Privacy Policy
Last updated: May 17, 2026
1. Introduction
Bluvations, LLC ("Company", "we", "us") operates Resonance CX ("Service"). This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our Service. We are committed to protecting your privacy and handling your data responsibly.
2. Information We Collect
2.1 Account Information
When you register, we collect your email address, full name, display name, and billing address. Authentication is handled through Amazon Cognito; we do not store passwords directly.
2.2 Payment Information
Payment processing is handled by Stripe. We do not store credit card numbers or full payment details on our servers. Stripe's privacy policy governs the handling of payment data.
2.3 Call Recordings & IVR Data
When you use the Service to map a phone tree, we place automated calls to the telephone numbers you provide. The resulting audio recordings, transcriptions, and derived IVR map data are stored in association with your account.
2.4 Usage Data
We collect basic usage data such as pages visited, features used, and timestamps of actions to improve the Service. We do not currently use third-party analytics cookies.
3. How We Use Your Information
- Provide, operate, and maintain the Service
- Process your transactions and manage your subscription
- Generate IVR maps and recommendations from call recordings
- Communicate with you about your account, updates, and support requests
- Improve the Service and develop new features
- Comply with legal obligations
4. Data Retention
We retain your data according to the following schedule:
| Data Type | Retention Period |
|---|---|
| Account profile | Until account deletion |
| Call recordings (audio) | 1 year after generation, then deleted |
| Transcriptions | Until account deletion |
| IVR maps & recommendations | Until account deletion |
| Payment records | 7 years (legal/tax requirement) |
| Server logs | 90 days |
When you delete your account, we remove all personally identifiable data within 30 days, except where retention is required by law.
5. Data Sharing & Third Parties
We share data only with the following categories of service providers:
- Twilio — telephony and call recording infrastructure
- Amazon Web Services (AWS) — cloud hosting, storage, and authentication
- Stripe — payment processing
- Anthropic — AI-powered analysis and recommendations
- Amazon Bedrock (Nova) — AI model inference
- Deepgram — speech-to-text transcription (Whisper model)
We do not sell your personal information. We may disclose data if required by law, regulation, or valid legal process.
6. Data Security
We implement industry-standard security measures including encryption in transit (TLS) and at rest (AES-256), access controls, and regular security reviews. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
7. Your Rights (GDPR & CCPA)
Depending on your jurisdiction, you may have the following rights regarding your personal data:
- Access — request a copy of the personal data we hold about you
- Correction — request correction of inaccurate data
- Deletion — request deletion of your personal data ("right to be forgotten")
- Portability — request an export of your data in a machine-readable format
- Restriction — request that we limit processing of your data
- Objection — object to processing of your data for certain purposes
- Non-discrimination — we will not discriminate against you for exercising your rights (CCPA)
To exercise any of these rights, contact us at privacy@bluvations.com. We will respond within 30 days (or sooner if required by applicable law).
California residents (CCPA): In the preceding 12 months, we have collected the categories of personal information described in Section 2. We do not sell personal information. You have the right to request disclosure of the specific pieces of personal information we have collected about you.
8. International Data Transfers
Our Service is hosted in the United States (AWS us-east-1). If you access the Service from outside the United States, your data will be transferred to and processed in the United States. By using the Service, you consent to this transfer.
9. Children's Privacy
The Service is not directed to individuals under 18. We do not knowingly collect personal information from children. If we learn that we have collected data from a child, we will delete it promptly.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via email or a notice within the Service. Your continued use after changes constitutes acceptance of the updated policy.
11. Contact Us
For privacy-related inquiries or to exercise your data rights, contact us at: privacy@bluvations.com
Bluvations, LLC
Florida, United States