Privacy Policy

1. Scope

This policy explains how FrontDesk AI (Ari Berkowitz d/b/a FrontDesk AI — “we”, “us”) handles personal information when businesses use our AI phone receptionist (the “Service”) and when people call a business that uses it. It covers two groups: customers (the businesses with accounts) and callers (people who phone those businesses).

2. Information we collect

From customers: account details (name, email), business information (services, hours, address, phone numbers, website content you ask us to import), calendar connections you authorize, and billing details (handled by Stripe — we never store full card numbers).

From callers: when someone calls a business using the Service, we process the phone number, the audio of the call (which may be recorded), a transcript, and details the caller shares during the conversation — such as their name, callback number, the service they want, preferred times, and messages they leave. The business the caller dialed controls this data; we process it on that business’s behalf.

3. How we use it

We use this information to operate the Service: answering and routing calls, booking appointments, capturing messages, notifying the business, and billing. We also use AI to process call content — generating transcripts and summaries, classifying what the caller wanted, grading how well the AI receptionist performed, and drafting suggested improvements and follow-up messages that a human at the business reviews and approves. We do not sell personal information, and we do not use call content to advertise to callers.

4. Call recording

Calls handled by the Service may be recorded and transcribed. The Service plays a disclosure at the start of calls where the business has enabled it; recording-consent laws vary by jurisdiction, and the business you called is responsible for its disclosure settings. If you are a caller and want a recording deleted, contact the business you called — or contact us and we will refer your request to them.

5. Service providers (subprocessors)

We rely on a small set of providers to run the Service, and share only what each needs: voice and telephony (Retell AI), AI language processing (Anthropic), text messaging (Twilio), email (Resend), payments (Stripe), authentication (Clerk), database and hosting (Neon, Vercel), and calendar scheduling (Google Calendar or Cal.com, when the business connects them). Each is bound by its own data protection commitments.

6. Text messaging (SMS)

Callers who verbally agree on a call may receive appointment confirmations, reminders, and requested follow-up texts from the business they called. Message frequency varies; message and data rates may apply; reply STOP to opt out or HELP for help. Phone numbers and SMS opt-in data (consent) will not be shared with, or sold to, third parties or affiliates for marketing or promotional purposes. Consent to receive texts is not a condition of purchase. How consent is collected is documented on our SMS Consent page.

7. Retention

We keep call recordings, transcripts, and business data while the business’s account is active and for a reasonable period afterwards, after which they are deleted or de-identified. Businesses can delete individual records (leads, knowledge, and so on) from their dashboard at any time; deleted records are removed from active systems promptly and from backups on a rolling basis.

8. Security

Data is encrypted in transit, access is limited by role and tenant (a business can only ever see its own data), calendar credentials are stored encrypted, and webhooks are signature-verified. No system is perfectly secure; if a breach affects your personal information we will notify affected parties as required by law.

9. Your rights

Depending on where you live (for example under the CCPA or GDPR), you may have rights to access, correct, delete, or export personal information, and to object to certain processing. Customers can exercise these directly in the product or by contacting us. Callers should contact the business they called (the data controller); we support businesses in fulfilling these requests. We do not knowingly collect information from children under 13.

10. Changes and contact

We will post any changes to this policy here and notify customers of material changes by email or in-product. Questions or requests: arigberkowitz@gmail.com.