Privacy policy
Last updated: November 10, 2026. Patch AMD is operated by Manu Labs LLC, a Texas limited liability company ("we"). Contact: [email protected].
Call audio and transcripts
When you stream a call to Patch AMD:
- Audio is processed in real time, including by vetted speech and AI subprocessors under contract, and is not recorded or stored by us.
- The words heard are produced in real time, used only to reach the decision, included in the decision event and webhook we send you, and then discarded. We do not write them to our database or logs.
- What we keep for each detection: its ID, your API key ID, the carrier and codec, the result, reason and timing, whether it is billable, webhook delivery status, the webhook URL, and any
metadatayou send us. Do not put call content or personal data inmetadata.
You are responsible for any notice or consent that the law of the call's jurisdiction requires before call audio is processed.
Account data
We store your name, email address, a hash of your password (Argon2id) or your Google account link, sessions, and API keys (SHA-256 hash, prefix and last four characters only). We use this to run your account and send transactional email (verification, password reset) via our email provider.
Logs
Service logs record timings, IDs and outcomes. They never contain audio, transcripts, API keys or webhook bodies. Logs are kept for up to 30 days.
Subprocessors
| Provider | Purpose |
|---|---|
| Railway | Hosting and database (United States) |
| Cloudflare | DNS, and network delivery of this website (not the API or call audio) |
| Speech and AI subprocessors | Real-time processing of call audio to reach a decision. Bound by contract; no audio is stored. |
| Resend | Transactional email |
| Sign-in, if you choose it |
The full list of speech and AI subprocessors is available on request, or under a data processing agreement (DPA). Email [email protected].
Retention and deletion
Detection records are kept while your account is open, for usage and billing. Delete your account by emailing us; we remove your account, keys and detection records within 30 days, except where we must keep billing records.
Cookies
We use only the cookies needed to keep you signed in. No advertising or analytics cookies.
Changes
We will post changes here and email account holders about material ones.