Privacy Policy

Last updated: October 15, 2026

This Privacy Policy describes how Murph, Inc ("Murph", "Murph.ai") collects, uses, and protects your information. We are committed to GDPR, CCPA, and HIPAA compliance where applicable.

1. Information We Collect

• Account Information: Name, email, company details, payment information
• Business Data: Email contents, files, documents, knowledge bases
• Communications Data: Calls, call notes and transcripts, and text messages our users send and receive through the Platform, including the phone numbers involved
• Usage Data: Log data, access times, feature usage, agent executions
• Device Information: IP address, browser, operating system

2. How We Use Information

• Provide and operate Platform services
• Improve AI models and Platform functionality using anonymized data
• Generate performance benchmarks and analytics
• Process payments and comply with legal obligations

3. Information Sharing

We share information with service providers (such as Amazon Web Services for hosting and Twilio for calls and text messages), for legal compliance, in business transfers, and anonymized data for research. We never sell personal information.

4. Text Messages (SMS)

Murph users can send and receive text messages with their own business contacts from a business number provided through Murph. A person receives these texts only after giving the Murph user their mobile number and agreeing to receive texts, or after texting that number first. Message frequency varies. Message and data rates may apply. Reply STOP to stop receiving texts or HELP for help. See our Text Messaging Terms.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties, except the messaging providers that deliver the texts.

5. Data Security

AES-256 encryption, TLS 1.3, multi-factor authentication, SOC 2 and ISO 27001 alignment, regular security audits, intrusion detection, and 24/7 monitoring.

6. Your Privacy Rights

GDPR Rights (EEA/UK): Access, correction, deletion, data portability, objection, restriction, and withdrawal of consent. Contact privacy@murph.ai.

CCPA Rights (California): Right to know, delete, correct, opt-out, limit sensitive data use, and non-discrimination.

7. Data Retention

Account data retained during subscription plus 7 years. Business data retained 30 days post-termination. Anonymized data retained indefinitely.

8. International Transfers

Data may be transferred to the US and other countries. We use Standard Contractual Clauses for EEA transfers.

9. Contact Us

Email privacy@murph.ai or visit murph.ai/privacy.