Privacy policy

1. Who this covers

Three kinds of people: our customers and their staff (who have accounts), the people our customers call or text (whose numbers are checked and whose consent or opt-out may be recorded), and visitors to this website.

2. What we collect and why

Customers. Name, company, email, password (stored hashed), API keys (stored hashed), billing details held by Stripe (we never see card numbers), the businesses you add and their FTC registration details, your Retell or Vapi keys (stored encrypted, used only to place calls you ask us to place), your sign-up IP address (kept 90 days to detect duplicate free accounts), and what you do on the dashboard.

People our customers contact. For each check, the telephone number as a keyed hash (HMAC-SHA256 under a secret key we hold), the decision and the reasons, and the time. For consent captured through our snippet or hosted page: the exact wording agreed to, the page, the time, the IP address, the browser, and a copy of the form with the answers removed. For opt-outs: what the person said (trimmed), the channel, and the time. These records exist so that a business can show what it knew before it called; they are the product.

Website visitors. Our website is static and sets no tracking cookies. The help assistant sends your question and the recent turns of the conversation to Anthropic’s API to generate an answer and does not store the conversation; the assistant is rate-limited by IP address. The live demo records the fictional number you enter as a hash and keeps the resulting record, as a real check would.

3. Whose data it is

For the records on a customer’s account, the customer decides what is collected and why; we process it on their instructions. If you are a person a business contacted and you have a question about a record, contact that business; you may also write to us and we will help you reach them. We do not use these records for our own marketing, and we do not build profiles of the people our customers contact.

4. How long we keep it

Records (checks, consents, opt-outs, Call Records) are kept indefinitely, because their purpose is to exist later; a customer may export them at any time and may ask us to delete an account’s records. Sign-up IP addresses are deleted after 90 days. Prepaid balances and billing history are kept as long as tax law requires. Each day’s closing fingerprint of the record chain is published permanently; it is a hash of hashes and contains no personal data.

5. Who else sees it

We use a small number of providers to run the service, each only for what is listed: Fly.io (hosting, in the United States), Cloudflare (this website), Stripe (billing), Anthropic (the website assistant), the public OpenTimestamps calendars (which receive only a hash of each day’s closing fingerprint), and, when you connect them, Retell and Vapi (to place your calls). We do not sell personal data, and we do not share it for advertising. We disclose data when the law requires it, and we will tell you if we are allowed to.

6. Security

Connections are encrypted in transit. Passwords and API keys are stored as hashes; platform keys are stored encrypted; phone numbers are stored as keyed hashes. Records are chained so that any change is detectable, and daily backups are kept. No system is perfectly secure; if we learn of a breach affecting your data we will tell you promptly.

7. Your rights

Customers can see, export and correct their data from the dashboard and can close their account. Anyone can ask us what we hold about them, to correct it, or to delete it, subject to a customer’s need to keep a record they are legally entitled to keep; write to support@callclearance.com and we answer within thirty days. Residents of California, Virginia, Colorado and other states with privacy laws have the rights those laws give them, and we honor them without discrimination.

8. Children, changes, contact

The service is for businesses and is not directed at children. We will post changes to this policy here with a new date, and announce material changes to customers by email. Questions: support@callclearance.com. Call Clearance LLC is a United States company.