Privacy Policy
Effective July 19, 2026 · Version 2026-07-19
This Policy explains how Delphi Labs Inc. ("Delphi," "we," "us") handles personal information through Thaddeus. It does not govern third-party services you independently connect or visit.
1. Information we collect
- Account and billing: name, email, phone, organization, subscription, plan, transaction, tax, and limited payment metadata. Stripe processes full payment-card details; we do not receive the full card number.
- Authentication and security: license identifiers, verification challenges, login timestamps, device and network signals, fraud indicators, and audit records. Verification texts are delivered through Twilio or another provider.
- Inputs, outputs, and files: prompts, messages, documents, images, video, audio, code, tool instructions, generated output, and feedback you choose to process.
- Autonomous and connector activity: connected service identifiers, scoped credentials or tokens, tool calls, actions, results, error data, and approvals.
- Calling and messaging: managed number, masked destination data, call direction, status, duration, timestamps, transcripts, summaries, outcomes, usage cost, and opt-out or compliance information. Twilio call recording is not intentionally enabled at launch, but voice providers process live audio and may retain audio or transcripts under their terms and settings.
- Usage and diagnostics: model route, token and cost totals, media-job status, rate-limit windows, feature use, crash and performance data, browser type, IP address, and request logs. We avoid placing message content in ordinary application logs.
- Communications: support requests, legal notices, survey answers, and other messages to us.
2. How we use information
We use information to provide and personalize the Services; authenticate users; route AI and tool requests; generate media and speech; place requested calls or messages; meter allowances; process billing; maintain reliability; detect abuse, fraud, and security incidents; enforce policies; support customers; improve products; comply with law; and protect Delphi, users, providers, and the public.
3. AI and service providers
To perform a request, we may send relevant content and identifiers to service providers that supply AI inference, speech, telephony, payments, hosting, web data, integrations, identity, media assets, infrastructure, or security. Their processing is governed by our agreements and their applicable terms. Specific providers may vary by feature, availability, and fallback routing.
We do not promise that every provider offers zero retention or that no provider uses data for service improvement. Avoid submitting information you are not authorized to disclose. Business customers needing special retention, residency, HIPAA, financial, biometric, or other regulated-data commitments must obtain a separate written agreement before using that data.
4. When we disclose information
We may disclose information to processors and connected services at your direction; to your organization administrator; during a financing, merger, acquisition, reorganization, or asset transfer; to professional advisers; to comply with law or valid legal process; and to investigate fraud, abuse, security issues, rights violations, or threats of harm. We may share aggregate or de-identified information that cannot reasonably identify you.
We do not sell personal information for money or use it for cross-context behavioral advertising.
5. Retention
We retain information for only as long as reasonably needed for the purposes above, including account operation, billing, security, dispute resolution, and legal compliance. Retention varies by record. Short-lived authentication and request-replay records may expire within hours or days; subscription, usage, compliance, calling, and transaction records may remain through the account term and a reasonable legal or audit period. Backups and provider copies may persist until their normal deletion cycles. We may preserve information longer for fraud, abuse, safety, a dispute, legal hold, or regulatory request.
6. Your choices and rights
You can limit data by not connecting services, revoking connector access, disabling optional permissions, avoiding sensitive content, and canceling the account. Depending on where you live, you may have rights to access, correct, delete, export, restrict, or object to processing, or appeal a denied request. Email us from the account address to submit a request. We may verify identity and retain information that law or legitimate security, billing, or dispute needs require.
Calling recipients should direct consent revocation and privacy requests to the business that initiated the call. We will reasonably assist verified requests involving our systems.
7. Security
We use administrative, technical, and organizational safeguards designed for the nature of the Services, including server-side provider credentials, scoped authentication, request limits, and access controls. No method is perfectly secure. You must protect your device, license, accounts, backups, and permissions and notify us promptly of suspected compromise.
8. International processing
Delphi is based in the United States. Information may be processed in the United States and other countries where our providers operate, whose laws may differ from yours. Where required, we use recognized transfer mechanisms or rely on another lawful basis.
9. Children
The Services are for adults and are not directed to anyone under 18. Do not submit a minor's personal information without legal authority and all required consent. Contact us if you believe a minor provided information improperly.
10. State and regional notices
Residents of jurisdictions with comprehensive privacy laws may exercise the rights provided by those laws and will not be discriminated against for doing so. We do not use sensitive personal information to infer characteristics or sell/share it for targeted advertising. Authorized agents may submit requests where permitted, subject to verification.
11. Changes and contact
We may update this Policy as the Services or law changes. We will post the effective date and provide additional notice when required.
Delphi Labs Inc.
A Delaware corporation
dakotastewart@delphilabsinc.com