Privacy Policy

Last updated: 2026-06-22

This is a plain-language draft provided for transparency. Have legal counsel review it before relying on it.

This explains what ATP Consulting collects, why, and your choices. It covers both ATP customers and the people who call a business that uses Riley.

What we collect

Account data (name, email, business details, payment info via Stripe). Call data created when the agent handles a call: phone numbers, what was said (transcripts and, if enabled, recordings), and the resulting messages, bookings, and call summaries.

How we use it

To run the agent and your dashboard, book and confirm appointments, send transactional messages, take payment, improve reliability, and provide support. We do not sell personal data.

Who processes it (subprocessors)

We use trusted providers to deliver the service: Vapi (telephony + speech-to-text / text-to-speech); Anthropic (the AI model); Supabase (database + authentication); Stripe (payments); Twilio (phone numbers + SMS); Resend (email). Each processes data only to provide their part of the service.

Recording and consent

Call recording is off unless a business turns it on. Where recording requires notice or all-party consent, the business is responsible for the lawful basis, and the agent can announce recording on the business setting.

Retention and deletion

We keep call and account data while your account is active and as needed for legal, tax, and dispute purposes, then delete or anonymize it. You can request export or deletion of your data; contact us and we will act within a reasonable period.

Your choices and contact

You can access, correct, or delete your data, and opt out of non-essential messages. Questions: privacy@atpconsulting.xyz.