Privacy policy

Who this covers

• Customers: the businesses (and their staff) who sign up for Missly.
• Callers: people who call a business that uses Missly and receive a text back. For callers, the business decides why their information is used; Missly processes it on the business's behalf.

What we collect

• Account details: name, email, password (stored by our authentication provider, never in plain text), business name, address, phone numbers and hours.
• Carrier registration details a business submits to text customers, such as its legal name, EIN, address and an authorized contact.
• Call and message records: the caller's phone number, call times, text messages to and from the business's Missly number, and any name or address a caller shares to book an appointment.
• Calendar access a business grants through Google: free/busy times and the events Missly creates. We don't read the content of other calendar events.
• Billing records from Stripe (we never see or store full card numbers).
• Basic, cookie-free website analytics on usemissly.com.

How we use it

• To text callers back, hold the conversation, and book appointments for the business.
• To alert the business by text and email about missed calls, replies and bookings.
• To register the business with phone carriers so its texts are delivered.
• To bill the business, provide support, and keep the service secure and reliable.

We don't sell personal information, and we never use caller phone numbers for marketing. Mobile numbers and texting consent are not shared with third parties for their own marketing.

AI

On plans with AI conversations, message history and the business's own service information are sent to an AI model provider to draft replies. We send only what's needed for the conversation.

Service providers

We use these providers to run Missly: Twilio (calls and texts), Google (calendar booking), Supabase (database and sign-in), Stripe (billing), Resend (email), OpenRouter and the model providers it routes to (AI replies), Sentry (error monitoring, with personal details removed) and Langfuse (AI quality monitoring).

Retention and deletion

Conversations, call records and appointments are kept for 12 months by default, then deleted automatically. Businesses can delete any conversation sooner from their inbox. Opt-out records are kept so we keep honoring them.

Opting out of texts

Callers can reply STOP to any message to stop texts from that business. See our SMS terms.

Security

Data is encrypted in transit. Google calendar access tokens are encrypted at rest, and each business can see only its own data.

Your choices

You can ask to see, correct or delete your information. Callers should contact the business they called; we'll help the business respond. To reach us, use the contact form.