account deletion, your personal information is removed from our systems within 30 days.
6. Security
We implement industry-standard security measures including bcrypt password hashing, session-based authentication, and HTTPS. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
7. Cookies and Sessions
We use server-side sessions (via HTTP-only cookies) to maintain your login state. No advertising or tracking cookies are used. You can clear session cookies by signing out or clearing your browser cookies.
8. Your Rights
Depending on your jurisdiction, you may have the right to access, correct, or delete your personal information. To exercise these rights, please contact your account administrator or reach out to us directly.
9. Children's Privacy
AgentMasher is not intended for use by individuals under the age of 16. We do not knowingly collect personal information from children.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify users of significant changes via email or a prominent notice in the platform. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.
11. Contact Us
If you have questions about this Privacy Policy or how we handle your data, please contact us via the email address registered with your account.