Privacy Policy
Hello MP! is an AI voice receptionist that answers business phone calls. This policy explains what we collect, why, who we share it with, and what you can ask us to do. It covers the hello.mp website and the Service.
1. What we collect
Account data
- Your name and email address, and your profile picture if you sign in with Google.
- Password (stored only as an irreversible hash — we never see it).
- Billing details held by Paddle: company or personal name, billing address and tax identifiers. Card numbers go to Paddle directly and never reach our servers.
Business data you give us
- Company name, industry, phone number, city and business description.
- Your knowledge base: services, prices, opening hours, directions, uploaded text and any website content you ask us to import.
- Your receptionist settings: greeting, instructions, voice, and which details to collect.
Call data (about your callers)
- The caller’s phone number and the number they dialled.
- Audio recording of the conversation, where recording is enabled.
- Text transcript of the conversation and the AI-generated summary.
- Details the caller gives during the call — typically name, callback number and their request.
- Call metadata: time, duration, outcome, and the minutes of AI handling used.
Technical data
- IP address, browser and device type, pages visited and actions taken in the dashboard.
- Server and diagnostic logs needed to keep the Service running and secure.
2. Who controls the data: you and us
For data about your callers, you are the controller and we are the processor. You decide why calls are answered, what the AI asks for and how long recordings are kept; we process that data only on your documented instructions — your settings in the dashboard and this policy — and not for our own purposes.
For your own account and billing data, we are the controller: we decide what is needed to give you an account, keep it secure and bill you correctly.
Because you are the controller of caller data, you are responsible for telling your callers that calls are answered by an AI assistant and recorded, and for having a lawful basis to do so. The Service plays a recording notice at the start of every call and it cannot be switched off.
3. Subprocessors we rely on
We use a small number of providers to run the Service. They process data only to deliver their part of it, under contract, and may not use it for their own purposes.
| Category | What they process |
|---|---|
| Telephony provider | Call setup and audio transport: caller number, dialled number, call duration |
| Speech recognition provider | Call audio, converted to text in real time |
| Speech synthesis provider | The text the AI speaks, converted to voice |
| Large language model provider | Conversation text and your knowledge base, to generate replies and summaries |
| Hosting and infrastructure | Storage of your account, configuration, recordings and transcripts |
| Email delivery provider | Your email address and notification content |
| Paddle.com Market Ltd | Payment processing, invoicing and tax as Merchant of Record |
We will tell you by email before adding a subprocessor that materially changes how caller data is handled. To request the current list of named providers, write to hello@hello.mp.
4. Why we process data, on what legal basis, and for how long
| Purpose | Legal basis | Retention |
|---|---|---|
| Answering calls, transcribing them and delivering leads to you | Performance of our contract with you; for caller data, processing on your instructions as controller | Transcripts and summaries: while your account is active, or the retention period you set |
| Storing call recordings for your review | Your instruction as controller; you choose whether recording is on | Your chosen retention period (default: kept until you delete them or close the account) |
| Creating and securing your account | Contract, and our legitimate interest in preventing abuse | While the account exists, plus 30 days after closure |
| Billing, invoicing and tax | Legal obligation | As required by applicable accounting and tax law |
| Support correspondence | Legitimate interest in answering you | Up to 2 years after the conversation |
| Service reliability, diagnostics and abuse prevention | Legitimate interest | Technical logs up to 90 days |
Recordings and transcripts are removed automatically once the retention period set for your workspace expires. You can also ask us to delete specific calls or your entire workspace by writing to hello@hello.mp. Deletion is completed within 30 days, except where we must keep a record by law.
5. Your rights
We do not sell personal information, and we do not share it for cross-context behavioural advertising. We do not use your calls or your callers’ data to train public AI models.
If you are in the EU, UK or EEA (GDPR)
You may request access to your personal data, correction of inaccurate data, deletion, restriction of processing, a portable copy in a common format, and you may object to processing based on legitimate interests. Where processing is based on consent, you can withdraw it at any time. You also have the right to complain to your local data protection authority.
If you are in California (CCPA/CPRA) or another US state with privacy law
You may request to know what personal information we have collected, the categories of sources and recipients, and the purposes; to receive a copy; to correct it; and to delete it. You may opt out of sale or sharing — although, as stated above, we do not sell or share personal information. We will not discriminate against you for exercising these rights.
How to exercise them
Email hello@hello.mp from the address on your account, or tell us how we can verify your identity. We reply within 3 business days and complete the request within the period the applicable law requires (30 days under GDPR, 45 days under CCPA, extendable where allowed). Requests are free unless they are excessive or repetitive.
If you are a caller rather than an account holder and want your data removed, contact the business you called — they control that data. If you write to us, we will pass your request on to them and help them act on it.
6. International transfers, security and breach notification
- Where data goes. We operate internationally, and our providers may process data outside your country, including in the EU, the United States and the United Arab Emirates. Where required, transfers rely on Standard Contractual Clauses or another lawful transfer mechanism. Tell us at hello@hello.mp if you need details of where a specific category of data is stored.
- Security. Data travels over encrypted connections (HTTPS/TLS). Passwords are stored as irreversible hashes. Access to production systems is limited to people who need it, and administrative actions in the dashboard are logged. No system is perfectly secure, but we apply technical and organisational measures appropriate to the risk.
- Breach notification. If a breach affects your data, we will notify you without undue delay and, where we act as processor, in time for you to meet your own 72-hour obligation under GDPR. The notice will describe what happened, what data was affected and what we are doing about it.
7. Cookies, analytics and contact
- We use a small number of strictly necessary cookies: your login session and security tokens. Without them the dashboard cannot work.
- We use privacy-respecting analytics to understand how the website is used and how our advertising performs. We do not build advertising profiles of you and we do not sell this data.
- You can block or delete cookies in your browser; strictly necessary cookies are required to stay signed in.
Questions about privacy, or a request about your data: hello@hello.mp. We reply within 3 business days.
We may update this policy as the Service develops. The current version is always on this page with its date; material changes are announced by email to account holders.
The Service is operated by Abd Al-Khamid Shaabani, sole proprietor (individual seller). Privacy contact: hello@hello.mp. Payments are processed by Paddle.com Market Ltd as Merchant of Record.