Privacy Policy

Last updated: March 18, 2026

This Privacy Policy describes how the recepte service ("recepte", "we", "us") collects, uses, and protects your information when you use our AI receptionist service. The recepte platform is operated by Albert D Matalon, LLC, a California limited liability company with its principal office at 5750 Alder Ave, Ste 100, Sacramento, CA 95828-1154, United States, which acts as the data controller and merchant of record for all payments. For questions, contact us at [email protected].

1. Information We Collect

We collect the following categories of information:

• Account information: Name, email address, phone number, business name and address.
• Business operations data: Information about your business operations that you provide to configure our AI receptionist.
• Communications data: Phone calls, WhatsApp messages, and other communications processed through our AI system on your behalf.
• Booking information: Appointment details, customer names, and scheduling data managed through our service.
• Payment information: Payments are processed securely via Stripe. We do not store your card details on our servers.
• Usage analytics: How you interact with our service, feature usage, and performance metrics.
• Device information: Browser type, operating system, and device identifiers.
• Anonymized IP addresses: Used for geolocation and fraud prevention.

2. How We Use Your Information

• Service delivery: Operating our AI receptionist to answer calls, respond to messages, and manage communications for your business.
• Appointment management: Scheduling, confirming, and sending reminders for bookings.
• Customer communications: Processing and facilitating interactions between you and your customers.
• Business insights: Providing analytics and summaries about your customer interactions.
• AI improvement: Improving our AI models and service quality using anonymized and aggregated data.
• Account management: Managing your subscription, billing, and support requests.

3. GDPR Compliance

We process personal data under the following legal bases:

• Contract: Processing necessary to deliver the service you have subscribed to.
• Legitimate interest: Improving our service, preventing fraud, and ensuring security.
• Consent: Where explicitly provided, such as for marketing communications.

In the relationship between recepte and our business clients: you (the business) are the data controller for your customers' personal data, and we are the data processor acting on your instructions. We process your customers' data solely to provide our service to you.

4. Data Storage & Security

Your data is stored on EU servers, specifically:

• Hetzner, Germany — primary infrastructure.
• Google Cloud Europe — additional services.

We protect your data with:

• TLS 1.2+ encryption for all data in transit.
• Encryption at rest for stored data.
• Restricted access controls with role-based permissions.
• Regular security audits and monitoring.

5. Data Sharing

We share your data only in the following circumstances:

• Service providers: Third-party providers that help us deliver our service (e.g., telephony, AI processing, hosting).
• User-directed integrations: When you connect recepte to other services like Google Calendar or your booking system.
• Legal requirements: When required by law or to protect our rights.

We never sell your personal data.

6. Your Rights (EEA)

If you are in the European Economic Area, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Delete your personal data ("right to be forgotten").
• Data portability — receive your data in a structured, machine-readable format.

To exercise any of these rights, contact us at [email protected].

7. Data Retention

• Account data: Deleted within 30 days after account deletion.
• Call and message transcripts: Deleted within 90 days after account deletion.
• Anonymized analytics: May be retained indefinitely in aggregate form.

8. Children

Our service is not intended for use by anyone under the age of 16. We do not knowingly collect personal data from children.

9. Cookies

We use essential cookies only — those strictly necessary for our service to function. We do not use advertising or tracking cookies.

10. Updates to This Policy

We may update this Privacy Policy from time to time. When we make significant changes, we will notify you via email at the address associated with your account.

11. Contact Us

If you have questions about this Privacy Policy or your data, contact us:

• Email: [email protected]
• Platform operator, data controller & merchant of record: Albert D Matalon, LLC
• Registered address: 5750 Alder Ave, Ste 100, Sacramento, CA 95828-1154, United States