Privacy Policy

TwinerAI is a SaaS platform that creates AI voice agents for US real estate professionals ("Agents"). The voice agent (your "Twin") places outbound calls to prospective sellers, schedules viewings, and syncs results to the Agent’s connected tools.

We are based in the United States. Contact: privacy@twiner.io.

• Account data: name, email, password hash, billing details (handled by Stripe — we never store your card).
• Voice sample: audio recorded during the 5-min onboarding interview, used solely to create your Twin’s voice clone via Cartesia. Deleted within 30 days if you cancel.
• Connected service tokens (Google Calendar, CRM): stored encrypted, used only to perform the actions you authorized. Revocable from your dashboard at any time.
• Usage data: which features you use, when, and aggregate performance metrics. We use this for billing and to improve the product.

• Lead data that you import (CSV, CRM sync, webhook, lead source providers): property addresses, owner names, phone numbers, listing details.
• Call recordings + transcripts: every call your Twin places is recorded and transcribed via Vapi. In two-party consent states (CA, CT, DE, FL, IL, MD, MA, MT, NV, NH, PA, WA), your Twin discloses recording at the start of every call.
• Opt-out records: phone numbers that have requested no further contact. Once added, never called again across the entire TwinerAI platform.

• To create and operate your Twin (voice clone, system prompt, call routing).
• To place calls, book meetings, send confirmation SMS, and write notes back to your CRM.
• To enforce TCPA compliance (calling hours, DNC, opt-outs).
• To compute usage for billing under your selected plan.
• To respond to support requests and detect platform abuse.

We do not sell your data, share it for third-party advertising, or use prospect data to train public AI models.

We rely on these trusted providers to operate the service:

• Supabase — database + auth
• Vapi — voice call orchestration + recording
• Cartesia — voice cloning + speech synthesis
• Anthropic — conversational AI (Claude)
• OpenAI — transcript analysis
• Twilio — SMS delivery to prospects
• Stripe — payment processing
• Google — Calendar OAuth (when connected by Agent)
• Sentry — error monitoring
• Render — hosting infrastructure

Active accounts: data retained while subscription is active. Canceled accounts: all personal data deleted within 30 days of cancellation, except records we are legally required to retain (billing records: 7 years; opt-out records: indefinite, per TCPA).

You may request access to, correction of, or deletion of your personal data by emailing privacy@twiner.io. We honor verified requests within 30 days. California (CCPA) and EU (GDPR) residents have additional rights detailed in the full policy on request.

Any person called by a Twin can request no further contact at any time (verbal STOP, SMS STOP reply, or written request to optout@twiner.io). We honor these requests immediately and permanently across all Agents on the platform.

All data is encrypted in transit (TLS 1.2+) and at rest. Access is role-based and audited. We are working toward SOC 2 Type II certification.

We will notify Agents by email at least 30 days before any material change to this policy.