Privacy Policy
Last updated 23 October 2026
This policy explains how Remote Army (legal entity name, “Remote Army”, “we”) handles personal information in the Remote Army platform at app.remotearmy.ai and api.remotearmy.ai, including the SoniqCX agent portal (together, the “Service”).
1. Who we are and our role
Remote Army provides sales outreach, attribution and reconciliation services to businesses (“Partners”). We handle two kinds of personal information:
- Information about our users: Partner staff, SoniqCX agents and managers, and Remote Army staff who sign in to the Service. For this information we decide how it is used.
- Information about Partners' customers: people a Partner has asked us to contact, and their purchases. We process it on the Partner's behalf and under our agreement with that Partner. Where the Partner is a healthcare provider covered by HIPAA, we do so under a business associate agreement.
2. Information we collect
About users
- Name, work email address, role and organisation.
- If you sign in with Google: your name, email address and Google account identifier, received from Google when you choose to sign in (see section 4).
- If you sign in with a password: a one-way hash of your password. We never store the password itself.
- Sign-in times, actions you take in the Service (kept in an audit log), and technical information such as IP address and browser.
About Partners' customers
- Name, phone number, email address and address, supplied by the Partner or collected on a call.
- Details of calls (time, duration, outcome) and, where enabled, call recordings and transcripts held by our telephony provider.
- Orders and purchases reported by the Partner, used to attribute sales and calculate commission.
- Opt-out and do-not-call requests.
We do not ask for or intentionally store medical histories, diagnoses or payment card numbers.
3. How we use information
- To provide the Service: sign-in, contacting customers for Partners, matching sales to calls and agents, invoicing and commission.
- To keep the Service secure: preventing unauthorised access, investigating misuse, and keeping an audit trail.
- To meet legal obligations, including telemarketing and do-not-call rules.
- To improve the Service, using aggregated or de-identified information where possible.
We do not sell personal information, and we do not use Partners' customer information for our own marketing.
4. Google user data
When you choose “Sign in with Google”, Google shares your name, email address, profile picture and Google account identifier with us. We use your email address and account identifier only to sign you in to an account an administrator has already created for you, and we do not store your profile picture. We do not request access to your Gmail, Google Drive, calendar or contacts, and we do not use Google user data for advertising or transfer it to others except as needed to run the Service or as required by law.
Remote Army's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
5. Who we share information with
We share personal information only as needed to run the Service:
| Recipient | Purpose |
|---|---|
| The Partner that supplied a customer's information | Results of calls, sales and reconciliation for their own customers only. |
| Google Cloud (hosting) and Google Workspace | Running the Service and storing data, in the United States. |
| ConnexAI (telephony) | Placing calls and handling call records and recordings. |
| Anthropic (AI features, if enabled) | Generating summaries and analysis within the Service. Not used to train their models. |
| Professional advisers, authorities | Where required by law, or to protect rights and safety. |
| A buyer or successor | If Remote Army is sold or merged, subject to this policy. |
Each Partner sees only its own data.
6. How long we keep information
We keep information only as long as needed, then delete it automatically. Partners may choose shorter periods.
| Information | Kept for |
|---|---|
| Customers contacted who did not buy | 90 days after the last contact (name and contact details) |
| Customers who bought | The Partner contract plus 5 years |
| Call records required by telemarketing law | 5 years, reduced to phone number, time and outcome |
| Call recordings | 5 years for calls that led to a sale; otherwise 12 months |
| Do-not-call requests | Permanently (phone number only), so we never call again |
| Financial records | 7 years |
| User accounts | While the account is active, then 1 year after it is closed |
| Audit and security logs | 6 years |
7. Security
Information is encrypted in transit and at rest. Access is limited by role: Partner users see only their own organisation's data, and agents see only their own customers. Accounts lock after repeated failed sign-ins, and sensitive actions are recorded in an audit log. No system is perfectly secure; if we learn of a breach affecting your information, we will notify you and the relevant Partner as the law requires.
8. Your choices and rights
- Stop calls: ask on any call, or contact us, and we will add your number to our do-not-call list immediately.
- Access, correction and deletion: depending on where you live (for example, California), you may have the right to know what information we hold about you and to ask us to correct or delete it. If we hold your information on a Partner's behalf, we will work with that Partner to respond.
- Users: you can see your profile and sessions in My account, and ask your administrator to change or close your account.
We will not discriminate against you for exercising your rights.
9. Cookies
We use one essential cookie to keep you signed in. We do not use advertising or tracking cookies. Signing in with Google loads Google's sign-in script, which is governed by Google's privacy policy.
10. Children
The Service is for businesses and is not directed to children under 16. We do not knowingly collect their information.
11. Changes
We will post any changes here and update the date above. For significant changes we will notify users in the Service.
12. Contact
Questions or requests: privacy@remotearmy.ai, or postal address.