PypeStack LLC ("we," "us," or "our") operates the PypeStack platform — an AI-powered sales call intelligence and coaching tool — accessible at pypestack.com. This Privacy Policy explains what personal data we collect, how we use it, who we share it with, and what rights you have.
PypeStack is operated by PypeStack LLC, 7865 West Bell Road #1173, Peoria, AZ 85382. If you have questions, contact us at support@pypestack.com.
Personal Data of Representatives: Rep names, call recordings, transcripts, and performance scores associated with named individuals constitute personal data of those individuals under applicable privacy law. You are responsible for having a lawful basis to process your sales representatives' personal data in PypeStack, including obtaining any required consent or relying on a legitimate interest under applicable law.
When you upload a call recording, the audio is submitted to AssemblyAI for transcription. Where speaker diarization is enabled, AssemblyAI uses voice characteristics to distinguish individual speakers. This process may involve the analysis of voice features that constitute biometric identifiers under laws such as the Illinois Biometric Information Privacy Act (BIPA), the Texas CUBI Act, or similar statutes.
PypeStack does not store voice prints or biometric templates. Audio files are transmitted to AssemblyAI and are subject to AssemblyAI's data retention and privacy policies. PypeStack retains transcripts (text) and AI-generated analysis, not raw audio.
You are responsible for ensuring that all parties on a recording have provided any consent required by applicable biometric privacy laws before uploading recordings to PypeStack for AI-powered voice analysis. See our Terms of Service, Section 8.1, for your obligations regarding biometric data.
User responsibility: PypeStack users are responsible for obtaining all legally required consent from call participants before uploading recordings. Users who upload recordings without required consent are in material breach of our Terms of Service.
Speaker identification accuracy: Automated speaker diarization may produce inaccurate results. Talk time ratios and speaker-attributed metrics are estimates. Do not rely solely on automated speaker attribution for performance evaluation decisions.
PypeStack's customers ("Users") may upload recordings of business conversations that include participants who are not PypeStack users ("Call Participants"). These recordings are transcribed and analyzed as part of the Service.
If you are a Call Participant whose conversation was recorded and uploaded to PypeStack without your knowledge or consent, or if you wish to exercise rights under applicable law (including CCPA, GDPR, BIPA, or state wiretapping statutes), please contact us at:
privacy@pypestack.com
Please include: your name, approximate date of the call, the name of the company or individual you believe uploaded the recording, and a description of your request. We will respond within 30 days. Note that because Call Participant data is embedded within transcripts, our ability to locate and delete specific participant data may be limited by technical constraints, and we will disclose those constraints transparently.
PypeStack requires all users to obtain legally required consent from call participants before uploading recordings. Users who upload recordings without required consent are in material breach of our Terms of Service.
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Providing the PypeStack service | Account, call, coaching data | Contract performance |
| Transcribing audio files | Audio recordings → AssemblyAI | Contract performance |
| Generating AI coaching analysis | Transcripts → Anthropic Claude | Contract performance |
| Processing payments | Email, plan info → Stripe | Contract performance |
| Sending transactional emails | Email address → Resend | Contract performance |
| Customer support | Account & contact data | Legitimate interest |
| Security & fraud prevention | Usage logs, IP address | Legitimate interest |
| Service improvement | Anonymized usage patterns | Legitimate interest |
We do not sell your personal data. We do not use your data for advertising. We do not use your call recordings or transcripts to train our own AI models. Note: when you use your own Anthropic API key, your transcripts are processed by Anthropic per their API terms — please review Anthropic's privacy policy to understand how they handle API data.
PypeStack relies on the following third-party services to operate. By using PypeStack, you acknowledge that your data is processed by these sub-processors in accordance with their own privacy policies:
| Service | Purpose | Data Shared | Privacy Policy |
|---|---|---|---|
| Supabase | Database & authentication | All user account and call data | supabase.com/privacy |
| Anthropic | AI call analysis | Call transcripts | anthropic.com/privacy |
| AssemblyAI | Audio transcription | Audio recording files | assemblyai.com/legal/privacy-policy |
| Stripe | Payment processing | Email, subscription info | stripe.com/privacy |
| Resend | Transactional email | Email address & content | resend.com/legal/privacy-policy |
| Netlify | Website hosting & contact forms | IP, contact form submissions | netlify.com/privacy |
| Google Fonts CDN | Font loading | IP address (on page load) | policies.google.com/privacy |
| Microsoft Graph API | Teams recording access (optional) | OAuth tokens, if connected | privacy.microsoft.com |
| Slack | Notifications (optional) | Call summaries, if connected | slack.com/privacy-policy |
| HubSpot | CRM integration (optional) | Contact data, if connected | legal.hubspot.com/privacy-policy |
Important note on AI processing: When you analyze a call, your transcript is sent to Anthropic's Claude API for analysis. Anthropic processes this data per their API usage policy. We encourage you to review Anthropic's privacy policy to understand how they handle API data.
