1. Who We Are

The Moderate Genius (operating as "Dialer Sync") is a business name of SFWP Inc., incorporated in Ontario, Canada. We provide integration services between Dialer.io and HubSpot to help sales teams synchronize their call data automatically.

2. Information We Collect

2.1 Account Information

• Email address (required for account creation)
• First and last name
• Organization/company name
• Timezone preferences
• Profile picture (optional)

2.2 Integration Data

• Dialer.io API keys (encrypted and stored securely)
• HubSpot OAuth tokens (encrypted and stored securely)
• Integration configuration settings
• Connection status and health monitoring data

2.3 Call Synchronization Data

• Basic Call Metadata (stored indefinitely): Call duration, timestamp, sync status, outcome - NO personal information
• Detailed Debug Data (auto-deleted after 30 days): Full call payloads including contact information for troubleshooting purposes only

2.4 Usage and Technical Data

• System activity logs (for security and troubleshooting)
• IP addresses and browser information
• Feature usage analytics

3. How We Use Your Information

• Service Delivery: To synchronize your call data between Dialer.io and HubSpot
• Account Management: To maintain your account and provide customer support
• Communication: To send transactional emails and important product updates (no marketing emails without consent)
• Troubleshooting: To diagnose and resolve technical issues
• Legal Compliance: To meet our legal obligations and protect our rights

4. Information Sharing

4.1 Third-Party Service Providers

We share your information with trusted service providers who help us operate our service:

• Supabase: Database hosting and authentication (encrypted storage)
• HubSpot: CRM integration (as part of the service functionality)
• Dialer.io: Call data integration (as part of the service functionality)
• Vercel: Web hosting and application deployment

4.2 Legal Requirements

We may disclose your information if required by law or to protect our rights, users, or the public.

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

5. Data Retention and Deletion

• Account Data: Retained while your account is active and for legal compliance periods after deletion
• Call Metadata: Basic sync records retained indefinitely for service functionality
• Detailed Call Logs: Automatically purged after 30 days (GDPR compliance)
• Audit Logs: Retained for security and compliance purposes

6. Your Rights

6.1 All Users

• Access and download your account information
• Correct inaccurate information
• Delete your account and associated data
• Opt out of non-essential communications

6.2 EU Users (GDPR)

If you are in the European Union, you also have the right to:

• Data portability (receive your data in a machine-readable format)
• Object to processing based on legitimate interests
• Restrict processing in certain circumstances
• Lodge a complaint with your data protection authority

6.3 California Users (CCPA)

If you are a California resident, you have the right to:

• Know what personal information we collect and how it's used
• Request deletion of your personal information
• Opt out of the sale of personal information (we don't sell your data)
• Non-discrimination for exercising your privacy rights

7. Data Security

We implement industry-standard security measures including encryption at rest and in transit, access controls, and regular security assessments. API keys and OAuth tokens are stored using Supabase Vault with envelope encryption.

8. Contact Us

If you have questions about this Privacy Policy or want to exercise your rights, please contact us at: