Legal
Privacy Policy
Last updated: April 12, 2026
1. Information We Collect
We collect information necessary to provide our AI voice receptionist services:
- Business information (name, address, phone, email, services offered)
- Call recordings and transcripts from AI-handled calls
- Lead contact information (name, phone, email) captured during calls
- Appointment and scheduling data
- SMS message content
- Website analytics (via Plausible — no cookies, GDPR-compliant)
2. How We Use Your Data
- Provide and improve our AI voice receptionist services
- Schedule appointments and manage leads on your behalf
- Send transactional SMS and email communications
- Generate analytics and reports for your dashboard
- Comply with legal obligations (TCPA, CAN-SPAM)
3. Data Storage & Security
Your data is stored on Supabase (SOC 2 Type II certified) with row-level security ensuring clients can only access their own data. All data is encrypted in transit (TLS) and at rest. We use Stripe for payment processing — we never store credit card numbers.
4. Data Sharing
We do not sell your data. We share data only with service providers necessary to deliver our services:
- Retell AI — voice agent processing
- Twilio — SMS and phone services
- Cal.com — appointment scheduling
- Stripe — payment processing
- Resend — transactional email
5. TCPA Compliance
We comply with the Telephone Consumer Protection Act. SMS communications honor opt-out requests immediately (reply STOP). We do not send messages during quiet hours (9 PM – 8 AM local time). Consumers can opt out at any time.
6. Your Rights
You may request access to, correction of, or deletion of your data at any time by contacting us. Upon service cancellation, your data is retained for 90 days then permanently deleted.
7. Contact
For privacy inquiries, contact us at hello@flowchainlabs.com.