Privacy Policy

We don't sell your information

We do not sell or share your personal information, and we do not share it for targeted advertising.

Phone numbers are not shared

Crosstalk does not share your phone number with the other users you are connected to. Calls are bridged through our telephony provider so neither participant sees the other's number. Users may choose to share personal information (including phone numbers) during calls or through any future messaging features we add. Information shared this way is outside our control.

Calls are not recorded or transcribed

Crosstalk does not record or transcribe calls. If we add a recording or transcription feature in the future, e.g., for AI to match you with better conversation partners, it would be off by default, require your consent to enable, and play a notice at the start calls.

Your rights

You can ask us to show you what information we hold about you, to correct it, or to delete it. The easiest way is to text Crosstalk directly. You can also reach us through the contact form. We will respond within a reasonable time, and in any event within the timelines required by applicable law.

What we collect

To run Crosstalk, we collect and store:

• Your phone number.
• The name you choose to be introduced to other users.
• Your timezone.
• The text messages you exchange with Crosstalk.
• Information about your Crosstalk calls, such as which calls you registered for, whom you spoke with, and the duration of the call.
• Any information you share with us, such as interests, preferences, or what kinds of conversations you enjoy.
• If you reach Crosstalk through a group, referral code, or invitation, we record how you were referred.

How long we keep your information

We keep your account information and messages while your account is active. If you delete your account or ask us to delete your data, we will delete it. We may keep a limited record of account activity where we are required to by law, or where we need it to resolve a dispute, enforce our terms, or protect users from abuse.

Who processes your information

We work with a small number of trusted service providers to run Crosstalk. Each receives only the information they need for their role and is bound by its own privacy and security commitments.

Core service providers:

• Crosstalk Technologies, PBC, the Delaware public benefit corporation that developed and owns Crosstalk's underlying technology, provides certain technical services to Crosstalk Connections, Inc.
• Twilio, our telephony provider, handles text messages, telephone calls, and video/voip calls. Twilio processes your phone number, the text of your messages, and call metadata.
• OpenAI powers the AI assistant. It processes the text of your messages with Crosstalk; we don't share your phone number with OpenAI.
• Amazon Web Services hosts our databases and application servers.

Website providers (apply only to gocrosstalk.org visitors, not the Crosstalk service itself):

• Cloudflare hosts this website and provides the CAPTCHA on our contact form.
• Resend delivers contact-form submissions to our team by email.

Our team and consultants

The Crosstalk team, including its directors, officers, employees, and contractors, may access your information as needed to run the service, investigate abuse, or provide support. From time to time we may engage outside consultants on a need-to-know basis, under written confidentiality agreements. Everyone with access is bound by confidentiality obligations.

How we protect your information

We apply the principle of least privilege: people on the Crosstalk team only get access to the information they need for their specific role, and access to particularly sensitive data — like unredacted phone numbers — is restricted further. Your data is encrypted in transit and at rest.

Not a HIPAA-covered service

Crosstalk Connections, Inc. is not a HIPAA-covered entity, so the Crosstalk service is not HIPAA-compliant. Do not rely on HIPAA protections for information you share with Crosstalk or with other users.

Sponsor organizations and reporting

Crosstalk may be sponsored for you by an organization — for example, a healthcare provider, insurer, employee-assistance program, public-health agency, foundation, or community organization. That sponsorship means someone else pays for your use of Crosstalk; it does not mean they see what you do on Crosstalk.

We may share aggregated reports with sponsor organizations, e.g., total calls, participation rates, and outcome metrics across their members. We will not share your individual or identifiable information with sponsors unless you specifically authorize us to.

Groups and group admins

Crosstalk is organized into groups (e.g., a rehab alumni group). When you join a group — by invitation, referral code, or selection choice — the group's admins can see that you are a member, including the name you chose when you set up Crosstalk and your timezone. Your phone number is partially redacted so group admins can recognize you if they know you but would not be able to identify you if they don't. Group admins cannot see the content of your messages or calls. Representatives of a sponsor organization (e.g., a rehab facility's alumni coordinator) may be group admins for groups they manage.

Legal requests

We may be legally required to produce information we hold in response to valid legal process. We will produce only what is required, and we will notify you where permitted by law.

Business transfers

If Crosstalk is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale or transfer of some or all of its assets or operations, your information may be transferred as part of that transaction. Any recipient will be bound by this policy, including its privacy and retention commitments.

Changes to this policy

We may update this policy from time to time. For changes that materially affect your privacy rights, we will give you notice before they take effect.