1. Introduction
BBAI ("we," "our," or "us") is committed to protecting your privacy and the privacy of the individuals you sponsor. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.
1.5 Consent and Acceptance
BY USING THIS SERVICE (whether as a sponsor or sponsored individual), you agree to this Privacy Policy and our Terms of Service. Continued use constitutes ongoing acceptance of any updates.
For sponsored individuals: Your sponsor has provided your information to enable access. Your use of the Service confirms your acceptance of these terms. If you do not agree, discontinue use immediately.
For sponsors: You represent that you have authorization to provide the sponsored individual's information and that they are aware a third party is facilitating their access to this Service.
2. Information We Collect
Personal Information
- •Account Information: Name, email address, password
- •Payment Information: Processed securely through Stripe (we do not store card details)
- •Sponsorship Information: Details about individuals you sponsor including their name, inmate ID, and facility information
Usage Information
- •AI Interactions: Conversations between sponsored individuals and the AI assistant
- •Service Usage: Features accessed and frequency of use
- •Error Reports: Technical diagnostics when errors occur (via Sentry)
Automatically Collected Information
- •Essential cookies for authentication only (no tracking cookies)
- •Log data including access times for security purposes
- •IP address and browser type for fraud prevention
Voice Calls
- •Call metadata (phone numbers, duration, timestamps)
- •Voice recordings processed by Securus and third-party AI providers for transcription
- •Securus records all calls as part of their telephony infrastructure
- •Call recordings may be accessible to correctional facilities per Securus agreements
3. How We Use Your Information
We use collected information to:
- •Provide and maintain the Service
- •Process sponsorship payments and manage subscriptions
- •Facilitate AI assistant access for sponsored individuals
- •Monitor for safety and security through automated systems
- •Improve the Service based on usage patterns
- •Send you important account and Service updates
- •Comply with legal obligations
- •Prevent fraud and enforce our Terms of Service
3.5 Sponsor and User Privacy Separation
Sponsors provide payment and account setup but do NOT have access to conversations between the AI assistant and sponsored individuals. By sponsoring an individual, you acknowledge that:
- •You will not see the content of AI conversations
- •The sponsored individual has independent use of the Service
- •Sponsored individuals are bound by these Terms through continued use of the Service
- •We may contact sponsors only regarding billing, violations of Terms, or safety concerns
- •Conversation content remains private except as outlined in this policy
4. Information Sharing and Disclosure
We share your information with the following third-party service providers:
Service Providers
- •Stripe: Payment processing (they do not share card details with us)
- •Securus: Telephony infrastructure (has access to call data as our telecommunications provider)
- •AI Service Providers: Third-party AI providers including OpenAI, Anthropic, and proprietary models process conversations
- •Cloud Infrastructure Providers: For data storage and hosting (US-based servers)
- •Email Service Providers: For receipts and notifications
- •Background Processing Services: For job queue and event handling
- •Error Monitoring Services: For crash reports and diagnostics
Correctional Facility Policies
We verify inmate information through Securus, our telephony provider. Securus may share call data with correctional facilities as required by their agreements with those facilities. We do not directly share sponsor information with correctional facilities.
- •Individual facilities may have their own monitoring, recording, or content policies
- •Facilities may request access to usage data or conversations
- •We will comply with lawful facility requests
- •Facility policies may conflict with or supersede parts of this Privacy Policy
- •We are not responsible for facility-imposed restrictions or monitoring
Law Enforcement
We may disclose information when required by law, court order, or to protect rights and safety.
Business Transfers
Your information may be transferred in connection with any merger, sale of company assets, or acquisition.
We do NOT sell your personal information to third parties.
5. Data Security
We implement reasonable security measures appropriate for a service of our size, including:
- •Encryption of data in transit (HTTPS) and at rest
- •Secure authentication and access controls
- •Limited access to personal information on a need-to-know basis
However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security of your information.
6. AI Interactions and Content Moderation
- •AI conversations are processed by third-party AI providers (including OpenAI, Anthropic, and proprietary models)
- •Automated safety systems filter conversations for prohibited content
- •We cannot guarantee 100% content filtering
- •Human review only occurs when investigating reported violations
- •Securus, our telephony provider, also has access to call data
- •Conversation data may be used to improve AI responses and safety measures
- •AI-generated content is not medical, legal, or professional advice
Emergency Situations
If our automated systems or AI providers detect content suggesting imminent harm, suicide risk, or planned criminal activity, we reserve the right to disclose relevant information to appropriate authorities, facility staff, or emergency services without prior notice. This is not a monitored service and we cannot guarantee intervention.
6.5 Service Limitations and Disclaimers
Our Service has inherent limitations:
- •We are not a monitored or crisis intervention service
- •AI responses may be inaccurate, inappropriate, or harmful
- •Content filtering is automated and imperfect
- •We are not responsible for actions taken based on AI interactions
- •We do not guarantee service availability or message delivery
- •Facility policies may restrict or monitor usage without our knowledge
- •Third-party AI providers may experience outages or errors
YOU USE THIS SERVICE AT YOUR OWN RISK. We provide no warranties of any kind, express or implied.
7. Data Retention
We retain your information:
- •For as long as your account is active
- •As necessary to provide the Service
- •To comply with legal obligations
- •To resolve disputes and enforce agreements
- •For legitimate business purposes including tax and financial records
Upon Account Cancellation
- •Billing and payment records: Retained for 7 years (tax/legal requirements)
- •Conversation data: Retained for 90 days, then anonymized for safety/improvement purposes
- •Account information: Deleted after 30 days unless legal holds apply
- •Users may request immediate deletion by emailing support, subject to legal requirements
8. Your Rights and Choices
You have the right to:
- •Access and receive a copy of your personal information
- •Update or correct inaccurate information
- •Request deletion of your information (subject to legal requirements)
- •Opt-out of marketing communications
- •Cancel your subscription at any time
To exercise these rights, contact us at support@beyondbarsai.com. We will make reasonable efforts to fulfill requests within 30-45 days. Some data may be retained for legal compliance and business purposes.
9. Children's Privacy
Our Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us immediately.
10. International Data Transfers
Your information is stored on servers in the United States via Supabase and Vercel infrastructure. These countries may have different data protection laws than your own. By using our Service, you consent to the transfer and storage of your data in the United States.
11. Third-Party Links
Our Service may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any information.
12. California Privacy Rights
California residents have additional rights under the California Consumer Privacy Act (CCPA), including:
- •The right to know what personal information we collect
- •The right to request deletion of personal information
- •The right to opt-out of the sale of personal information (we do not sell your data)
- •The right to non-discrimination for exercising privacy rights
To exercise these rights, contact us at support@beyondbarsai.com. We will make reasonable efforts to fulfill requests within the timeframes required by law.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.
14. Contact Us
If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:
Email: support@beyondbarsai.com