Privacy Policy
1 Data We Collect
From Business Accounts (Tenants)
When a business signs up for ServiceBlue, we collect:
- Business information: Business name, location, website URL, and trade/industry type.
- Owner contact information: Name, email address, and phone number.
- Payment information: Billing details are processed by Stripe and never stored on ServiceBlue servers. We receive a Stripe customer ID and subscription status only.
- Account credentials: Access tokens issued at signup for dashboard authentication.
- Configuration data: Business hours, service offerings, scheduling preferences, and custom AI instructions you provide.
From Callers (End Customers of Tenant Businesses)
When a person calls a phone number managed by ServiceBlue, we may collect:
- Phone number: The caller's phone number (E.164 format), stored in masked form (last 4 digits only, e.g., ***1234) in our logs.
- Call recordings: Audio recordings of the call, processed by Vapi (our voice AI provider) and Twilio (our telephony provider).
- Call transcripts: Text transcriptions of the conversation, truncated to the first 500 characters in our logs.
- Appointment details: Name, address, requested service, and preferred appointment time if the caller books an appointment.
- Call metadata: Call duration, call outcome (e.g., appointment booked, information provided, escalated), and timestamp.
Automatically Collected
- Server logs: IP addresses, request timestamps, HTTP status codes, and user-agent strings for security and debugging. Logs are not linked to caller identity.
- No cookies or tracking pixels are used on the ServiceBlue dashboard or landing page beyond what is strictly necessary for session management.
2 How We Use Data
We use the data we collect to:
- Answer inbound phone calls on behalf of tenant businesses using AI voice agents.
- Book appointments and send confirmation summaries to business owners via SMS.
- Provision and manage Vapi voice assistants and Twilio phone numbers.
- Provide tenants with call logs, appointment records, and dashboard analytics.
- Process subscription billing through Stripe.
- Detect and prevent fraud, abuse, and unauthorized access.
- Improve AI response quality and system reliability.
- Comply with applicable law and respond to lawful requests.
We do not sell, rent, or trade personal data to third parties for marketing purposes. We do not use caller data for advertising.
3 Sub-Processors & Third-Party Services
ServiceBlue relies on the following third-party processors to deliver the service. Each processor operates under its own privacy policy and data processing agreements.
| Processor | Purpose | Data Shared | Privacy Policy |
|---|---|---|---|
| Vapi | AI voice agent hosting, real-time call processing, speech-to-text, text-to-speech | Call audio, transcripts, assistant configuration | vapi.ai/privacy |
| Twilio | Phone number provisioning, call routing, SMS delivery | Phone numbers, call metadata, SMS content | twilio.com/legal/privacy |
| Anthropic (Claude) | Business research, AI chat widget responses, company profile generation | Business name, website content, caller inquiry text (no PII) | anthropic.com/privacy |
| Google (Maps & Places API) | Business profile research, address validation, service area confirmation | Business name, address, location | policies.google.com/privacy |
| Stripe | Subscription billing, payment processing | Business owner name, email, billing address, payment method (tokenized) | stripe.com/privacy |
| Supabase | Database (tenant records, call logs, appointment data) | All structured data listed in Section 1 | supabase.com/privacy |
We require all sub-processors to maintain appropriate technical and organizational security measures and to process data only for the purposes described in this policy.
4 Data Retention
Call Recordings & Transcripts
Call audio recordings and full transcripts stored by Vapi and Twilio are retained for 90 days from the date of the call. After 90 days, recordings are deleted automatically. Truncated transcript excerpts stored in our database (first 500 characters) are retained for the duration of the tenant's account and deleted within 30 days of account termination.
Account & Business Data
Tenant account data (business name, contact information, configuration, and subscription history) is retained for the lifetime of the account and for 3 years after account closure for legal and billing compliance purposes.
Call Logs & Appointment Records
Call metadata (duration, outcome, masked caller phone) and appointment records are retained for 2 years to support business continuity, dispute resolution, and analytics. Appointment data may be exported by tenants at any time from the dashboard.
Server Logs
System access logs (IP addresses, request metadata) are retained for 90 days for security monitoring and then purged.
Payment Records
Stripe transaction records and subscription history are retained for 7 years to satisfy financial record-keeping requirements.
5 Your Rights
Depending on your location, you may have the following rights regarding your personal data:
Right to Access
You may request a copy of personal data we hold about you. Tenant businesses may export their data from the dashboard. Callers may contact us directly.
