Privacy Policy

Scope and information

This notice covers the Front Desk sales site and owner workspace. The sales demo stores business details, contact email, conversation inputs, and practice booking requests in your browser. The owner workspace stores account email, business setup, services, approved public business answers, customer names and contacts, appointment dates, times and locations, conversation records, and preferences.

How information is used

Information is used to sign you in, save your business workspace, schedule services, show summaries, and operate your approved phone connection. The original sales preview does not submit an order or send a text. Stripe sandbox checkout processes test subscriptions. Only submit customer information that you are authorized to use.

Hosting and service providers

Vercel hosts the websites. Supabase provides owner account authentication and database storage. When you enable the phone connection and authorize sharing, Retell and the connected telephone provider process the business context, approved public questions and answers, and call data needed to handle calls. Stripe processes checkout and subscription billing information; Front Desk stores Stripe customer and subscription IDs, payment status, and access deadlines. Card details are entered on Stripe, not stored in the Front Desk database. These providers may process technical logs such as IP addresses. Their policies and settings also apply.

Call information and audio

For new calls, Front Desk saves a caller name when provided, the call date/time, and duration, along with technical identifiers needed to link the record to the account. It does not save call audio, full transcripts, summaries, or caller phone numbers in the call-history record. Appointment details needed to schedule a service remain separately in the calendar.

Front Desk requests Retell’s Basic Attributes Only storage setting for inbound calls routed through this site. Retell’s documentation says recordings, transcripts, and logs are not retained in call history with that setting, but temporary audio may remain accessible through a provider webhook link for about ten minutes. Front Desk does not fetch or save those links. Live speech must still be processed to answer a call and extract a stated name.

This is a no-retained-recordings setting, not a promise that no provider ever creates temporary audio. Separate carrier settings and calls made directly through a provider need independent review. Earlier provider recordings or workspace data are not automatically erased by this update. Existing call content is hidden from the current website and removed from its records on a later workspace save or history refresh. For removal requests covering older records or provider copies, use the support form.

Browser storage and security

Local storage saves theme preferences and sales-demo data. A secure, HTTP-only purchase cookie links checkout to account activation for up to seven days. The server stores a hash of that activation proof, the checkout email, Stripe identifiers, payment status, and a hashed network address used to limit checkout attempts. Owner sign-in uses authentication cookies. Clearing browser storage removes local sales-demo data but does not delete database records. Workspace access is tied to the signed-in account. Provider credentials are kept on the server. No system can guarantee complete security.

Retention and your choices

Browser-demo information remains until you clear it. Workspace records remain while stored in your account; no automatic expiry has been configured. Provider copies, backups, and logs may follow different retention rules. You can correct business details, remove appointments, and export a backup in the owner workspace. Use /support to request access, correction, or deletion without an active subscription. The operator verifies identity and authority before releasing or changing personal data. Submission does not automatically erase records. Provider copies and lawful retention requirements must be reviewed separately.

Support request information

The support form stores your email, request category, description, reference number, submission time, and a hashed network address used to limit abuse. Only the operator can review the inbox. No automated response email is sent. Requests are retained for manual handling; no automatic deletion schedule has been configured. Ask for removal when the issue is resolved, subject to applicable legal retention duties. Do not include unnecessary personal information.

Customer requests and pilot contact

Customers should contact the business they called about appointment corrections or their conversation data. The business can coordinate a request with the Front Desk operator. The public support form accepts privacy requests. A public legal operator identity and contact email must also be supplied before commercial subscriptions open. This pilot notice will be updated when providers, data practices, or contact details change.