Privacy Policy

The data controller / business responsible for your information is:

Redo AI, Inc. c/o Legalinc Corporate Services Inc., 131 Continental Drive, Suite 305, Newark, DE 19713, USA Privacy inquiries and data-rights requests: privacy@hobb.ai Legal notices: legal@hobb.ai

For most purposes under this Policy, Redo AI is the "business" (CCPA/CPRA) or "controller" of your account, billing, and usage data. For the third-party personal information you load into or route through Hobb (for example, information about the people you communicate with), Redo AI generally acts as a "service provider" / "processor" that processes that information on your behalf and under your instructions (see Section 9).

• We collect the information you give us (account, billing, identity details needed to provision a number), the calls and messages that pass through your Hobb number, and information generated as you use Hobb (recordings, transcripts, your assistant's activity, logs).
• We use it to run the Service: route calls and messages, make them available to you and to the AI assistant you authorize, transcribe recorded calls, bill you, and keep the Service secure.
• We do not sell your personal information, and we do not use your data for advertising.
• We do not use your content to train AI models. Any Google user data we receive is handled under Google's Limited Use requirements (see Section 6).
• We use a small set of trusted sub-processors (Section 8) and require them to protect your data.
• You have rights over your data, including access, deletion, and correction, described in Section 12.

a. Information you provide directly.

• Account data: name, email address, business name (if any), and authentication identifiers when you sign up or sign in.
• Billing data: subscription tier, credit-ledger balance, and payment records. Card details are collected and processed directly by our payment processor, Stripe. Redo AI does not store full card numbers.
• Support and communications: messages you send us, and the contents of support requests.
• Provisioning/KYC data: for phone-number features, the legal/business name and business address required to provision a number and (where applicable) register an emergency-calling address.

b. Information that passes through your number and your assistant.

• Sign-in providers: if you sign in with Google or Microsoft, we receive your name, email address, and account identifier from that provider. We do not request access to your mailbox, calendar, or files.
• AI assistant: the email address you confirm for your assistant, the agent keys you issue (stored as secure hashes, not in readable form), the permissions you grant each key, and a log of what your assistant did on the number (messages read and sent, codes read, actions held or refused).
• Voice, SMS, and WhatsApp: call and message metadata and content sent or received through a Hobb-provisioned phone number, processed through our telephony provider (Telnyx). This includes phone numbers, timestamps, call duration and status, message bodies, and, where you enable it and consent is captured, call audio recordings and their transcripts. Where a message contains a one-time verification code, Hobb identifies the code so you and your assistant can find it.

c. Information generated by your use of the Service.

• Contact records: a record for each phone number or WhatsApp account that communicates with your number, linked to its conversations, plus the approvals, conversation settings, and blocks you set.
• Usage and device data: log data, IP address, browser and app version, device push tokens, feature usage, and error and diagnostic events.
• Cookies and similar technologies: see our Cookie Policy and Section 11.

d. Information about third parties (your contacts). To provide the Service, Hobb necessarily processes personal information about the people you communicate with including their phone numbers, any names you or they provide, the content of your communications with them, and call recordings and transcripts. You are responsible for having a lawful basis and any required notice or consent to communicate with these individuals through Hobb, to let your AI assistant read and reply to their messages, and to record and transcribe your calls with them (see Sections 7 and 9, the Terms of Service, and the Acceptable Use Policy).

We do not knowingly collect information from anyone under 18. The Service is for business use by adults (see Section 14).

We use the information above to:

• Provide the core Service. Route calls, SMS, and WhatsApp messages through your number; show them to you; and make them available to the AI assistant you authorize, including by email where you enable the email bridge.
• Carry out your assistant's instructions within the permissions and controls you set, and hold its actions for your review where those controls require.
• Record and transcribe calls where recording is on, and transcribe voicemails.
• Bill and administer your account. Manage subscriptions, the credit ledger, receipts, and dunning.
• Secure and maintain the Service. Authenticate users, prevent fraud and abuse, debug, and enforce our terms.
• Communicate with you. Send transactional messages (sign-in links, receipts, approval requests, service notices), including push notifications to your devices, and respond to support.
• Comply with law and enforce our agreements.

We do not use your data, or any Google user data, for advertising or to build advertising profiles, and we do not use it to train AI models. We do not sell your personal information.

Legal bases (for users protected by GDPR/UK-GDPR, e.g., future UK/NL markets)

Where applicable, we rely on: performance of a contract (to provide the Service you request), legitimate interests (to secure, improve, and operate the Service, balanced against your rights), consent (for example, for recording and certain optional features), and legal obligation.

For the preceding 12 months, we have collected the following statutory categories of personal information. We collect these from you, from the calls and messages that reach your number, from your use of the Service, and from our sub-processors. We disclose categories to sub-processors for the business purposes described in Section 4; we do not sell or "share" (for cross-context behavioral advertising) any category.

Sensitive personal information note. Under the CPRA, "sensitive personal information" includes the contents of a consumer's mail, email, and text messages unless the business is the intended recipient. Because Hobb carries the text messages sent to and from your number, we process such content. We use and disclose sensitive personal information only as necessary to provide the Service you have requested and for the permitted purposes recognized under the CPRA (such as performing services, ensuring security, and detecting malicious activity). We do not use it to infer characteristics about you. Because our use is limited to these purposes, the "Limit the Use of My Sensitive Personal Information" right has limited application; even so, you may contact us at privacy@hobb.ai with any request and we will honor applicable rights.

Where a specific period is not stated, we retain personal information for as long as your account is active and as needed to provide the Service, then delete or de-identify it within a reasonable period, unless a longer period is required by law. You can delete individual items, and set how long call recordings and transcripts are kept, in your account Settings.

If you sign in with Google or Microsoft, we receive only your basic profile (name, email address, and account identifier) and use it only to create and secure your account. Hobb does not request access to your mailbox, calendar, contacts, or files, and does not read or send email as you.

Hobb's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell Google user data, use it for advertising, use it to determine creditworthiness, or use it to train AI or machine-learning models.

Earlier email features. Earlier versions of Hobb could connect to a Gmail or Outlook mailbox. Those features have been retired and no longer read any mailbox. Any mailbox data we still hold from them is kept only until it is deleted, remains subject to the commitments above, and is not used for any purpose other than completing that deletion. You can revoke Hobb's access at any time in your Google Account (Security → Third-party access) or Microsoft account settings.

• Provisioned numbers. When you activate a phone number, calls, SMS, and WhatsApp messages route through that Hobb-provisioned number via our telephony sub-processor (Telnyx). Native-dialer calls on your personal SIM are never recorded by Hobb.
• Recording, and who tells the other party. Recording is on for a workspace unless its administrator turns it off. Hobb plays no recording announcement on any call: calls are recorded from the moment they are answered with nothing said to the other party. Telling the other party that the call is recorded, and obtaining any consent the law requires, is the Hobb user's responsibility. If you called a Hobb user and want to know whether your call was recorded, or want the recording deleted, contact that user or privacy@hobb.ai. You are responsible for complying with call-recording laws, which in some U.S. states require the consent of all parties. Our Acceptable Use Policy sets out your obligations, and Hobb provides controls to disable recording. We treat transcripts with the same protection as the underlying audio.
• Transcription. Recorded calls and voicemails are transcribed by an automated system (currently Google Gemini), which labels who is speaking. We do not build voiceprints or perform biometric speaker-identification.
• Your AI assistant and calls. Your AI assistant does not answer or place calls through Hobb. Where you have connected an assistant and enabled the email bridge, it is sent a notification of each call and voicemail, including the voicemail transcript.
• Messaging. For SMS and WhatsApp sent through Hobb, including messages your AI assistant sends, you are the message sender and are responsible for obtaining recipient consent and honoring opt-outs (STOP/HELP), consistent with the TCPA, CTIA/10DLC rules, WhatsApp's Business Messaging Policy, and the Acceptable Use Policy.

This section describes the SMS program operated through Hobb (Redo AI, Inc.) and is provided for U.S. A2P 10DLC registration and carrier review.

• Program and message types. Hobb provisions phone numbers to its users, who use them to send and receive text messages with people they already deal with, either themselves or through an AI assistant acting on their behalf. Messages are conversational and one to one: replies to inbound texts, scheduling, and follow-ups within an existing relationship. Hobb numbers also receive one-time verification codes for the user's own accounts. Hobb does not send marketing or promotional text blasts.
• Consent and opt-in. Recipients receive texts because they gave their phone number to a Hobb user or because they first contacted that user's number. Before a user's AI assistant can first text someone new, Hobb asks the user to approve that contact, unless the user has turned that control off. Hobb users are contractually required to obtain the recipient's consent before texting and to honor opt-out requests, consistent with the TCPA and CTIA guidelines (see the Acceptable Use Policy). Consent to receive texts is never a condition of any purchase.
• Message frequency. Message frequency varies with the conversation; there is no fixed recurring schedule.
• Cost. Message and data rates may apply, depending on the recipient's mobile carrier and plan.
• Opt-out and help. A recipient can reply STOP at any time to stop receiving messages from a Hobb number, and HELP for assistance. For support, contact privacy@hobb.ai.
• We do not share mobile opt-in data. Mobile phone numbers, text-messaging opt-in information, and consent are not shared or sold to third parties or affiliates for marketing or promotional purposes. Phone numbers and message content are shared only with the sub-processors that deliver the Service (for example, our telephony provider Telnyx), as described in Section 8, and never for third-party marketing.