Right to Deletion
You may request that we delete your personal data. Tenant accounts can be deleted from the dashboard settings. Caller data deletion requests are processed within 30 days. Note: some data may be retained to satisfy legal obligations (see Section 4).
Right to Opt Out of AI Call Handling
Callers who do not wish to interact with an AI system may request to leave a voicemail or end the call at any time. Callers may also contact the tenant business directly to request a human callback. ServiceBlue does not require callers to interact with the AI to reach the business.
California Residents (CCPA/CPRA)
California residents have the right to know what personal information is collected and how it is used, the right to delete personal information, the right to opt out of the sale of personal information (we do not sell data), and the right to non-discrimination for exercising these rights. To exercise your rights, contact us at the address in Section 11.
Exercising Your Rights
To exercise any of the above rights, email us at support@dealbotrei.com with the subject line "Privacy Request." We will respond within 30 days.
6 TCPA Disclosure
ServiceBlue operates as a call answering and appointment booking service on behalf of subscribed businesses. ServiceBlue does not initiate outbound marketing calls or text messages to consumers without prior express written consent.
Outbound SMS messages sent by ServiceBlue are limited to:
- Appointment confirmation and reminder messages to callers who have requested a booking.
- Operational notifications to tenant business owners regarding their account and call activity.
All outbound SMS messages include an opt-out instruction. Recipients may reply STOP at any time to opt out of further messages. Opt-outs are processed immediately and permanently.
If you believe you have received an unsolicited message from a ServiceBlue-powered number, contact us at support@dealbotrei.com and we will investigate promptly.
Tenant businesses that use ServiceBlue are independently responsible for their own TCPA compliance, including obtaining proper consent from their customers before initiating any marketing communications. ServiceBlue provides the platform; it does not provide legal advice.
7 FTC AI Disclosure
ServiceBlue discloses its artificial intelligence nature to every caller at the start of every call, in compliance with FTC guidelines on deceptive practices and the FTC's position on AI impersonation.
Specifically:
- The AI voice agent identifies itself as an AI assistant at the beginning of each call.
- No ServiceBlue-powered assistant will claim to be a human when sincerely asked.
- Tenant businesses are prohibited from configuring their AI to deny being an AI or to impersonate a specific named human individual in a deceptive manner.
- Call transcripts and recordings are retained as evidence of disclosure compliance.
ServiceBlue complies with applicable state laws regarding AI identity disclosure, including laws in California, Colorado, and other jurisdictions that mandate AI identification during consumer interactions.
8 Call Recording Notice
Call recording is a core feature of the ServiceBlue platform. Recordings enable:
- Quality assurance and AI performance improvement.
- Transcript generation for business owner review.
- Dispute resolution and compliance documentation.
- Appointment confirmation verification.
Consent: Callers are informed of recording at the start of every call. Continuing the call constitutes consent to recording in one-party consent states. In all-party consent states (including California, Florida, Illinois, and others), the AI disclosure at call start constitutes notice and callers who continue the call have consented. A list of all-party consent states is available from the National Conference of State Legislatures.
Access: Tenant businesses may access call recordings through their Vapi dashboard during the 90-day retention window. Callers may request a copy of their recording by contacting us at support@dealbotrei.com within 90 days of the call.
Security: Call recordings are encrypted in transit (TLS 1.2+) and at rest by Vapi and Twilio. Access to recordings is restricted to the tenant whose business received the call and ServiceBlue administrators for support purposes only.
9 Children's Privacy
ServiceBlue is a business-to-business platform intended for use by adults operating home service businesses. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided personal information, we will delete it promptly. If you believe a child's information has been collected, contact us at support@dealbotrei.com.
10 Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will:
- Update the "Last Updated" date at the top of this page.
- Send an email notification to tenant business owners at the email address on file.
- For significant changes, require acknowledgment in the dashboard before continued use.
Continued use of ServiceBlue after a policy update constitutes acceptance of the revised terms. We encourage you to review this policy periodically.
11 Contact Us
For privacy questions, data requests, TCPA concerns, or to exercise your rights, contact us at:
Email: support@dealbotrei.com
Subject line: "Privacy Request"
Response time: Within 30 days
We take privacy requests seriously and will respond promptly. If you are not satisfied with our response, you may contact your state attorney general's office or, for California residents, the California Privacy Protection Agency (CPPA).