Legal
Last updated: April 21, 2026
We built TIRED-US because small businesses deserve enterprise-grade voice technology without giving up control of their data. This page explains, in plain English, what we collect, what we do with it, and the choices you have.
TIRED-US, Inc. ("TIRED-US", "we", "us", or "our") builds AI voice agents that answer phone calls, book appointments, qualify leads, and handle customer-support conversations on behalf of small businesses (our "Customers"). When a Customer's caller speaks with one of our agents, the recordings, transcripts, and call metadata generated during that interaction are processed by us as a service provider to that Customer.
This Privacy Policy explains what personal information we collect, why we collect it, how we use it, and the choices you have. It applies to our marketing website (tired-us.com), our customer dashboard, our voice-agent runtime, and all related APIs and services (collectively, the "Services").
Account information you provide. When a Customer signs up, we collect business name, contact email, billing details, and the names of users invited to the workspace.
Voice and conversation data. When a caller speaks with one of our AI agents, we capture the call audio, the AI-generated response audio, the diarised transcript, sentiment signals, the phone numbers of both parties (where permitted by law), call duration, intent labels, and any structured outputs the agent extracted (such as a booked appointment or a qualified lead).
Configuration data. The voice you select, the script and instructions you provide, the integrations you connect (calendar, CRM, ticketing systems), and the knowledge-base documents you upload so the agent can answer questions accurately.
Usage and device data. Logs of API requests, browser type, IP address, pages viewed, and similar telemetry we use to keep the Services secure and reliable.
Cookies and similar technologies. Strictly-necessary cookies for authentication and session management, plus optional analytics cookies you can disable in your browser.
To deliver the Services. We use call audio, transcripts, and configuration data to run your AI voice agent in real time, transcribe conversations, draft responses, post bookings to your calendar, and write structured outcomes to your CRM.
To improve quality, safety, and accuracy. We analyse aggregated and de-identified call data to monitor latency, detect hallucinations, reduce error rates, and tune our models for better performance. We do not use Customer call recordings or transcripts to train third-party foundation models.
To provide support. Authorised members of our support team may access your call logs and transcripts when you ask us to investigate an issue, in line with strict internal access controls.
To communicate with you. We may send service notices, security alerts, billing emails, and (if you opt in) product updates and educational content.
To meet legal and contractual obligations, prevent abuse, and enforce our terms.
Where the GDPR or UK GDPR applies, we rely on the following legal bases: performance of a contract (delivering the Services to our Customer); legitimate interests (keeping the Services secure, improving quality, and preventing fraud); consent (where required for call recording, marketing emails, or non-essential cookies); and legal obligations (tax, accounting, and lawful requests from authorities).
Some jurisdictions require all parties on a call to be informed that the conversation is being recorded. Our agents play a recorded disclosure at the start of every call by default, and Customers are responsible for ensuring the disclosure they configure complies with the laws of the jurisdictions their callers reside in.
If a caller withdraws consent during a conversation, the agent stops the recording and the call is either transferred to a human or terminated, depending on the Customer's configuration.
Service providers (sub-processors). We share data with vetted vendors that help us deliver the Services, including cloud hosting, telephony carriers, speech-to-text and text-to-speech providers, large-language-model providers, payment processors, and analytics platforms. A current list is available on request.
Integrations you enable. When you connect a calendar, CRM, or ticketing system, we send the relevant call outcomes (such as a booked appointment) to that system on your behalf.
Legal and safety. We may disclose information when required by law, to enforce our terms, to protect the rights, property, or safety of TIRED-US, our Customers, or the public.
Corporate transactions. If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify Customers before any such transfer becomes effective.
Call audio and transcripts are retained for the period configured by the Customer (default: 90 days). Customers can shorten retention, lengthen it, or delete a recording on demand from the dashboard. Aggregated and de-identified analytics may be retained indefinitely.
Account, billing, and audit-log data is retained for as long as your account is active and for a reasonable period afterwards to satisfy legal, tax, and dispute-resolution obligations.
We protect data with TLS 1.2+ in transit and AES-256 at rest, role-based access controls, mandatory SSO for our staff, audit logging, encrypted backups, and continuous vulnerability monitoring. We are SOC 2 Type II compliant and operate a HIPAA-aligned environment for Customers in regulated industries (a Business Associate Agreement is available on request).
No system is perfectly secure, however, and we cannot guarantee absolute security. If we ever become aware of a breach affecting your data, we will notify you without undue delay.
We are headquartered in the United States and our infrastructure operates across multiple regions. Where personal data is transferred from the EEA, UK, or Switzerland to a country that has not received an adequacy decision, we rely on the EU Standard Contractual Clauses and the UK Addendum, supplemented with the safeguards described in our DPA.
Depending on where you live, you may have the right to access, correct, port, or delete the personal information we hold about you, to object to or restrict processing, and to withdraw consent at any time. If you are a caller and want to exercise these rights, please contact the business you spoke with. They are the controller of that conversation. If we are the controller, contact us at privacy@tired-us.com and we will respond within the timeframes required by applicable law.
The Services are not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us information, please contact us and we will delete it.
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of the page and, for material changes, give you reasonable notice (for example via email or a banner inside the dashboard).
Questions, requests, or complaints? Reach our Data Protection Officer at privacy@tired-us.com or write to: TIRED-US, Inc., 548 Market Street, Suite 38219, San Francisco, CA 94104, USA.