Privacy Policy
BuckBack helps small businesses get paid. A business owner adds a client and what they owe, and BuckBack's AI assistant calls and texts that client on the owner's behalf to arrange payment. This policy explains what information BuckBack handles, why, who it's shared with, and the choices you have.
BuckBack is operated by Dylan Karan in British Columbia, Canada ("we", "us"). Questions or requests: dylangoalie2166@gmail.com.
This policy covers two groups of people:
- Business owners who sign up for and use the BuckBack app.
- Clients — the people a business owner bills, whom the AI assistant calls or texts.
Information we collect
From business owners
- Account details: your email address and password (passwords are stored only in hashed form).
- Business profile: your name, business name, type of service, phone number and time zone, which the assistant uses to introduce itself and schedule calls.
- Client and invoice details you enter: client names, phone numbers, amounts owed, what the charge is for, how long they can take if they can't pay right away, and any notes.
- Accounts-receivable reports you upload: the contents are read by an AI service to fill in your invoices.
- Voice dictation: if you dictate an invoice, your speech is turned into text by Apple's speech recognition on your device (Apple may process it on its servers under Apple's privacy policy). We receive only the resulting text, never the audio.
- Notifications: if you allow notifications, your phone's notification ID is stored so we can alert you about payments, promises and clients who need you. It's deleted when you sign out or delete your account.
- Payment setup: if you connect Stripe to get paid, Stripe collects your business, identity and bank details directly. We store only your Stripe account ID and whether it's ready to accept payments.
About clients
- What the business owner enters: name, phone number, email address (optional), amount owed, what it's for and how long they can take to pay.
- Demand letters: if a client stops responding, BuckBack may email them a formal letter about the overdue amount, on the business's behalf. We keep a copy of the letter that was sent, and the business owner receives a copy too.
- Phone calls: call audio is streamed in real time to be transcribed so the assistant can understand and respond. Calls are not recorded or stored as audio. We keep a short written summary of each call, any voicemail the assistant leaves, and outcomes such as a date the client says they'll pay by.
- Text messages: texts sent to and from the assistant are stored. If a card number is texted to us, it is removed before the message is stored or processed.
- Payments: clients pay through a secure Stripe page. Card details go directly to Stripe; we never see or store them. We record only whether an invoice was paid.
- Opt-outs: if a client asks not to be contacted, or texts STOP, we keep their phone number on a do-not-contact list so we can honor that.
Operational logs
Our servers keep short-lived technical logs, which can include call transcripts, to keep the service running and fix problems. These are kept for a short period (typically days) and are not used for anything else.
How we use information
- To place calls, send texts and email demand letters on the business owner's behalf about money owed, send payment links, and schedule follow-ups.
- To show the business owner what happened (calls, voicemails, texts, payment promises) and notify them when something needs their attention.
- To process payments to the business owner through Stripe.
- To run, secure and improve the reliability of the service.
We do not sell personal information, use it for advertising, or track you across other apps or websites.
The AI assistant
Calls and texts are handled by an AI assistant, not a person. If asked, it says it is an AI. It acts only for the business owner it's calling on behalf of, and it can't change the amount owed.
Who we share information with
We share information only with the service providers that run BuckBack, and only what each needs to do its job:
- Supabase — database, sign-in and backend.
- Fly.io — hosting for the call service.
- SignalWire — phone calls and text messages.
- Deepgram — transcribes call audio in real time. We've opted out of Deepgram using this audio to train its models.
- Anthropic — the AI model that writes the assistant's replies, call summaries and voicemails, and reads uploaded reports.
- ElevenLabs — turns the assistant's replies into speech.
- Stripe — payments and business-owner payouts.
- Resend — sends demand-letter emails.
- Apple — voice dictation in the app, and app distribution.
We may also disclose information if required by law, or to protect the rights and safety of our users or others.
Where information is stored
Our service providers may store and process information in the United States and other countries outside Canada. When it is, it may be subject to the laws of those countries.
How long we keep it
- Business-owner accounts and everything they've entered are kept until the account is deleted.
- Deleting your account (the Account tab → Delete account in the app) permanently removes your profile, clients, invoices and activity history, and stops all calls and texts. Your Stripe account is separate and stays yours; you can manage or close it at stripe.com.
- Do-not-contact records are kept so we can keep honoring them.
- Records our service providers must keep (for example, Stripe's payment records) follow their own retention rules.
Your choices and rights
- Clients can text STOP, or tell the assistant on a call, to stop being contacted. You can also contact the business that billed you directly.
- Anyone can ask us to access, correct or delete personal information we hold about them by emailing dylangoalie2166@gmail.com. We'll respond within 30 days.
- If you're in Canada and aren't satisfied with our response, you can contact the Office of the Information and Privacy Commissioner for British Columbia or the Office of the Privacy Commissioner of Canada.
Security
Information is encrypted in transit, access is restricted so each business owner sees only their own data, and payment details are handled entirely by Stripe. No system is perfectly secure, but we work to protect your information.
Children
BuckBack is for businesses and isn't directed at children under 16. We don't knowingly collect information from them.
Changes
If we change this policy, we'll update the date above, and for significant changes we'll let business owners know in the app.
Contact
Dylan Karan, British Columbia, Canada
dylangoalie2166@gmail.com