Effective date: July 21, 2026 Controller: RecreateCX, a sole proprietorship ("we", "us"), service.recreatecx.com. Contact / privacy requests: support@recreatecx.com.
This Policy explains how we handle personal data when you use RecreateCX. For personal data we process on behalf of our business customers (their end-users' call/chat/email content), the customer is the controller and we act as a processor under their instructions and our Data Processing Addendum; this Policy then describes our processor practices.
Where applicable, we rely on: performance of a contract; legitimate interests (securing and improving the Service, fraud prevention); legal obligation; and consent where required. Our business customers are responsible for the lawful basis for the interaction data they process through us.
We use vetted providers to deliver the Service, which may process personal data on our behalf, including:
We retain account and billing records as needed for the relationship and legal/tax obligations. Interaction data and recordings are retained per the retention controls in your plan/configuration (e.g. tiered recording retention) and then deleted. You can configure retention and can request deletion (see Your Rights). Backups are retained on a rolling basis and then overwritten/expired.
We share personal data only with: sub-processors (above) under contract; parties you direct us to integrate with; and where required by law or to protect rights, safety, and security. In a merger or acquisition, data may transfer subject to this Policy.
We use technical and organizational measures including encryption in transit (TLS), encryption of recordings/backups at rest in object storage, access controls, secret encryption at rest, audit logging, and network hardening. No method is 100% secure; we cannot guarantee absolute security.
We may process data in the United States and other countries. Where required, we use appropriate transfer mechanisms (e.g. Standard Contractual Clauses) for transfers of EEA/UK personal data.
Depending on your location (e.g. GDPR/UK GDPR, California CCPA/CPRA), you may have rights to access, correct, delete, port, restrict, or object to processing of your personal data, and to non-discrimination for exercising them. We provide data export and erasure tooling (DSAR) and will honor verified requests. End users should contact the business customer that operates the contact center; where we are the controller (e.g. account data), contact support@recreatecx.com.
Calls and interactions may be recorded, transcribed, and monitored for service operation, quality, and the customer's configured purposes. Our business customers are responsible for providing legally required recording/monitoring disclosures to their callers and agents.
Our web console uses cookies/local storage necessary for authentication and functionality, and may use limited analytics. If we introduce non-essential cookies, we will provide any legally required cookie notice/consent.
The Service is not directed to children under 16 and we do not knowingly collect their personal data.
We may update this Policy; we will post the updated version with a new effective date and, for material changes, provide notice.
RecreateCX (a sole proprietorship), California, USA. Privacy requests: support@recreatecx.com.