Privacy policy
Effective September 24, 2026Tylum Voice is operated by Calmax Systems ("Calmax", "we," "us," or "our"). This policy explains what we collect when you use Tylum Voice's intelligent receptionist, Sam, and what we do with it.
1. Information we collect
1.1 Account information
When you create an account, we collect your email address, the password you choose (securely hashed), your business name, time zone, website, forwarding number, and the email address where you want call notifications and booking invites sent.
1.2 Calls, recordings and transcripts
When Sam answers a call for your business, we store:
- Call metadata: the caller's number, when the call started and ended, and how long Sam was on the line
- An audio recording of the call, unless you've turned call recording off in Settings
- A written transcript of what was said
- Any message, booking, or transfer that resulted from the call
Recordings and transcripts are stored on Calmax infrastructure located in California. Recording stops the moment a call is transferred to a person on your staff — nothing said after that point is captured.
1.3 Website import
When you set up your account, you can give us your business website. We read the pages you provide to build a starting fact sheet (hours, services, pricing, and similar) for Sam to answer callers' questions from. You review and approve every fact before Sam uses it.
1.4 Calendar
If you connect a calendar, you give us a read-only link to it. We read that link to check when you're free; we never write to your calendar. When Sam books an appointment, we send a calendar invite by email to the address you set — we don't store your calendar's other contents beyond the free/busy times needed to offer a slot.
1.5 Billing information
When you subscribe to a paid plan, your payment details are collected and processed by Stripe. We store your Stripe customer ID and subscription status — we never see or store your full card number.
1.6 Usage data
We automatically collect log data (IP address, browser type, pages visited) to operate and secure the service.
1.7 If you called a business that uses Tylum
If you called a phone number that a business answers with Tylum Voice, we keep, on that business's behalf, your phone number, an audio recording of the call if that business has turned call recording on, a written transcript, and any message or appointment that resulted from the call (see 1.2). That business controls this data, the same as if you'd left a voicemail or spoken with their receptionist directly — we act on their instructions, not yours. To see, correct, or delete what was kept about your call, ask the business you called, or email us at [email protected] and we will pass your request to them.
2. How we use your information
We use collected information to:
- Answer calls, take messages, book appointments, and transfer calls as Sam is configured to do for your business
- Send you the messages, booking confirmations, and call summaries Sam produces
- Process payments and manage your subscription through Stripe
- Send service communications: billing notices, trial expiry warnings, and security alerts
- Operate, secure, and improve the service
3. Data storage and security
- Data is encrypted in transit using TLS
- Secrets such as your calendar link are encrypted at rest
- Each business's data is isolated at the database level with row-level security, so one business's application session cannot read another's data
- Call recordings, transcripts, and application data are stored on Calmax Systems infrastructure located in California
4. Sub-processors
We use the following third-party services to operate Tylum Voice. Each processes data on our behalf under contractual obligations to protect it:
| Provider | Purpose | Data shared |
|---|---|---|
| Stripe | Payment processing and billing | Email address, payment method (collected directly by Stripe) |
| Telnyx | Phone numbers and call routing | Call audio, call metadata, the numbers involved in a call |
| SMTP2GO | Sending email (verification codes, messages, booking invites, notifications) | Recipient email address, message content |
| Cloudflare | DNS, CDN, and DDoS protection | IP address, page requests |
We do not sell your personal information, and we do not send call recordings or transcripts to any third-party AI service.
5. Your rights
You have the right to access and correct your account information, remove individual facts your website import added (in Settings, one at a time), replace your calendar link, and delete your account and all associated data. To exercise these rights, use the account management features in Settings, or contact us at [email protected].
6. Data retention and deletion
- Active accounts: call, message, booking, and settings data is retained as long as your account is active
- Deleted accounts: deleting your account in Settings first cancels your Stripe subscription, then immediately and permanently deletes your business record and everything tied to it — call history, recordings, transcripts, messages, bookings, and settings. This cannot be undone
- Server logs: access logs are retained for a limited period for security and debugging
7. Cookies
We use only the cookies necessary to run the service: a session cookie to keep you signed in, and a CSRF cookie to protect against cross-site request forgery. We do not use advertising or third-party tracking cookies.
8. Children's privacy
Tylum Voice is a business tool and is not intended for individuals under 18. We do not knowingly collect personal information from children.
9. For residents of California (CCPA/CPRA)
If you are a California resident, you have the right to know what personal information we collect and how we use it, the right to delete it, the right to correct it, and the right to non-discrimination for exercising these rights. We do not sell personal information. To exercise these rights, contact us at [email protected].
If you are a caller rather than a Tylum Voice account holder (see 1.7), these same rights apply to what was kept about your call. Since that data belongs to the business you called, the fastest way to exercise them is to ask that business directly; you can also email us at [email protected] and we will pass your request to them.
10. Text messages (SMS)
When you call Tylum Voice's own line, you can ask us to text you during the call, for example the sign-up link or the confirmation of an intro meeting you booked. We only text the number you are calling from, only after you ask for it on the call, and only about that request: message frequency depends on what you asked for, usually one or two texts. Message and data rates may apply. Reply HELP for help or STOP to opt out at any time; after STOP we send one confirmation and nothing more.
No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging opt-in data and consent are not shared with any third parties. Sam does not send text messages on behalf of businesses that use Tylum Voice.
11. Changes to this policy
We may update this policy periodically. We will notify you of material changes by email at least 14 days before they take effect. The effective date at the top of this page shows when this version was last updated.
12. Contact us
Questions about this Privacy Policy or our data practices? Email [email protected].