Privacy Policy

Last updated: 2026-10-01

1. What we collect

Yesline collects the data needed to operate the service: account info (email, name, plan), practice and live call audio (when you initiate a session), generated transcripts, score cards, and SMS coaching exchanges. We also collect standard product analytics (events, device type, app version) and crash reports.

2. How we use it

Audio and transcripts are processed by our AI coaching models in real time to generate cues and score cards. Aggregate, anonymized signals may be used to improve our objection libraries and scoring rubrics; data from accounts you connect (section 3) is never used this way. We never sell your data.

3. Accounts you connect

You can connect Google (Gmail and Calendar), Microsoft 365 and HubSpot so the coach knows your deals before and during a call. Connecting is optional and you choose which permissions to grant.

• Email: Yesline searches your mailbox only for messages with people you have saved as contacts in Yesline, and stores only those messages. Mail with anyone else is never downloaded or stored. Attachments are never read.
• Calendar: Yesline reads your meetings from the last 90 days and the next 60 and keeps only those with people outside your company.
• CRM: Yesline reads the contacts, deals and activity for the people you call, to prepare you for calls with them.

Writing back: after a call, Yesline can propose a follow-up reminder in your calendar, a draft reply in your mailbox, and, in your CRM, a note and the logged call on that contact. When a call was won or lost it can also propose moving that one deal to its closed stage. Each one is created only when you tap to confirm it, in your own account. Calendar events are created without attendees, so no one else is notified, and Yesline never sends email.

This data is used only to provide coaching to you inside Yesline. It is not used for advertising, not sold, and not used to train AI models. To provide the feature, it is processed by the AI providers we use (OpenAI and Anthropic) under terms that prohibit them from training on it. Access tokens are encrypted at rest. Our staff do not read it unless you ask us to for support, or it is required for security or by law. Disconnecting an account in the app revokes Yesline's access at the provider and deletes the tokens and everything synced from it; deleting your Yesline account deletes all of it. Microsoft gives apps no way to revoke their own access, so for a Microsoft account the app also points you to where you remove it.

Yesline's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

4. How we protect your data

We treat everything in Yesline as sensitive, and the data from accounts you connect (section 3) most of all. These protections apply to all of it:

• Encryption in transit: every connection between the app, our servers, our database and the providers we use (Google, Microsoft, HubSpot, OpenAI, Anthropic) is encrypted with TLS. We run no unencrypted endpoints.
• Encryption at rest: our database and its backups are encrypted at rest with AES-256. On top of that, the access and refresh tokens for your connected accounts are encrypted individually with AES-256-GCM, using a key held in a separate secrets manager and never stored with the data or in our source code.
• Access control: your data is stored under your account only. Every query our servers run is limited to your user ID, and the database tables that hold data from your connected accounts also enforce row-level security, so one user can never read another user's data. Access to production systems is restricted to the few people who operate the service and need it, and they do not read your data except as described in section 3.
• Data minimization: we request the narrowest permissions each feature needs and store only what it uses. From your mailbox that means only messages with your saved contacts, never attachments; we never send email on your behalf.
• Deletion: disconnecting an account revokes our access and deletes everything synced from it; deleting your Yesline account deletes all of your data.
• Incidents: if a security incident affects your data, we will notify you and the relevant authorities as the law requires.

5. Recordings and consent

Yesline plays an automatic disclosure tone and opening prompt on live calls. You are responsible for honoring the recording-consent laws of your state and the state your prospect is calling from. See our consent FAQ for the state matrix.

6. Retention

Recordings and transcripts are retained for the life of your subscription with one-click delete. You can export or delete your data anytime from the app.

7. Contact

Privacy questions: privacy@yesline.app