Privacy policy.
Last updated October 20, 2026.
What we collect
XStep, Ltd. collects the information you give us when you book a conversation, email us, call or text us, or use a demo: typically your name, email address, phone number, company, and the content of your messages. We also collect basic site analytics, such as pages viewed and device type.
How we use it
To respond to you, schedule and run conversations, provide services you request, and improve our site. Text messaging is described in the Maggie SMS terms, and the Maggie privacy policy covers the demo line and setup links.
We do not sell your personal information, and we do not share your phone number or SMS opt-in data with third parties for their marketing. We use service providers (for example, for email, scheduling, telephony, and hosting) who process data only on our behalf.
AI agent customers and callers
When a business uses our AI agent (Maggie), we collect the business owner's account details (name, business name, email address, phone number) and billing status. Card details are entered on Stripe's secure page; we do not store card numbers.
Calls answered by the AI agent are recorded and transcribed. For each call we process the caller's phone number, the recording, the transcript, any details the caller gives (such as name, address, or reason for calling), and call times and duration. We process caller information on behalf of the business the caller contacted, to deliver that business's messages and leads, measure usage, and bill the business.
Service providers that process this data for us include our telephony provider, AI model providers that power transcription and responses, our hosting provider, our payment processor (Stripe), and our email and text messaging providers. They may use it only to provide services to us.
Retention: recordings, transcripts, and messages are kept while the business's account is active, until the business deletes them. When an account ends, including when a free trial ends without a paid subscription, we delete its recordings, transcripts, and messages 30 days later, except where the law requires us to keep them. Billing records are kept as long as tax and accounting rules require.
If you called a business that uses our AI agent and want your recording or information accessed or deleted, contact that business. You can also email hello@xstep.ai and we will work with the business to respond.
Your choices
Reply STOP to any text to opt out. To access, correct, or delete your information, email hello@xstep.ai. We keep information only as long as needed for the purposes above or as the law requires.
Questions: XStep, Ltd., hello@xstep.ai.