Privacy Policy

Psio.io (“Psio”, “we”, “us”) is an AI build studio operated by Junaid Yousaf Sheikh. Contact: contact@psio.io.

This policy describes how we handle information collected through:

• Visits to psio.io and any subdomain we operate.
• The website diagnose form, contact form, and lead form.
• Inbound voice calls to +1-518-849-8135 (handled by our AI intake agent “Sarah”).
• Inbound and outbound messages or calls on our WhatsApp Business numbers, including +1-518-849-8135 and +1-786-949-3078.
• Direct messages, story replies, and comments on Instagram professional accounts that we operate on behalf of our clients, where the account owner has connected that account to our Meta app.
• Email sent to any address on the @psio.io domain.

Some of our clients ask us to run an automated assistant on their Instagram professional account. If you send a direct message or leave a comment on one of those accounts, this section applies to you.

• You are talking to an automated assistant. It answers first messages so nobody waits. A human from the client’s team reads every serious conversation and can take over at any point. You can ask for a person at any time.
• What we receive from Meta — your Instagram-scoped user ID (an identifier unique to that business and our app, not your Instagram password or email), your username and public profile name, the content and timestamp of the messages or comments you send to that account, and our replies.
• What we do with it — generate a reply, keep the recent conversation in context so the thread makes sense, and pass a short summary to the account owner so a human can follow up.
• Who the data belongs to — the client whose Instagram account you messaged is the controller of that conversation. We process it on their instructions as their service provider.
• What we never do — we do not send you unsolicited messages, we do not add you to marketing lists, we do not sell or share the conversation with advertisers or data brokers, and we do not use it to train third-party foundation models.
• Health and medical topics — where a client operates in fitness or wellbeing, the assistant is instructed to give no medical, injury, nutrition, or medication advice, and to hand you to a human instead. Nothing it says is medical advice.

To stop receiving automated replies, send “stop” in the conversation, or block the account. We honour that permanently for that account.

• Contact details you give us — name, email, phone or WhatsApp number, business name, website link.
• What you tell us — the bottleneck, workflow, or question you submit (web form, voice call, or message).
• Call and message metadata — caller phone number, call duration, call timestamp, message timestamp, and (for voice calls) the transcript generated by our voice provider.
• Basic technical info — page URL, referrer, user agent. We store a one-way daily-rotating hash of your IP address; the raw IP is never persisted.
• Cookies — only first-party, strictly-necessary cookies. We do not run third-party advertising trackers.

• Reply to your message, draft a diagnosis, or schedule a call.
• Keep an internal CRM record so we can follow up with you.
• Improve our intake agents (the AI Sarah on voice, Hearth on email). Transcripts and messages may be reviewed by the founder to tune the agent’s behaviour.
• Send you the written diagnosis and a calendar link if you asked for one.

We do not sell, rent, or share your data with advertisers or data brokers. We do not train third-party foundation models on your data.

We use a small set of vendors to operate the service. Each receives only the data necessary to do its job:

• Vercel — website hosting and serverless functions.
• Neon — Postgres database for messages, diagnoses, and CRM rows.
• Resend — email sending and inbound email routing for @psio.io addresses.
• Twilio — phone number provisioning and voice call delivery for +1-518-849-8135.
• ElevenLabs — speech-to-text, text-to-speech, and LLM-backed voice agent runtime for inbound calls.
• Meta (WhatsApp Business, Instagram) — for WhatsApp message and call delivery on our WhatsApp Business numbers, and for delivering and receiving Instagram direct messages and comments on client accounts connected to our app.
• Anthropic (Claude) — the language model that drafts replies for our Instagram assistant. When you message it, the text of your message and the recent messages in that same conversation are sent to Anthropic so that a relevant reply can be written. We do not attach your name, phone number, email address or Instagram username to that request, although anything you choose to write in a message is included in it. Anthropic is processing this on our instruction, for that purpose only, and their handling of it is governed by their own terms at anthropic.com/legal/privacy.
• DeepSeek — the same job, for our WhatsApp assistant, and as a standby for the Instagram assistant if Anthropic is unavailable. The same message text is sent, on the same basis, and their handling of it is governed by their own terms at deepseek.com/privacy.
• Google Workspace — operator inbox for the founder.
• Hostinger — domain registration and DNS.

• CRM rows (name, email, diagnosis, transcript): kept for 24 months from your last interaction, then deleted.
• Voice call recordings: we do not record audio. Only the text transcript and call metadata are stored.
• Email: retained while the conversation is active, archived after six months of inactivity.
• IP hashes: rotate daily; we cannot reverse them after rotation.
• Instagram messages and comments: kept for 90 days, then deleted. Deleted immediately if you ask, if the account owner asks, or if Meta notifies us that you deleted the message.

You can ask us to:

• Send you a copy of everything we hold on you.
• Correct anything that’s wrong.
• Delete your record entirely.
• Stop contacting you.

To request deletion of your data, follow these steps:

1. Email contact@psio.io with the subject line “Privacy request”.
2. Tell us which channel you contacted us on — the website form, a phone call, a WhatsApp number, or an Instagram account — and include the identifier you used there (your email, phone number, or Instagram username).
3. Say what you want: a copy of your data, a correction, deletion, or to stop being contacted.

We confirm receipt within 14 days and complete deletion within 30 days. You do not need an account with us, and there is no charge. If your request concerns an Instagram or WhatsApp account we operate for a client, we will action it and notify that client, since they are the controller of that conversation.

If you’re in the EU/UK and unhappy with our response, you can complain to your local data-protection authority.

We use TLS in transit, encrypted storage at rest with our vendors, hashed IP storage, and minimum-necessary access for the founder. We are a small studio — not an enterprise with a SOC team — so we keep the data surface small on purpose.

Psio.io is a B2B service. We do not knowingly collect data from anyone under 18. If you believe a minor has contacted us, email contact@psio.io and we’ll delete the record.

We’ll update the “last updated” date at the top whenever we change this page. Material changes will be announced on the homepage for at least 30 days before they take effect.

Questions or requests: contact@psio.io.