Privacy Policy

1. Overview

Xtreme Communications ("we", "us", "our") provides a communications platform offering SMS, MMS, voice, WhatsApp, email, and AI agent services. This Privacy Policy explains how we collect, use, store, and protect your data when you use our platform at xtreme-communications.com.

2. Information We Collect

Account Data: Name, email address, company name, billing information (processed by Wix/Stripe), and authentication credentials.

Communications Data: Message content (SMS, MMS, WhatsApp, email), call recordings, transcripts, voicemails, and metadata (sender, recipient, timestamps, delivery status).

Usage Data: API calls, feature usage, IP addresses, device information, and session logs.

Contact Data: Phone numbers, email addresses, and contact lists you upload or communicate with through the platform.

3. How We Use Your Data

• To provide, operate, and maintain the communications platform and AI agent services
• To route SMS, MMS, voice, WhatsApp, and email messages through our carrier partners
• To process payments and manage subscriptions via Wix Payments
• To generate AI-powered content, templates, and conversation intelligence
• To provide analytics, call recordings, and conversation logs
• To comply with legal obligations and carrier requirements (TCPA, 10DLC, A2P)
• To prevent fraud, spam, and abuse of the platform

4. Third-Party Service Providers

We share data with the following categories of providers to deliver our services:

• Telecom carriers (Telnyx and partners) — for SMS, MMS, voice, and number provisioning
• Payment processing (Wix Payments / Stripe) — for billing and subscriptions
• Google Workspace (Calendar, Gmail, Tasks, Drive) — when you connect your account for scheduling and email automation
• AI providers — for conversational AI, speech-to-text, text-to-speech, and content generation
• Cloud infrastructure (Supabase, Base44) — for data storage and application hosting

Each provider processes data under their own privacy policy and applicable data processing agreements. We do not sell your personal data to third parties.

5. Data Retention

Communications data (messages, call recordings, transcripts) is retained for the life of your account unless you delete it. You may delete messages, recordings, and contact data at any time from your dashboard. Account data is retained for 90 days after account closure for billing reconciliation, then permanently deleted unless legal retention is required.

6. Data Security

All data is encrypted in transit (TLS 1.2+) and at rest. API keys are hashed and stored securely. Access to production data is restricted to authorized personnel with multi-factor authentication. We conduct regular security audits and maintain SOC2-aligned controls.

7. SMS & Communications Consent

By using the platform, you confirm that you have obtained proper consent from your contacts before sending SMS, MMS, WhatsApp, or voice communications. You are responsible for compliance with the TCPA, CTIA A2P 10DLC rules, WhatsApp Business policies, and CAN-SPAM Act. We do not send messages on your behalf without your explicit action or configured automation.

8. Your Rights

Depending on your jurisdiction (CCPA/CPRA for California, GDPR for EU/UK residents), you have the right to:

• Access the personal data we hold about you
• Request correction or deletion of your data
• Opt out of the sale or sharing of personal information
• Restrict or object to certain processing
• Export your data in a portable format
• Withdraw consent for communications at any time

To exercise these rights, contact us at privacy@xtreme-communications.com.

9. Children's Privacy

Our platform is intended for business use only. We do not knowingly collect data from children under 16. If you believe a minor has provided us data, contact us and we will delete it.

10. International Data Transfers

Your data may be processed in the United States and other countries where our providers operate. We rely on Standard Contractual Clauses and adequacy decisions for lawful international transfers under GDPR.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified via email and posted on this page with an updated date.

12. Contact Us

For privacy questions or data requests, email privacy@xtreme-communications.com or write to: Xtreme Communications, Attn: Privacy, [Business Address].