Last updated: October 11, 2026
To operate your AI agent, CloseReply collects: (a) the business information you provide during setup (services, pricing, tone, hours); (b) email data accessed through your Gmail account via Google OAuth, limited to what's needed to read and send lead-related messages; (c) SMS message content and phone numbers sent/received through your connected Twilio number; and (d) account and billing information (name, email, plan, payment status).
We do not use your lead conversation data to train models for other customers, and we do not sell your data to third parties.
CloseReply's only external integrations are Google (Gmail, via OAuth) for email and Twilio for SMS delivery. We do not currently integrate with CRMs, calendar tools, or any other third-party platform. See our Integrations page for details on how each connection works. Data is also processed by our infrastructure and payment providers strictly to operate and bill for the service.
Data is encrypted in transit using TLS 1.3 and at rest using AES-256. Access to production data is limited to what's required to operate and support the service. We follow SOC 2–aligned practices and GDPR principles for data handling.
We retain conversation and account data for as long as your account is active, plus a limited period afterward for billing and legal record-keeping. You can request deletion of your account data by emailing support@closereply.com.
CloseReply only contacts leads who have opted in to receive communication from your business. This applies to SMS and to the AI voice agent and outbound AI calling campaigns, which place and conduct phone calls using an artificial voice.
As the business owner, you are solely responsible for ensuring valid consent exists before loading contacts into CloseReply or placing any call. Calling laws impose strict requirements on these calls, including the U.S. Telephone Consumer Protection Act (TCPA), the FCC's treatment of AI-generated voices as "artificial or prerecorded," the National Do-Not-Call Registry, and applicable state telemarketing laws. For marketing or autodialed/artificial-voice calls to U.S. mobile numbers, this generally means prior express written consent. You must not upload purchased, rented, scraped, or otherwise non-consented lists, and you must honor opt-out and do-not-call requests promptly.
We provide tools to help — a consent attestation before a campaign can dial, calling-hour windows, per-lead attempt caps, and an automatic do-not-call list that records in-call opt-outs — but these tools do not establish consent on your behalf or make an otherwise unlawful call lawful. Full detail is in our Terms (section 7).
When you use the voice features, we and our telephony provider (Twilio) process call metadata and, where applicable, call audio and transcripts to operate the service; see "Third parties we work with" above.
You can revoke CloseReply's access to your Gmail account at any time from your Google Account security settings, and disconnect your Twilio number from your CloseReply dashboard. Doing so will stop new messages from being processed but does not automatically delete historical data — contact us if you'd like that removed as well.
We may update this Privacy Policy periodically. Material changes will be reflected by an updated "Last updated" date on this page.
Questions about this policy or your data can be sent to support@closereply.com.