Last updated July 9, 2026
SpeakOS is built on a data-minimization principle: we store only what a feature needs. This Privacy Notice does not apply to our Subscribers' own collection or use of Personal Information through the Services — Callers should contact the business they called for privacy support related to that call.
SpeakOS may update this Privacy Notice from time to time. We will notify you about material changes through the Services or by email. Questions about this notice can be directed to stephen@skyhighmedia.com.
This Privacy Notice does not apply to data collected by a third party, including the subscribing businesses and agencies that use SpeakOS to configure voice agents that answer or make calls on their behalf (our "Subscribers"). SpeakOS provides the platform to our Subscribers, and each Subscriber determines how it uses the data collected from their Callers through the Services. Callers should contact the Subscriber they called with any questions about that Subscriber's own privacy practices.
SpeakOS is a bring-your-own-key ("BYOK") platform: you connect your own account with a third-party voice/AI provider (for example, Vapi), and calls are placed and recorded, if at all, through that provider's infrastructure. Call audio and recordings are stored in your own connected provider account, under that provider's own retention settings — SpeakOS does not separately store, host, or replay call audio. We do collect and store limited call metadata (such as call duration, timestamps, and phone numbers involved), plain-English call summaries, and transcripts where a feature you use requires them (for example, showing a summary in your dashboard).
Retention. By default, we retain call event logs and metadata for a limited period (currently up to 14 days) before deleting them, and we periodically prune older event data as part of our data-minimization practice. This retention window may be configurable per Account.
As used in this Privacy Notice, "Personal Information" is information that identifies, relates to, or could reasonably be linked with a particular individual or device, such as:
Information that is publicly available, aggregated, or de-identified so it cannot reasonably be linked back to an individual is not treated as Personal Information.
Collected from our Subscribers. When a Subscriber registers to use our Services, we collect account information such as name, email, and phone number to create and support the Account. Subscribers connect their own third-party provider API keys, calendar, and CRM software as needed to build and run their agents; the Subscriber is responsible for ensuring they are authorized to share any Personal Information with us or with their connected providers for this purpose.
Provider keys (BYOK). Where you connect a third-party API key, it is encrypted at rest using AES-256 and decrypted server-side only at the moment it is needed to place or configure a call — it is never displayed back to you or our staff, and never logged in plaintext. You can revoke a connected key at any time from your own provider's dashboard, independent of your SpeakOS Account.
Collected from Callers on behalf of a Subscriber. Callers may share contact information and the content of their message in conversation with a Subscriber's agent. That conversation is processed by the Subscriber's connected AI/voice provider to generate the agent's responses and any requested outputs, such as booking an appointment. SpeakOS's own systems receive call metadata and, where configured, summaries and transcripts from the connected provider in order to display them in the Subscriber's dashboard.
Site and Application Use. We may automatically collect technical data from your use of the Site or Application, including IP address, browser type, device information, and usage details, along with data from cookies used to understand how visitors interact with the Site.
Your Communications with Us. If you contact SpeakOS to request an invite or ask a question, we collect the Personal Information needed to respond to your inquiry and, with your consent, to follow up about the Services.
SpeakOS discloses Personal Information to the following categories of recipients, as needed to operate the Services or as required by law:
SpeakOS does not sell Personal Information, and does not share Personal Information with third parties for cross-context behavioral advertising. We may disclose aggregated or de-identified data without restriction.
The Services are designed to connect to services offered by third parties of your choosing. SpeakOS has no control over the privacy practices of these third parties once you connect them, and you should review their own privacy notices, particularly for any data (including call audio) that resides in their systems rather than ours.
SpeakOS currently offers the Services to Subscribers in the United States and Canada. Residents of states that provide consumer privacy rights (such as California, Colorado, Connecticut, Virginia, and others) may be entitled to some or all of the following, subject to applicable exceptions:
To exercise any of these rights, contact stephen@skyhighmedia.com. We do not sell or share Personal Information for cross-context behavioral advertising.
Canada. Individuals in Canada have similar rights under the Personal Information Protection and Electronic Documents Act, including the right to know why information is collected, to access it, and to request correction, by contacting stephen@skyhighmedia.com.
SpeakOS is operated by SkyHighMedia, a United States company, using technical infrastructure in the United States. If you access the Services from outside the United States, your information may be transferred to, stored, and processed in the United States, where privacy laws may differ from those of your home country.
SpeakOS maintains reasonable security measures designed to protect Personal Information from accidental loss and unauthorized access, use, alteration, or disclosure. Connected provider keys are encrypted at rest (AES-256) and decrypted server-side only at the moment of use, as described in Section 4. We cannot guarantee the security of information transmitted over the internet; any such transmission is at the risk of the person initiating it.
The Services are owned and operated by SkyHighMedia dba SpeakOS.