Privacy Policy

Who this policy covers

This policy applies to two groups:

• Account holders — people who connect Grok Bot to MyPhone, get a phone number, and pay for the Service.
• Callers and texters — people who call or text that number, leave a voicemail, or are warm-transferred.

MyPhone provides the number, the call handling, and the stored calls. You decide what Grok Bot says and which other tools it uses. If you export MyPhone data through your Grok Bot MCP connection, you direct that disclosure.

Personal information we collect

Information you provide to us

You may provide:

• Contact data, such as name, email, and the mobile number you give us for forwarding, warm transfer, and SMS notices.
• Account data, such as the voice you pick, how calls should be answered, the greeting text, and the instructions you give Grok Bot.
• Phone number data for the MyPhone number assigned to your Grok Bot.
• Communications data, including calls, call recordings, voicemails, transcripts, summaries, and SMS you send and receive.
• Billing data for the pay-as-you-go wallet. Card numbers are collected and processed by Square, not stored by MyPhone as full card data. We keep a Square customer id, a saved-card id, wallet balance, top-ups, and the monthly number fee.
• Consent data, including when you agree to the Terms and this policy, the version you accepted, and the IP address, source, or user agent available at that time.

We do not collect government-issued ID numbers as a standard part of the Service. We do not run sweepstakes or prize promotions.

Information from others

We may receive personal information from:

• Callers and texters, including caller ID and what they say or text.
• Twilio, which carries the calls and SMS.
• Square, which processes the card you save.
• xAI (Grok), which answers, summarizes, or helps with a warm transfer when you use those features.
• Tools you connect through Grok Bot, when you ask Grok Bot to read or export MyPhone data into those tools.

Information collected automatically

We, and our service providers, may log:

• Device and log data, such as browser type, IP address, and the pages requested on myphone.host.
• Consent log data, such as IP address and user agent when you accept the current Terms and Privacy Policy.
• Communication interaction data, such as whether a call connected, a voicemail was stored, or an SMS was delivered.

Data about other people

The Service stores calls and texts with other people. If you use a MyPhone number, you are responsible for having the right to receive and store that information, and for giving callers any notice the law requires.

Cookies and tracking

We use essential storage so the site can load and so an operator session on the admin desk can stay signed in. We do not use third-party advertising cookies, and we do not run interest-based advertising on myphone.host. We currently do not respond to browser "Do Not Track" signals. If you use Global Privacy Control (GPC), we treat it as a request not to sell or share personal information.

Grok and your phone

Grok Bot answers calls, forwards them, takes voicemail, does warm transfers, and sends and receives SMS on the number you set up. Prompts, call audio context, transcripts, and the instructions needed for those features may be sent to xAI (Grok) to provide them.

We do not use your information to train generalized superintelligence models.

MyPhone does not request Google user data and does not use YouTube API Services or other Google APIs.

How we use personal information

We use personal information to:

• Provide, operate, secure, and support the Service
• Assign a phone number and run the call mode you chose: Grok Bot answers, forward, or voicemail, including warm transfer
• Send and receive SMS, and send you a notice about a voicemail
• Store calls, recordings, transcripts, and summaries
• Bill the pay-as-you-go wallet through Square, including the $5 monthly number fee and automatic $20 top-ups when the balance is $5 or less
• Record that you accepted the current Terms and Privacy Policy
• Let you access and export your data through your Grok Bot MCP connection, including to other tools you have connected
• Comply with law, enforce our terms, and protect MyPhone, our users, and others

We may create de-identified or aggregated data that does not identify you and use it to understand and improve the Service. We will not try to reidentify that data except to test that our de-identification works.

We do not sell your personal information. We do not use it for advertising or ad-targeting.

SMS, calls, and recording

SMS is how your Grok Bot number texts, and how MyPhone can text you about a voicemail. Texts are carried by Twilio. A local US number is added to MyPhone's messaging service so carriers can apply their A2P 10DLC rules. You will not use the number for spam or unsolicited marketing texts.

• Message frequency varies.
• Message and data rates may apply.
• You opt in when you agree to these terms and ask Grok Bot to text from your MyPhone number, or when you text that number. Reply STOP to opt out. Reply HELP for help. After STOP, we send one confirmation and then no more texts to that mobile number unless you opt in again.
• Mobile numbers and opt-in data are not shared or sold to third parties or affiliates for marketing or promotional purposes.

Calls and voicemails may be recorded. Recordings, transcripts, and summaries are stored. By using the Service you consent to that recording and storage. You are responsible for giving callers any notice the law requires. A warm transfer puts the caller on hold, calls the phone you saved, briefs you, and connects the caller when you accept.

You can access and export calls, recordings, transcripts, and messages through your Grok Bot MCP connection, including into other tools you have connected.

