GotBadNews.com

1. Information We Collect

We collect the following types of information when you use our service:

a) Sender Information

• Name (or display name)
• Email address
• Payment information (processed securely by our payment provider — we do not store full card numbers)
• IP address and browser/device information

b) Recipient Information

• Recipient's name (as provided by the sender)
• Recipient's phone number

c) Message Content

• The "bad news" message submitted by the sender
• Selected tone/style for delivery

d) Call & SMS Data

• Call recordings (audio)
• Call transcripts
• Conversation transcripts (text records of AI agent conversations, retained for 90 days)
• Video recordings generated from call audio (if applicable)
• Publishing consent records (whether recipient agrees to social media sharing)
• Call duration and timestamps
• IVR consent records (press 1 to accept, press 2 to decline)

e) Consent Records

• Record of IVR consent (press 1 to continue, with recording disclosure)
• Timestamp and method of recipient's consent or refusal
• Sender's agreement to Terms of Service (timestamp)

2. How We Use Your Information

We use the information we collect to:

• Deliver the service — place AI phone calls and deliver your message to the recipient.
• Process payments — charge for the service and handle refund requests.
• Legal compliance — maintain consent records as required by the Telephone Consumer Protection Act (TCPA) and other applicable laws.
• Content moderation — review messages to prevent abuse, harassment, threats, and prohibited content.
• Dispute resolution — investigate and resolve complaints or disputes.
• Service improvement — analyze anonymized, aggregated data to improve our AI, user experience, and service quality.
• Video generation — create video content from call recordings for delivery to the sender, and with recipient consent, for social media publication.

3. Data Retention

We retain different types of data for different periods based on legal requirements and operational needs:

After the applicable retention period, data is permanently deleted or irreversibly anonymized.

4. Third-Party Service Providers

We share data with the following third-party providers, strictly as needed to deliver our service:

• Twilio — Telephony provider for phone calls. Receives recipient phone numbers and call audio.
• ElevenLabs — AI voice generation provider. Receives message text for conversion to AI speech during the phone call.
• PayPal — Processes payments securely. Receives sender payment details. We do not store full credit card numbers.
• Vercel — Website and API hosting. May process server logs including IP addresses.
• Upstash — Database provider for order and session data.

Each provider is bound by their own privacy policies and data processing agreements.

5. We Do NOT Sell Your Data

We do not sell, rent, or trade your personal information to third parties. Period. We do not share your data for advertising or marketing purposes. Data is shared only with service providers as described above, or as required by law.

6. Data Security

We implement reasonable technical and organizational measures to protect your personal data, including encryption in transit (TLS/HTTPS), secure storage, and access controls. However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

7. Your Privacy Rights (CCPA & State Laws)

Depending on your state of residence, you may have the following rights:

• Right to Know — Request what personal information we have collected about you.
• Right to Delete — Request deletion of your personal information (subject to legal retention requirements).
• Right to Opt Out of Sale — We do not sell personal data, so this right is already satisfied.
• Right to Non-Discrimination — We will not discriminate against you for exercising your privacy rights.
• Right to Correct — Request correction of inaccurate personal information.

California residents: Under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), you have additional rights including the right to limit use of sensitive personal information. To exercise any of these rights, contact us at support@gotbadnews.com.

We will respond to verified requests within 45 days as required by applicable law.

8. Children's Privacy

GotBadNews is intended for users who are at least 18 years of age. We do not knowingly collect personal information from anyone under 18. This service is not directed at children and is not subject to the Children's Online Privacy Protection Act (COPPA). If we learn that we have collected data from a person under 18, we will delete it promptly. If you believe a minor has used our service, please contact us immediately.

9. Cookies & Tracking

Our website may use essential cookies for functionality (e.g., session management, payment processing). We do not use third-party advertising trackers. We may use basic analytics to understand site usage. You can control cookies through your browser settings.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. Your continued use of the service after changes are posted constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy, want to exercise your privacy rights, or have concerns about how your data is handled, please contact us at:

📧 support@gotbadnews.com