Privacy Policy

1. Who We Are and What This Covers

Alex Bland AI Agency (“we,” “us,” or “our”) is a sole proprietorship based in Oregon, United States. We provide an AI-powered virtual receptionist and related communication tools (the “Service”) to businesses (each, a “Client”).

This policy applies to two groups of people:

• Clients — the businesses that create an account and subscribe to our Service.
• Callers and contacts — the people who call, text, or are contacted by a Client's business and whose communications are handled by our AI on the Client's behalf.

For caller and contact data, the Client is the “controller” of that information and we act as a “processor” on their behalf. See Section 10 for what that means.

2. Information We Collect

Account information. When a Client signs up, we collect a name, email address, password (stored only in hashed form), business name, business phone number, business hours, and similar details needed to configure the Service.

Call recordings and transcripts. When our AI answers or places a call for a Client, we may record the audio and generate a written transcript so the Client can review what was discussed.

Caller and contact information. Names, phone numbers, message contents, appointment details, and call history of the people who interact with a Client's business.

SMS / text messages. The content of text messages sent and received through the Service, along with consent and opt-out status.

Payment information. Subscriptions are billed through Stripe. Card details are entered directly with Stripe and tokenized — we never receive or store full card numbers.

Usage and analytics data. Call volumes, lead activity, feature usage, and similar metrics, plus standard log data such as IP address, browser type, and timestamps.

Cookies. We use cookies that are necessary to keep you signed in and to operate the dashboard. We do not use cookies to sell your data or build advertising profiles.

3. How and Why We Use Information

We use the information above to:

• Operate the AI receptionist and answer, route, and follow up on calls and messages.
• Book appointments and send confirmations, reminders, and booking links.
• Provide Clients with their call logs, transcripts, leads, and analytics.
• Process subscription payments and prevent fraud.
• Provide support, send service-related notices, and improve reliability.
• Comply with legal obligations and enforce our Terms of Service.

We do not sell your personal information, and we do not share it for third-party advertising or marketing.

4. Service Providers We Share Data With

We rely on a small set of trusted vendors to run the Service. Each receives only the data needed for its function and is bound to protect it. These include:

• Supabase — database and account authentication.
• Vercel — website and dashboard hosting.
• Cloudflare — hosting for our voice and messaging systems.
• Stripe — payment processing (card data is tokenized).
• Telnyx — telephone call and SMS delivery.
• Deepgram — speech-to-text and text-to-speech.
• Anthropic (Claude) — the AI that powers conversations.
• Google — AI features, business lookup (Places/Maps), calendar scheduling, and sign-in.
• Resend — transactional email delivery.

We may also disclose information if required by law, to respond to valid legal process, or to protect the rights, safety, and security of our users or the public.

5. SMS and Text Messaging

Alex Bland AI Agency sends SMS text messages — such as appointment reminders, booking links, and replies to missed calls — only to people who provide their mobile number and consent to be contacted. Consent is not a condition of any purchase. Message frequency varies; message and data rates may apply. Reply STOP to opt out at any time, or HELP for help, or contact alexander@alexblandaiagency.com.

No mobile information will be shared with or sold to third parties or affiliates for marketing or promotional purposes. Text-messaging originator opt-in data and consent are never shared with any third party.

6. How Long We Keep Data

We keep personal information for as long as it is needed to provide the Service and for a limited period afterward, unless you ask us to delete it sooner or the law requires us to keep it longer.

• Call recordings and transcripts are retained for a limited window so Clients can review recent calls. Higher service tiers may retain recordings longer.
• Caller, lead, and account data is retained for the duration of the Client's subscription.
• Analytics may be kept in aggregated or limited form to measure service performance over time.

When a Client closes their account, we begin deleting their data after a short grace period (currently 30 days), after which it is permanently removed from our active systems.

7. Your Rights and Choices

You can request to access, correct, or delete personal information. How to exercise these rights:

• Delete your account and all its data. Clients can request account deletion from the dashboard. This cancels billing, releases any assigned phone number, and removes the account and its associated call history, leads, and recordings after a 30-day grace period.
• Remove a specific caller's information. If you are a caller, or a Client acting on a caller's request, email us at alexander@alexblandaiagency.com and we will locate and delete that individual's data.
• Opt out of texts. Reply STOP to any message at any time.

Because callers' data belongs to the Client who serves them, we may direct a caller's request to the relevant Client or act on their instructions when fulfilling it.

8. Security

Data is encrypted in transit using TLS and at rest using AES-256. Each Client's data is logically isolated from other Clients. Access to production systems is limited to what is necessary to operate the Service. No method of transmission or storage is perfectly secure, but we work to protect your information using industry-standard safeguards.

9. Children's Privacy

The Service is intended for businesses and is not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child's information has been collected, contact us at alexander@alexblandaiagency.com and we will delete it.

10. Our Role: Controller vs. Processor

For our Clients' own account information, we act as the data controller. For the information of callers and contacts that we handle on a Client's behalf, the Client is the controller and we are a processor — we only use that data to provide the Service to that Client and according to their instructions. Clients are responsible for having a lawful basis to collect their callers' information and, where required, for disclosing that calls may be recorded and obtaining consent to contact callers by text.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above. Material changes will be communicated through the Service or by email.

12. Contact Us

Questions, requests, or privacy concerns? Email us at alexander@alexblandaiagency.com.

See also our Terms of Service.