Privacy Policy

Glyph ("Glyph," "we," "us") provides an omnichannel shared inbox for SMS, voice, social messaging, and email. This Privacy Policy explains what data we collect, how we use it, who we share it with, and the rights you have over it. If you use the Service on behalf of a company, you are responsible for your company's compliance with this policy.

1. Data we collect

• Account data: your name, email, password, company name, and billing details.
• Customer Data: the content your team sends and receives through the Service — messages, call recordings and transcriptions, contacts, and attachments.
• Usage data: logs of how your team uses the Service, for operations, security, and product improvement.

2. How we use data

We use your data to provide and operate the Service, to bill you, to provide support, to keep the Service secure, and to meet legal obligations. We do not sell your data, and we do not use Customer Data to train models or advertise to your contacts.

3. Sub-processors

We rely on the following third-party sub-processors to provide the Service. Each receives only the data needed for its function:

• Telnyx — SMS and voice messaging, call delivery and recordings
• Zernio — Social messaging channels (WhatsApp, Instagram, Messenger, and others)
• Shipmail — Inbound and outbound email
• Stripe — Payments, billing, and subscription management

We may update this list as the Service evolves; we will post the current list at this page.

4. Data sharing

Beyond the sub-processors above, we share data only when necessary to provide the Service (for example, delivering a message to its intended recipient), to comply with law, or to protect rights, safety, and security. We never sell personal data.

5. Data retention

• Customer Data is retained while your workspace is active, and for a limited period afterward so you can export it or reopen your account.
• After a workspace is closed or deleted, we delete Customer Data within 90 days, except where retention is required by law (for example, billing records for tax purposes).
• Backups may retain copies until their normal rotation cycle completes.

6. Your data rights

You may exercise the following rights over your personal data at any time:

• Access — request a copy of the personal data we hold about you.
• Correction — ask us to fix inaccurate or incomplete data.
• Deletion — ask us to delete your personal data, subject to legal retention obligations.
• Portability — receive your data in a structured, commonly used format, or ask us to transmit it to another provider where technically feasible.
• Objection / restriction — object to or restrict certain processing where the law allows.

If you are an end user whose data appears in a customer's workspace (for example, you received a message from a business using Glyph), contact that business directly — they control their workspace data, and we will assist them with your request.

7. Privacy requests

To exercise any of the rights above, email privacy@getglyph.io from the email address associated with your account. We will respond within 30 days. We may ask you to verify your identity before acting on a request.

8. Security

We use technical and organizational measures appropriate to the data we hold — encrypted transport, access controls, and least-privilege internal access. No system is perfectly secure; if we become aware of a breach affecting your data, we will notify you without undue delay.

9. Changes to this policy

We may update this policy and will post the new version here with an updated date. Material changes will be communicated by email or in-app notice before they take effect.