PypeStack uses the following third-party sub-processors to operate the Service. Each sub-processor is contractually bound to process data only as instructed and to maintain appropriate security measures.
| Sub-Processor | Purpose | Data Processed | Location |
|---|---|---|---|
| AssemblyAI (AssemblyAI, Inc.) | Voice transcription | Audio recordings, transcripts | United States |
| Anthropic (Anthropic, PBC) | AI analysis and coaching generation | Call transcripts, rep names | United States |
| Supabase (Supabase, Inc.) | Database and authentication | All user and call data | United States / EU (configurable) |
| Netlify (Netlify, Inc.) | Hosting and serverless functions | Request logs, function execution | United States |
| Stripe (Stripe, Inc.) | Payment processing | Billing information, subscription status | United States |
| HubSpot (HubSpot, Inc.) | CRM integration | Contact data (if connected) | United States |
Important: AssemblyAI retains audio for transcription processing only. Users should review AssemblyAI's data retention policy at assemblyai.com/privacy. We have executed or are in the process of executing Data Processing Agreements with applicable sub-processors.
Depending on your location, you may have the following rights regarding your personal data:
To exercise any of these rights, email support@pypestack.com. We will respond within 30 days.
California residents (CCPA): You have the right to know what personal information is collected, request deletion, and opt out of the sale of personal information. PypeStack does not sell personal information.
We take reasonable measures to protect your data, including:
No system is 100% secure. If you discover a security vulnerability, please report it responsibly to support@pypestack.com.
OAuth tokens for third-party integrations are stored with encryption at rest.
In the event of a data breach affecting your personal information, we will notify you without unreasonable delay and in accordance with applicable law. Notification will be provided by email to the address on your account and will include the nature of the breach, the categories of data affected, and recommended steps. We will also notify applicable regulatory authorities where required by law.
Service Scope: PypeStack currently serves customers in the United States only. This Privacy Policy is governed by United States law.
PypeStack analyzes audio recordings that you upload. You are responsible for ensuring that all recordings you upload comply with applicable call recording laws in your jurisdiction.
Many jurisdictions require the consent of all parties to a conversation before it may be recorded. This includes, but is not limited to, California (two-party consent), certain European countries, and others. By uploading a recording to PypeStack, you represent and warrant that you have obtained all necessary consents from all parties on the call.
PypeStack is not liable for any recording made or uploaded without proper consent.
PypeStack uses minimal cookies and browser storage technologies necessary to operate the service:
We do not use advertising cookies, tracking pixels, or third-party analytics that track you across websites. Some pages load fonts from Google Fonts CDN, which may log your IP address as described in Google's Privacy Policy.
By using PypeStack, you consent to the use of the strictly necessary cookies described above. No other cookies are set without your explicit consent.
PypeStack is designed for business use by adults. We do not knowingly collect personal information from anyone under the age of 16. If you believe we have inadvertently collected data from a minor, contact us at support@pypestack.com and we will delete it promptly.
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page and notify active users by email. Continued use of PypeStack after changes take effect constitutes acceptance of the updated policy.
If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), grants you the following rights:
Categories of personal information collected (as defined by CCPA): Identifiers (name, email, IP address); Commercial information (subscription plan, billing history); Internet or network activity (usage logs, session data); Audio data (call recordings you upload); Professional information (sales rep names, call outcomes).
How to submit a request: Email support@pypestack.com with the subject line "California Privacy Request." We will verify your identity and respond within 45 days of receipt. We may extend this period by an additional 45 days when necessary, with prior notice. No fee will be charged unless the request is excessive or repetitive.
You may also designate an authorized agent to make a request on your behalf by providing written authorization.
For any privacy-related questions, requests, or concerns: