Privacy at a glance

What happens to your information

Handled Calls uses business, caller, and service data to answer calls, organize work, secure accounts, and support customers. We do not sell personal information or use call data for third-party advertising.

Need to act? Request account or data deletion or email us.

Privacy Policy

Effective Date: September 20, 2026

Handled Calls LLC ("Handled Calls," "we," "us," or "our") provides call answering, AI receptionist, voicemail, transcription, booking, payment, review, dashboard, billing, support, and related business operations tools for service businesses. This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you visit our website, create an account, use our web dashboard or login-only mobile companion apps, contact us, call or message a business that uses Handled Calls, or otherwise interact with our services.

This policy applies to business owners, employees, contractors, team members, website visitors, account administrators, support contacts, prospective business or partner contacts, callers, leads, job customers, payment recipients, review respondents, and other people whose information is processed through Handled Calls.

Handled Calls is primarily a business-to-business service. For end-customer, caller, job, message, and call data that we process on behalf of a business customer, the business customer is generally the controller, business, or similar party, and Handled Calls is generally the processor, service provider, contractor, or similar party. For account, billing, security, support, website, legal, compliance, and operational data, Handled Calls may act as an independent controller or business.

The Data Processing Addendum in our Terms and Conditions applies when we process Customer Personal Data on behalf of a business customer.

1. Personal Information We Collect

We collect personal information in the categories below. Not every category applies to every person or account.

Account And Business Information

We may collect business names, owner names, team member names, email addresses, phone numbers, passwords or authentication credentials, roles, permissions, account settings, billing settings, service areas, business hours, business type, service descriptions, AI instructions, notification preferences, review links, support communications, and related business configuration.

Business Prospect And Partner Information

For limited business-to-business outreach, we may collect a person's name, professional role, business name, business email address, business website, public professional content, the public source where the contact information or business relevance was found, and our outreach history, replies, delivery status, and opt-out status. We collect only information relevant to evaluating a possible business or partner relationship with Handled Calls.

Caller, Customer, And Job Information

When a business uses Handled Calls, we may process caller and customer information such as names, phone numbers, caller ID, job addresses, service requests, urgency, appointment dates and times, job notes, payment amounts, review status, follow-up notes, and other details provided during calls, voicemails, bookings, support interactions, payment flows, review flows, or dashboard entry.

Calls, Voicemails, Audio, Transcripts, And Follow-Up Records

Depending on business settings and provider configuration, we may collect or process voicemail audio, live AI call audio, call recordings, call metadata, voicemail transcripts, live call transcripts, AI summaries, suggested responses, follow-up notes, review responses, and payment-link metadata. Customer texts that your team drafts, sends, or replies to outside Handled Calls are your responsibility and may not be visible in the dashboard.

Calls and voicemails handled through Handled Calls may be recorded, transcribed, summarized, analyzed, and stored. We may process this information through providers such as Twilio, Retell AI, OpenAI, Anthropic, Railway, and other providers described below.

Billing And Payment Information

We use Stripe for subscription billing, invoices, payment method handling, billing portal features, and job payment checkout. We may receive and store Stripe customer IDs, subscription IDs, payment status, invoice status, payment amounts, usage records, billing email, billing name, customer phone metadata for payment links, and related payment metadata. We do not collect or store full card numbers, CVV codes, or bank account credentials.

Website, Device, Usage, And Diagnostic Information

We may collect IP address, browser type, device information, app platform, push-notification registration tokens, pages viewed, referring pages, request logs, approximate location derived from IP address, session events, feature usage, setup-step progress, performance metrics, error logs, stack traces, security events, authentication events, and other diagnostic information. Product-journey analytics use fixed event labels and do not include what a person types into signup, setup, search, customer, job, call, transcript, message, or notes fields. We use this data to operate, secure, maintain, troubleshoot, and improve the service.

Location And Address Information

We do not collect GPS location from a mobile device. We may process business addresses, customer job-site addresses, service-area addresses, and provider-derived geocoding or address validation data when you or a caller provide an address. If enabled, we may use Google Maps Platform or a similar provider to validate, display, geocode, or check service-area coverage for addresses.

Cookies And Similar Technologies

Our website and app may use cookies, local storage, or session storage to keep users signed in, remember preferences, secure sessions, measure basic usage, understand referral sources, troubleshoot issues, and improve the service. Optional website and pre-account signup analytics run only after the visitor selects Accept in the analytics notice. The resulting first-party session token is randomly generated, stored only for the browser session, hashed before storage, and not used for advertising or tracking across other companies' services. Rejecting optional analytics does not limit website or signup features. Signed-in product events may be associated with the business account so we can understand setup progress and feature adoption. We do not use advertising identifiers, device fingerprinting, session replay, keystroke capture, or third-party advertising trackers for this measurement.

Mobile App Permissions And Notifications

The mobile companion apps may request permission to send notifications about calls, appointment requests, jobs, account security, or other relevant account activity. If you allow notifications, we process an account-linked device registration token through Apple Push Notification service, Google Firebase Cloud Messaging, or both. You can change notification permission in your device settings. The mobile apps do not request access to device contacts, photos, the microphone, or precise or approximate device location.

Sensitive Or Regulated Information

The service is not designed to collect protected health information, full payment card numbers, CVV codes, bank account credentials, government ID numbers, children's information, biometric identifiers, precise GPS location, or other highly sensitive or regulated information. Business customers and callers should avoid providing that type of information through calls, notes, prompts, or dashboard fields unless Handled Calls has signed a separate written agreement covering the use case.

2. Sources Of Personal Information

We collect personal information from:

3. How We Use Personal Information

We use personal information to:

4. Business Marketing And Outreach

Handled Calls may send limited business-to-business email to people whose professional work appears relevant to home-service businesses or a possible partner relationship. We use business contact details that the person or their organization provided to us or made publicly available for business inquiries, along with specific public business information that explains why we selected the recipient.

We do not use purchased consumer lists, guessed private email addresses, or caller, customer, SMS, call, voicemail, payment, or review data for this outreach. An initial outreach sequence is limited to no more than two emails unless the recipient replies or asks us to continue the conversation.

Some outreach emails include a first-party image that measures an estimated open and a unique link that records an estimated visit before taking you directly to the destination. We associate the first observed image request and link request with the intended business contact, campaign and email link. Email privacy tools, automated security checks, image blocking and forwarded emails can make these estimates incomplete or inaccurate; they do not establish who read the message, clicked, played a demo or received an email in their inbox. Recognizable automated requests and supported browser privacy signals are excluded. Other links offer an explicit choice to share a visit or continue without sharing; those are reported separately. We do not set tracking cookies or retain IP addresses or browser identifiers for this measurement. Measurement links and their records expire after 90 days. We also record sent messages, replies and manually reviewed outcomes for business outreach. Opting out stops further measurement associated with the contact.

A recipient may opt out at any time by replying to the email or using any opt-out method provided. We will suppress further marketing outreach to that address and may retain the minimum information needed to honor the request, prevent duplicate outreach, and document compliance.

5. Customer Messaging Privacy And Consent

Handled Calls is not currently a customer messaging platform for owner-authored customer texts. Business customers are responsible for drafting, sending, replying to, and keeping any required consent records for customer messages they send outside Handled Calls.

If a limited operational messaging configuration is enabled for an account, we may process message-related metadata, consent records, opt-out records, and provider records as needed to operate that configuration, honor opt-outs, prevent abuse, maintain sender reputation, and support compliance.

We do not sell, rent, or share mobile opt-in information or messaging consent data with third parties for their marketing or promotional purposes.

6. AI Processing And Model Training

Handled Calls uses AI providers to provide transcription, call handling, summaries, lead analysis, suggested responses, booking assistance, spam detection, service-area checks, and related features. Providers may include OpenAI for audio transcription, Anthropic for language analysis, and Retell AI, Vapi, or similar voice AI providers for live AI receptionist calls.

We do not permit our providers to use Customer Data to train public or general-purpose AI models where our provider plan or agreement gives us that control. We may use de-identified or aggregated operational metrics to improve service reliability, quality, security, performance, and product usage.

AI systems may generate inaccurate or incomplete results. Business users are responsible for reviewing and correcting AI-generated records, suggestions, and decisions.

7. How We Disclose Personal Information

We may disclose personal information as described below.

Service Providers And Subprocessors

We share personal information with service providers and subprocessors that help us operate Handled Calls. These providers process information on our behalf and for the purposes described in this policy.

Current or expected providers may include the following:

Twilio Purpose: Voice calls, voicemail recording, SMS, phone routing, phone numbers, and related communications infrastructure. Data categories: Phone numbers, call metadata, voicemail audio, call recordings, SMS content, and delivery metadata.

Retell AI Purpose: Live AI receptionist calls when enabled. Data categories: Call audio, live transcripts, caller details, and business instructions.

Vapi Purpose: Alternate voice AI provider if enabled. Data categories: Similar voice AI call data when used.

OpenAI Purpose: Audio transcription through Whisper or similar API services. Data categories: Voicemail or call audio for transcription.

Anthropic Purpose: Language analysis, summaries, lead extraction, suggested actions, and related AI-assisted workflows. Data categories: Transcripts, SMS content, job details, customer details, and business context.

Stripe Purpose: Subscription billing, invoices, payment method handling, billing portal, and job payment checkout. Data categories: Billing owner data, customer/payment metadata, invoice metadata, subscription status, and payment status.

Railway Purpose: Application hosting, database, deployment, storage, and infrastructure. Data categories: Hosted application data and Customer Data.

Sentry Purpose: Error monitoring and diagnostics when enabled. Data categories: Error context, user/account identifiers, request metadata, and stack traces.

Honeycomb/OpenTelemetry Purpose: Observability, tracing, reliability diagnostics, and performance monitoring when enabled. Data categories: Request/trace metadata, hashed identifiers, tenant context, and operational telemetry.

Google Maps Platform Purpose: Address validation, geocoding, maps, service-area checks, and related location features when enabled. Data categories: Business and customer address data.

Google Firebase Purpose: Mobile push registration and notification delivery when enabled. Data categories: Account-linked device registration token and notification content.

Apple Push Notification Service Purpose: iOS push registration and notification delivery when enabled. Data categories: Account-linked device registration token and notification content.

Postmark Purpose: Account, security, billing, and support email when enabled. Data categories: User email address and message metadata.

Google Workspace Purpose: Business email, including limited customer or partner outreach when enabled. Data categories: Business contact email address, message content, headers, delivery status, replies, and related email metadata.

Mailforge Purpose: Hosting business outreach mailboxes and sending and receiving customer or partner outreach when enabled. Data categories: Business contact email addresses, message content, headers, delivery status, replies, and related email metadata.

We may add, replace, or remove providers as our service evolves. We use commercially reasonable safeguards and contractual protections for providers that process personal information on our behalf.

Business Account Users

Information processed for a business account may be visible to the account's owners, admins, employees, contractors, and authorized users according to the account's role and permission settings. This may include caller information, transcripts, recordings, customer records, job records, payment status, review status, messages, and audit history.

Business Customers And Their Customers

If you call, message, book with, pay, or otherwise interact with a business that uses Handled Calls, we may disclose your information to that business and its authorized users so the business can respond, provide service, schedule work, request payment, request feedback, or manage its customer relationship.

Legal, Safety, Carrier, And Compliance

We may disclose information if we believe doing so is reasonably necessary to comply with law, legal process, carrier or messaging compliance requirements, provider requirements, tax obligations, security investigations, fraud prevention, abuse prevention, or to protect the rights, safety, and property of Handled Calls, customers, callers, users, service providers, carriers, or others.

Business Transfers

If Handled Calls is involved in a merger, acquisition, financing, reorganization, sale of assets, bankruptcy, or similar transaction, personal information may be transferred as part of that transaction, subject to appropriate protections.

With Consent Or Direction

We may disclose information when you direct us to do so, configure the service to do so, or otherwise provide consent.

8. Selling, Sharing, And Advertising

Handled Calls does not sell personal information. Handled Calls does not share personal information for cross-context behavioral advertising. Handled Calls does not use caller, customer, SMS, call, voicemail, payment, or review data for third-party advertising.

We do not share mobile opt-in information or SMS consent data with third parties for their marketing or promotional purposes.

We may use de-identified or aggregated information for analytics, reliability, security, benchmarking, and service improvement. We do not attempt to re-identify de-identified information except to test whether de-identification is effective or as permitted by law.

9. Data Retention

We retain personal information for as long as reasonably needed to provide the service, operate your account, support your business, comply with legal and carrier obligations, resolve disputes, maintain security, preserve audit history, enforce suppression rules, and enforce our agreements.

Default retention practices include:

Retention windows may be changed by configuration, law, provider limits, business requirements, security needs, support needs, or operational needs. We may retain certain information longer where required or permitted by law, including billing, tax, audit, security, fraud prevention, dispute, suppression, and compliance records. We may delete, redact, de-identify, or archive data earlier where appropriate.

Choosing “Remove call from workspace” removes the call, its saved transcript and recording access from your Handled Calls workspace. It does not immediately erase provider copies or backups, or delete linked customer and job records. Those records and copies have separate deletion and retention processes. For broader deletion, use our account and data deletion page or contact hello@handledcalls.com. We verify the request’s scope and authority and explain any remaining retention; a pending request is not confirmation of provider deletion.

10. Security

We use administrative, technical, and organizational safeguards designed to protect personal information. These may include HTTPS and HSTS in public environments, provider-managed encryption, role-based access controls, multi-factor authentication options, webhook signature validation, audit logs for transcript access and administrative actions, secrets management, data redaction, suppression lists, error monitoring, backup and restore processes, and restricted administrative access.

No method of transmission or storage is completely secure. We cannot guarantee absolute security. Business customers are responsible for configuring their accounts safely, managing access, securing devices, and notifying us promptly of suspected unauthorized access.

11. Your Choices And Rights

Depending on your location and relationship with Handled Calls, you may have rights to access, correct, export, delete, restrict, object to, or opt out of certain processing of personal information.

Website visitors may accept or reject optional analytics in the website notice. We honor supported browser privacy signals by leaving optional analytics off. You may also clear the first-party session cookie through your browser. Business account users may contact us to object to or ask questions about signed-in product analytics.

Business account admins may access export and deletion tools in the dashboard where available. If you cannot sign in or prefer to submit the request outside the app, use our account and data deletion page. It explains how to submit a request, what the request covers, and what information may need to be retained. We normally complete verified deletion requests within 30 calendar days and will explain if a legal or operational exception requires more time.

End customers, callers, or SMS recipients may contact the business they called, messaged, booked with, paid, or otherwise interacted with to exercise rights related to that business's records. You may also contact Handled Calls, and we will route or handle the request as appropriate based on our role and legal obligations.

SMS recipients may opt out of Handled Calls customer SMS by replying STOP or a similar supported keyword. They may reply START to opt back in where supported.

You may unsubscribe from non-essential emails where an unsubscribe mechanism is provided. We may still send transactional, security, billing, support, and service-related communications.

Business outreach recipients may opt out by replying to the message or using the opt-out method provided. We may retain the minimum business contact and suppression information needed to honor the request and avoid contacting the recipient again.

12. State Privacy Notices

Residents of certain U.S. states may have additional privacy rights under state privacy laws, including rights to know, access, correct, delete, port, opt out of sale or sharing, and limit certain uses of sensitive personal information.

Handled Calls does not sell personal information or share personal information for cross-context behavioral advertising. We process sensitive information only as needed to provide and secure the service, comply with law, honor customer instructions, and support the business customer.

Categories of personal information we may collect include:

To exercise privacy rights, contact us at hello@handledcalls.com or use our account and data deletion page. We may need to verify your identity and, for end-customer records, may need to coordinate with the business customer that controls the relevant account.

13. Data Processing Addendum

The Data Processing Addendum in our Terms and Conditions applies when Handled Calls processes Customer Personal Data on behalf of a business customer as a processor, service provider, contractor, or similar role. The DPA describes processing details, customer instructions, confidentiality, subprocessors, security measures, Security Incident notice, Data Subject request assistance, return/deletion, service-provider restrictions, and international transfer terms.

If you need a separately signed DPA, vendor review, or security questionnaire, contact hello@handledcalls.com.

14. Children's Privacy

Handled Calls is not directed to children under 13 and is intended for business use. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us, contact us and we will take appropriate steps.

15. International Users

Handled Calls is operated in the United States. If you access or use the service from outside the United States, you understand that your information may be processed and stored in the United States or other locations where our service providers operate.

If applicable Data Protection Laws require a transfer mechanism for Customer Personal Data, the DPA in our Terms describes how we address those transfer requirements.

16. Changes To This Policy

We may update this Privacy Policy from time to time. The updated version will be posted with a new effective date. If changes are material, we may provide additional notice through the website, dashboard, email, or other reasonable means. Your continued use of the service after an updated policy takes effect means the updated policy applies to your use of the service.

17. Contact

Questions or requests about this Privacy Policy may be sent to:

Handled Calls LLC

901 Farnam Street, Apt 360

Omaha, NE 68102

Email: hello@handledcalls.com

Phone: 712-308-6719