Retention

We keep account data, the consent record, calls, recordings, transcripts, summaries, SMS, and wallet records for the life of the account, and for a reasonable period after closure to meet legal, accounting, security, or dispute needs. When we no longer need it, we delete it, anonymize it, or isolate it.

Call and voicemail audio is copied into private storage and then deleted from Twilio. A link Grok Bot gives you to play a recording is temporary.

How we share personal information

We share personal information with:

• Infrastructure providers that run the Service — Supabase (database), Cloudflare (hosting and edge), Twilio (SMS and voice), and xAI (Grok features you use).
• Email delivery — Resend, when we email you a voicemail notice or a failed-payment notice.
• Payment processors — Square processes cards. See Square's privacy notice.
• Your Grok Bot MCP connection, including other tools you have connected, when you ask Grok Bot to read or export your MyPhone data.
• Professional advisors such as lawyers, accountants, and insurers.
• Authorities when we believe in good faith it is required by law or necessary to protect rights, safety, or security.
• Business transferees if we are involved in a merger, financing, sale of assets, or similar transaction.

We do not share personal information with advertising networks.

Mobile numbers and opt-in data are not shared or sold to third parties or affiliates for marketing or promotional purposes.

Your choices

• Access or export. Use your Grok Bot MCP connection to read calls, transcripts, summaries, and recordings, including export into other tools you have connected. You can also email us.
• SMS opt-out. Reply STOP to opt out. Reply HELP for help. Message frequency varies. Message and data rates may apply.
• Call handling. Change whether Grok Bot answers, forwards, or takes voicemail. You can release the number in Grok Bot.
• Card. Replace the saved card from the link Grok Bot sends. We never ask for the card number in chat.
• Delete your account. Email [email protected] and we will handle deletion subject to legal holds.

If you do not provide information we need to run an account or a feature, we may not be able to provide that feature.

Other sites and services

The Service links to Grok Bot, Square, and other third parties. Their privacy practices are their own. Read their policies before you use them.

Security

We use HTTPS, database row-level security, and limited admin access. Grok Bot connects through OAuth. We store only hashes of its access and refresh tokens and of your sign-in session, and they expire. Recordings are stored in a private bucket. No method of transmission or storage is 100% secure.

International data transfer

We are based in the United States and use providers that may operate in other countries. Your information may be processed in the United States.

Children

The Service is not for anyone under 18. We do not knowingly collect personal information from children. If you believe we have, email [email protected] and we will delete it as required by law.

We do not have actual knowledge that we collect, sell, or share the personal information of consumers under 16.

Changes

We may update this policy. The version and effective date at the top will change. The current version is 2026-10-17. Material changes will be posted on this page. Continued use of the Service after a change means the updated policy applies. A new number purchase or card save requires agreement to the current version.

How to contact us

Questions, deletion requests, or state privacy requests:

• Email: [email protected]

State privacy rights

This section applies to residents of U.S. states whose privacy laws give them the rights described below (including California, Colorado, Connecticut, Virginia, Texas, Oregon, and similar state laws). These rights are not absolute. We may decline a request as permitted by law, including if we cannot verify you.

You may be able to:

• Know / access the personal information we have collected about you
• Correct inaccurate personal information
• Delete personal information we collected from you
• Get a copy of personal information you provided to us (portability)
• Appeal our denial of a valid request
• Opt out of sale, sharing, or targeted advertising

Sale, sharing, and targeted advertising. We do not sell your personal information for money. We do not share it for cross-context behavioral advertising, and we do not process it for targeted advertising. Mobile numbers and opt-in data are not shared or sold to third parties or affiliates for marketing or promotional purposes.

Profiling. We do not use your personal information for profiling or automated decisions that produce significant legal or similarly significant effects (housing, employment, credit, and the like). Grok Bot answering a call is the phone feature you turned on, not a decision about housing, employment, or credit.

Sensitive personal information. We do not process sensitive personal information to infer characteristics about you. Call recordings are used to provide the Service, not to infer characteristics for advertising.

Nondiscrimination. We will not discriminate against you for exercising these rights.

How to exercise rights. Email [email protected]. We may need to verify your identity (for example by matching the email on the account). You may use an authorized agent; we may ask for proof of authority. You can also export your records through your Grok Bot MCP connection.

Nevada. We do not sell covered information as defined by Nevada law. To make a future opt-out request, email [email protected].

California Shine the Light. We do not disclose personal information to third parties for their own direct marketing. California residents may still send a "Shine the Light Request" to [email protected] with your name, mailing address, and confirmation that you are a California resident.

Practices (current and past 12 months)

We collect the categories below from you, callers, your devices, and service providers, and we use them for the purposes described in this policy.

To delete de-identified information: we do not attempt to reidentify de-identified data except to test that our process complies with law.