This Privacy Policy describes how Derbent LLC ("UpNewLevel", "we", "us") collects, uses, and shares personal information when you use our service at upnewlevel.com or interact with a phone number operated by our AI receptionist.

1. Information we collect

From business customers (subscribers)

• Account data: business name, owner's name, business address, billing contact, industry, operating hours, services offered.
• Payment data: handled by Stripe — we do not store full card numbers. We retain the last 4 digits, card brand, and billing ZIP code for receipt and fraud prevention.
• Configuration data: voice tone preference, after-hours handling, calendar integration details.

From end-callers (people who call the AI receptionist)

• Caller phone number (from telephony carrier).
• Call audio — recorded for quality and service delivery.
• Transcript — text transcription of the call.
• Any information the caller voluntarily provides — name, appointment preference, questions, messages.

From website visitors

• IP address, browser type, referring URL, pages viewed (via standard server logs).
• If you fill out the registration form, the information you submit on that form.

2. How we use information

• Operate the AI receptionist and route calls / messages / bookings to the subscriber.
• Process subscription payments via Stripe.
• Troubleshoot service issues and improve call quality.
• Send service notices (e.g. outage, billing issues) to the subscriber's email.
• Comply with legal obligations (tax, fraud, law enforcement requests lawfully made).

3. Who we share information with

We share personal data only with the service providers needed to operate UpNewLevel:

• Stripe — payment processing.
• Retell / ElevenLabs — voice AI providers that generate and recognize speech.
• Twilio — phone infrastructure for inbound and outbound calls.
• Resend — transactional email delivery.
• Google Workspace — calendar integration and email notifications for subscribers who opt in.
• Vercel — website hosting and request logs.

Each provider is bound by its own data-processing agreement. We do not sell personal information.

4. Call recording and caller consent

Because call recording laws vary by state (one-party vs two-party consent), our AI receptionist can be configured to announce recording at the start of each call. Subscribers are responsible for enabling this announcement in jurisdictions that require two-party consent. Recordings are stored for the duration of the active subscription plus 90 days, then deleted unless retention is legally required.

5. Data retention

• Account data: retained for the duration of the subscription plus 1 year for accounting records.
• Call recordings and transcripts: retained for the duration of the subscription plus 90 days, then deleted.
• Payment records: retained for 7 years to comply with US tax law.
• Website logs: retained 30 days.

6. Your rights

Depending on your location, you may have rights to access, correct, delete, or export personal information about you. California residents have additional rights under the CCPA/CPRA. EU/UK residents have rights under GDPR. To exercise any of these rights, email privacy@upnewlevel.com.

7. Children

The Service is intended for business use and is not directed at children under 13. We do not knowingly collect information from children.

8. Security

We use industry-standard security measures: encryption in transit (TLS), encryption at rest for payment tokens and call recordings, principle-of-least-privilege access for staff, and audit logs. No system is 100% secure; if a breach affects your data, we will notify affected parties as required by law.

9. International transfers

UpNewLevel operates primarily from the United States. If you access the Service from outside the US, you consent to transfer of your information to the US.

10. Changes

We may update this Policy. Material changes take effect 30 days after notice is posted at upnewlevel.com/privacy or emailed to subscribers.

11. Contact