Privacy Policy

This policy is published by PILOTLAB LLC, a Wyoming limited liability company, doing business as VM Hunter ("VM Hunter", "we", "us"), 1309 Coffeen Ave Ste 1200, Sheridan, WY 82801, United States. We operate the answering machine detection service, the website at vmhunter.com and the customer portal (together, the "Service"). This policy explains what personal data we handle, why, who receives it, how long we keep it and the rights you have.

We handle personal data in two roles:

• Controller for account, billing, website and security data: data about our customers, their users and visitors to our website.
• Processor for the data our customers put into the Service, mainly the call audio their dialers stream to us. The customer decides which calls are sent and why. That processing is governed by our Data Processing Agreement, including the customer's authorisation for model improvement described in section 4.

We do not sell personal data, and we do not use call data for advertising.

The Service works by analysing the first seconds of audio after a call is answered. For each call we keep the result, the transcript and, unless the customer switches it off, a short recording, so the customer can review and audit detections in the portal. Recordings are available only to the account that made the call and to our authorised staff.

Customers control this data from the portal:

• Delete a recording from the call log, or delete all recordings from Settings. Deleted recordings cannot be recovered.
• Turn recording storage off in Settings. Calls are still analysed in real time but no recording is kept in the portal. The transcript and result are kept so call logs and usage stay accurate.

Model improvement is on unless the customer opts out. Our customers authorise VM Hunter to use call audio, transcripts and detection results to train and improve VM Hunter's detection models. To opt out, the account holder emails support@vmhunter.com from the address on the account. The opt-out applies to call data we receive after it takes effect. Trained models contain no recordings, and we do not share them with other customers or with third parties. Turning recording storage off or deleting recordings in the portal does not by itself opt an account out of model improvement.

Customers' responsibilities. The customer controls which calls are sent to us. It is responsible for having a lawful basis to place those calls and to have their opening seconds analysed, recorded and used as described here, for giving any notice and obtaining any consent that call-recording, wiretapping, telemarketing or privacy law requires, and for honouring do-not-call rules. See the Terms of Service and the Acceptable Use Policy.

We share personal data only with service providers that help us run the Service, under contracts that limit what they may do with it. We describe them by type and country:

Our own support and engineering staff, including team members in Pakistan, may access personal data remotely to run and support the Service. Customers can request the list of our sub-processors by emailing support@vmhunter.com.

We may also disclose personal data where the law requires it, to protect our rights or the safety of others, or to a successor in a merger, acquisition or sale of assets, which will remain bound by this policy.

PILOTLAB LLC is based in the United States. VM Hunter is hosted in the United States. Some of the service providers we use are located in the United States. Our support and engineering staff, including team members in Pakistan, may access personal data remotely to run and support the service. When personal data from the EEA, the UK or Switzerland is transferred to a country without an adequacy decision, we use the European Commission's Standard Contractual Clauses, with the UK Addendum and Swiss amendments where they apply. Where a US provider is certified under the EU-U.S. Data Privacy Framework, we may rely on that certification for transfers to that provider.

We protect personal data with measures appropriate to the risk, including:

• TLS encryption for the website, the customer portal and the encrypted audio endpoint.
• Passwords stored only as salted bcrypt hashes; session cookies that are HTTP-only and sent only over HTTPS.
• Per-account API keys that can be replaced at any time, and per-plan rate limits.
• Recordings served only to the owning account and to authorised staff after sign-in.
• Administrative access to production servers limited to authorised staff, using key-based authentication from approved networks; the database accepts connections only from the server it runs on.
• Logs of sign-ins and account events.

No system is perfectly secure. If we become aware of a personal data breach that affects you, we will notify you and the competent authorities as the law requires.

Depending on where you live, you have the right to:

• Access the personal data we hold about you and get a copy.
• Correct inaccurate or incomplete data. You can edit most account data in your Profile.
• Delete your data where we no longer need it or you withdraw consent.
• Restrict our processing in certain circumstances.
• Portability: receive your data in a machine-readable format. Call logs can be exported as CSV from the portal.
• Object to processing based on legitimate interests, and to direct marketing at any time.
• Withdraw consent for analytics cookies or the newsletter at any time, without affecting earlier processing.

Automated decisions. We do not make decisions about you based solely on automated processing that produce legal or similarly significant effects. The detection result is automated: it tells our customer's dialer whether a person or an answering machine picked up, and it does not evaluate the person.

How to make a request. Email support@vmhunter.com from the address on your account, or explain how we can identify you. We respond within one month, which we may extend by two further months for complex requests; we will tell you if we do. If a request concerns a call one of our customers placed to you, we will pass it to that customer, who decides how that data is used, and help them respond.

Right to complain. You can complain to a data protection supervisory authority: in the EEA, the authority in the country where you live, work or where the issue arose; in the UK, the Information Commissioner's Office (ICO). We would appreciate the chance to address your concern first.

If you live in California or another US state with a consumer privacy law, you have the right to know what personal information we collect, use and disclose, to request deletion and correction, and to opt out of the sale or sharing of personal information. We do not sell personal information, and we do not share it for cross-context behavioural advertising. We run no advertising pixels; analytics runs only if you accept it, and you can withdraw that choice in Cookie settings. We will not discriminate against you for exercising these rights. You or an authorised agent can make a request by emailing support@vmhunter.com; we will verify the request before acting on it.

We use essential cookies to keep you signed in and remember your choices, and analytics cookies only with your consent. The full list and your controls are in the Cookie Policy.

The Service is for businesses. It is not directed at children, and we do not knowingly collect personal data from anyone under 16.

We post changes on this page and update the date at the top. If a change materially affects how we use personal data, we will email account holders before it takes effect.

Questions, requests or complaints about privacy: