1. Information We Collect
We only collect the information needed to provide the service. Specifically, we collect:
- Account information: business name, owner or admin name, email address, password credentials (managed by our authentication provider), and role within the business.
- Contact information: business mailing address, business phone number, and the mobile phone number you provide for SMS notifications and two-factor verification.
- Billing information: billing address, subscription plan, and payment-method tokens (full card numbers are handled by our PCI-compliant payment processor and are not stored on our servers).
- Phone-number and call data: the phone numbers you provision through the service, call metadata (caller ID, timestamps, duration, routing decisions), call transcripts, and call recordings when you enable recording.
- SMS and messaging data: the mobile numbers of customers who text your business line, the contents of those messages, delivery status, and your opt-in records and consent timestamps. Mobile opt-in data and consent records are stored solely to verify consent and operate the messaging service.
- Booking and CRM data: job details, addresses, appointment times, dispatcher notes, and integration data synced to or from connected CRMs.
- Technical and usage data: IP address, browser type, device identifiers, log files, webhook activity, and product analytics needed to operate and secure the service.
2. How We Use Information
We use the information described above only for the following purposes:
- To create and authenticate your account and provide the BlueCallerAI service.
- To provision and route phone numbers and to handle inbound calls and messages on your behalf.
- To send service-related SMS messages and notifications you have opted in to receive (for example, new-lead alerts, booking confirmations, and account alerts).
- To process payments, manage subscriptions, and prevent fraud.
- To respond to support requests and troubleshoot incidents.
- To monitor reliability, prevent abuse, and improve the quality of the product.
- To comply with legal obligations and enforce our agreements.
3. Call and Message Data
If you use voice or messaging features, we process call metadata, transcripts, recordings when enabled, customer contact information, appointment details, handoff events, and related workflow history strictly to deliver those features back to you. You are responsible for obtaining any notices and consents required by law before using those features with your own customers.
4. No Sale, No Sharing With Third Parties, and No Marketing Use
BlueCallerAI does not sell, rent, trade, or share your personal information, your mobile phone number, your SMS opt-in data, or the contents of any text message with any third party for their marketing or promotional purposes. Mobile information and SMS consent data are never shared with third parties or affiliates for marketing purposes under any circumstances.
The only parties we share information with are the service providers that are strictly necessary to operate the product on our behalf, for example, our payment processor (Stripe), telephony provider (Twilio), authentication provider (Clerk), cloud hosting providers, and CRM integration partners you choose to connect. These providers are contractually limited to using the information only to perform services for BlueCallerAI and may not use it for their own marketing. We may also disclose information when required by law, to protect rights and safety, or in connection with a business transaction such as a merger or acquisition, in which case the surviving entity will be bound by this Privacy Policy.
5. Retention
We keep information for as long as reasonably necessary to provide the service, comply with legal obligations, resolve disputes, enforce agreements, and maintain security and business records. Retention periods may vary by data type and account status.
6. Security
We use reasonable administrative, technical, and organizational measures to protect information, but no system is perfectly secure. You should also protect your credentials, devices, and internal team access.
7. Your Choices and Requests
You may contact us to request access, correction, or deletion of account data, subject to legal, contractual, security, and recordkeeping limitations. If you are an end customer of one of our business users, we may direct your request to that business where appropriate because they control their customer records.
8. International and Regional Rights
Depending on where you are located, you may have additional privacy rights under applicable law. We will review and respond to requests in accordance with the laws that apply to the request and the role we play with respect to the relevant data.
9. Changes
We may revise this Privacy Policy from time to time. The current version will be posted on this page with the latest effective date.