Privacy Policy
Introduction
At Sunday, we’re committed to protecting your privacy and keeping your information secure. Sunday is an AI-powered front desk that answers inbound calls and messages, books appointments, and manages the customer journey for service businesses. This policy explains what we collect, how we use it, and the choices you have.
We collect information in a few buckets:
1) Account and business information (from you)
Name, email, phone number, company name, role
Login and authentication details
Billing details (if applicable)
Business configuration data you provide (hours, services, policies, booking rules, escalation contacts)
2) Customer and caller information (from your customers or people contacting you)
Caller phone number and call metadata (time, duration, routing)
Call recordings (if enabled), transcripts, and message content
Appointment details shared during a call or message (requested times, services, contact details)
Any information a caller chooses to share (for example address, job details, preferences)
3) Technical and usage information
Device and browser information, IP address, log data
Product usage events (features used, clicks, errors)
Cookies or similar tracking data (see “Tracking”)
We use the information we collect to:
Provide and operate Sunday (answer calls, book appointments, send confirmations, route escalations)
Analyze conversations to improve reliability (intent extraction, summarization, quality review, debugging)
Maintain security, prevent abuse, and monitor performance
Communicate with you about service updates, support requests, and account notices
Comply with legal obligations
We use administrative, technical, and organizational safeguards designed to protect your data, including:
Encryption in transit and, where appropriate, at rest
Access controls and least-privilege policies
Monitoring, logging, and alerting for reliability and security events
Secure development practices and regular reviews
No system is 100% secure, but we work hard to protect your information and continuously improve our controls.
Depending on where you live, you may have rights to:
Access, correct, or delete your personal information
Object to or restrict certain processing
Request a copy of your data (data portability)
Withdraw consent where processing is based on consent
To submit a request, contact us using the details in the “Contact” section. We may need to verify your identity before completing certain requests.
We don’t sell personal information.
We may share information in limited situations:
With your authorized team members (for example, notifications, escalations, dashboards)
With service providers (sub-processors) who help us run Sunday
For legal and safety reasons (to comply with law, enforce terms, prevent fraud, protect rights)
Sub-processors and third-party services used by Sunday
These providers may process personal data to deliver the service:
Authentication & User Management
Clerk (authentication and identity management)
Voice & Chat Infrastructure
Vapi (telephony layer for inbound calls and chat sessions, may process phone numbers, recordings, transcripts)
AI/LLM Providers
OpenAI (real-time AI conversation processing)
Anthropic (Claude) (conversation analysis such as intent extraction, classification, summaries)
Notifications & Communications
Knock (email/SMS notification orchestration)
Resend (transactional email for internal notifications)
Error Monitoring & Observability
Sentry (error tracking and performance monitoring)
Background Job Processing
Inngest (async processing and event handling)
Webhook Verification
Svix (webhook signature verification)
Infrastructure / Hosting
PostgreSQL is our primary database (self-hosted)
Railway is our primary hosting provider.
Google Cloud Platform is our cloud infrastructure provider
We require service providers to protect data and use it only to provide services to us, subject to contractual obligations.
We may use cookies and similar technologies to:
Keep you logged in and maintain session state
Understand product usage and improve performance
Diagnose bugs and prevent abuse
You can control cookies through your browser settings. Some cookies are required for the product to function.
Sunday may process data in countries other than where you live. When we transfer data internationally, we use appropriate safeguards as required by law (for example contractual protections).
We retain information only as long as needed for the purposes described in this policy, including providing the service, resolving disputes, enforcing agreements, and meeting legal requirements. Retention of call recordings and transcripts may depend on your settings and configuration.
We’re building Sunday for revenue-critical workflows, which means privacy and security aren’t optional. We review and update our practices as the product evolves and as regulations change.
Sunday is in the process of completing a SOC 2 Type II audit. Our security program is designed around the SOC 2 Trust Services Criteria, and we continuously review and improve our controls as part of this process.
Questions, concerns, or requests related to your privacy are always welcome. Our dedicated privacy team is available to provide clear, comprehensive responses and support your data management needs.
Contact us : privacy@callsunday.com
Last Updated: January 15th, 2026