See also the Terms of Service and Acceptable Use Policy.

We share personal information only with service providers that process it on our behalf under contract, and as required by law. We do not sell personal information. Our current sub-processors include:

A current, maintained sub-processor list is available at hobb.ai/legal/subprocessors. We require each sub-processor to protect personal information and to process it only per our instructions, under a data-processing agreement or equivalent service-provider terms.

We may also disclose information: (i) to comply with law, legal process, or lawful government requests; (ii) to protect the rights, safety, and security of Hobb, our users, and the public; (iii) to enforce our terms; and (iv) in connection with a merger, acquisition, financing, or sale of assets, subject to the commitments in this Policy (and, for Google user data, with your explicit prior consent).

For the personal information you and your organization load into or generate through Hobb about your contacts and clients, Redo AI acts as your service provider / processor: we process that information to provide the Service, under your instructions, and we do not use it for our own purposes, retain, use, or disclose it outside the direct business relationship, or combine it with data from other sources except as permitted by law. You are the business / controller for that information and are responsible for providing any notices and obtaining any consents required to collect it, record communications, and use Hobb to contact those individuals. Our Data Processing Addendum governs this processing for business customers.

If you are an end-recipient (a contact of a Hobb user) and want to exercise privacy rights, please contact the Hobb user whose number you communicated with; we will assist them as their service provider. You may also contact us at privacy@hobb.ai and we will route your request appropriately.

We use technical and organizational safeguards including encryption in transit and at rest, encryption of stored third-party credentials, strict secret management, per-organization data isolation enforced in every data query, least-privilege access scopes, fail-closed production configuration, and monitoring. Agent keys are stored only as secure hashes and cannot be read back, even by us; each is limited to the permissions you grant, rate-limited, locked after repeated failures, and revocable at any time, and every use is logged for you to review. No method of transmission or storage is perfectly secure, but we work to protect your information and to respond promptly to incidents. To report a security concern, contact security@hobb.ai.

hobb.ai and the Hobb app use cookies and similar technologies for essential functionality (sign-in, security), preferences, and product analytics. We use third-party analytics providers (Google Analytics and PostHog) that may set cookies and record usage and interaction data to help us understand and improve the Service. We do not use cookies for cross-context behavioral advertising, and we do not sell your personal information. You can opt out through your browser controls, our cookie banner where shown, and recognized opt-out preference signals, including the Global Privacy Control (GPC). For full details and choices, see our Cookie Policy.

Depending on where you live, you may have some or all of the following rights:

• Access / know the personal information we hold about you, its sources, purposes, and the categories of third parties we disclose it to.
• Delete your personal information.
• Correct inaccurate personal information.
• Portability. Receive a copy of certain data in a portable format.
• Opt out of "sale" or "sharing" of personal information (note: we do not sell or share personal information).
• Limit the use of sensitive personal information (see the note in Section 5).
• Non-discrimination. We will not discriminate against you for exercising your rights.
• Appeal. If we deny a request, you may appeal by replying to our decision or writing to privacy@hobb.ai; you may also contact your state attorney general.

How to exercise your rights. Email privacy@hobb.ai, or use the in-app account/privacy controls (including self-service account deletion). We will verify your request (typically by confirming control of the account email) and respond within the time required by applicable law (generally 45 days under U.S. state laws, extendable once). An authorized agent may submit a request on your behalf with proof of authorization.

California "Your Privacy Choices." California residents may exercise the rights above, including opting out of sale/sharing (again, we do not sell or share) and limiting sensitive-PI use, via privacy@hobb.ai or the in-app "Your Privacy Choices" control, and through the GPC signal.

Other U.S. states. Residents of states with comprehensive privacy laws (including Virginia, Colorado, Connecticut, Texas, and others) have equivalent rights to access, correct, delete, obtain a copy of, and opt out of targeted advertising, sale, and certain profiling. Exercise them the same way.

Hobb currently serves the United States, and personal information is processed in the United States and other locations where our sub-processors operate. If we expand to the United Kingdom, the European Union/Netherlands, or elsewhere, we will update this Policy and implement appropriate transfer safeguards (such as Standard Contractual Clauses / UK IDTA and the EU-U.S. Data Privacy Framework where relevant).

The Service is intended for business use by adults and is not directed to anyone under 18. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact privacy@hobb.ai and we will delete it.

We may update this Policy from time to time. We will post the updated version with a new "Last updated" date and, for material changes, provide additional notice (such as in-app or by email). Your continued use of the Service after an update means you accept the revised Policy. Where required, we will obtain your consent.

Redo AI, Inc., c/o Legalinc Corporate Services Inc., 131 Continental Drive, Suite 305, Newark, DE 19713, USA Privacy: privacy@hobb.ai · Legal: legal@hobb.ai