Privacy Policy

Send a Gremlin records phone calls on your behalf, so we hold recordings of real conversations with real people. This page explains exactly what we keep, for how long, and what you can do about it. No jargon.

What we collect

• Your account. Your name, email address, and password (stored hashed, never in plain text).
• Your phone number. Verified by text message. The verification code itself is handled by Twilio; we store only the number and the fact that it was verified.
• Your call briefs. The business, the number, and everything you tell the gremlin to do or say.
• The calls. An audio recording and a written transcript of each call, plus how long it ran and what it cost.
• Payments. Card details go to Stripe and never touch our servers. We keep a record of the amount and the Stripe reference.

How long we keep calls: 90 days

We keep the recording and the transcript of a call for 90 days. After that they are deleted. This is set on our calling agents at our voice provider as well as in our own storage, so both copies go.

During those 90 days you can download the audio and the text of any call to your own device, and we encourage you to. Anything you download is yours to keep, and once you have it, deletion on our side does not take it away from you. If a call matters to you, save it before the 90 days are up.

Your account details, your call briefs, and your billing history are kept while your account exists, because they are what the service is.

Who else sees your data

We use a small number of companies to run the service. Each one gets only what it needs.

• ElevenLabs runs the voice agent and handles the call audio.
• Twilio carries the phone calls and sends verification texts.
• Anthropic reviews your call brief before we place a call, to check it is a legitimate business call.
• Stripe processes payments.

We do not sell your data. We do not share it for advertising. We will hand over data if the law genuinely requires it, for example a valid court order.

The person on the other end

Calls involve someone who did not sign up for anything. We take that seriously. Every call is placed to a business on its public line, never to a private individual. The gremlin gives your verified number if the business needs to reach a real human. It admits it is an AI whenever it is asked. Recordings are kept for the same 90 days and are not used to train anyone's models by us.

Card and bank details

A gremlin will not take or repeat card numbers, bank details, PINs, or passwords on a call, and it is instructed to refuse if asked. Do not put any of those in a call brief. Anything in a brief may be spoken aloud on a recorded line.

Automatic bleeping of sensitive details in recordings needs a higher tier of our voice provider than we are on today. Until then the protection is the rule above: the gremlin does not say those things out loud.

Your choices

• Download. Any call's audio and transcript, any time in the 90 days, from the call's page.
• Delete. Ask us to delete your account and we will remove it and its calls.
• Correct. Change your name, email, and phone number in your settings.
• Ask. If you want to know what we hold about you, ask and we will tell you.

Security

Recordings are stored privately, not on a public URL, and a call can only be opened or downloaded by the account that made it. Passwords are hashed. Traffic to the site is encrypted.

Children

The service is for adults. Do not use it if you are under 18.

Changes

If we change how we handle your data, we will say so on the site. Carrying on using the service after that means you accept the new version.

Last updated July 24, 2026.