This Privacy Policy explains how Valitura, LLC ("we", "us") handles personal information when you use our Service (ReCall). Your trust matters — we treat your customer data as a fiduciary responsibility, not a growth hack.

1. What we collect

Account data

Name, email, business name, phone number
Password hash (bcrypt — we never see your raw password)
Google account identifier if you sign in with Google (we never receive your Google password)

Business + customer data

Your business address, service area, average job value
Phone numbers of callers who reach your ReCall number, plus SMS/voicemail content
AI-generated triage summaries and lead metadata (job type, urgency, estimated value)
Booking times and calendar events created via ReCall

Payment data

Credit card details are stored and processed by Stripe. We store only a Stripe customer ID plus subscription status — we never see or store your card number.

Usage data

Login timestamps, IP address, user agent
Feature usage (API endpoints hit, page views) for reliability and abuse prevention

2. How we use it

To deliver the Service: routing calls, sending SMS, running AI triage, syncing calendars, processing payments
To secure your account: rate limiting, fraud detection, incident response
To communicate with you: transactional emails (billing, security), and, if you opt in, product updates
To improve the Service: aggregate analytics that don't identify individual customers

What we don't do: we don't sell your data, we don't share your customer list with advertisers, and we don't train third-party AI models on your data outside the transactional AI features you actively use (Claude triage, Whisper voicemail).

2a. SMS Messaging Policy (A2P 10DLC compliance)

No sharing of mobile information or SMS consent. Mobile phone numbers, opt-in consent, and SMS text-messaging originator opt-in data will not be shared with any third parties or affiliates for marketing or promotional purposes. Information sharing with sub-processors listed in Section 3 is limited exclusively to delivering the SMS service you have requested (Twilio for transport, Anthropic Claude for AI-triage of the text you send us).

How consumers opt in to SMS from a ReCall customer

End-users opt in by voluntarily dialing a phone number belonging to a service business (plumber, electrician, HVAC, locksmith, roofer, or landscaper) that uses ReCall as its answering service. When the business does not answer the phone call, ReCall automatically sends a single follow-up SMS to the same phone number the consumer dialed from. By initiating the call, the consumer consents to receive this automated follow-up SMS to continue the conversation they started. ReCall never sends SMS to a phone number that has not first called a ReCall-enabled business. Opt-out via STOP/CANCEL/END/QUIT/UNSUBSCRIBE keywords is enforced by Twilio at the carrier level and honored immediately. HELP replies return support contact info. Frequency: variable, typically 1–5 messages per service inquiry.

Businesses using ReCall are contractually required (see our Terms) to disclose this SMS follow-up practice at every place they publish their phone number (Google Business Profile, website, Yelp, etc.). Businesses may also add an initial greeting SMS template such as: "By replying you consent to receive follow-up messages from [Business Name]. Message and data rates may apply. Reply STOP to unsubscribe."

Sample messages consumers receive

Initial missed-call reply: "Hi Sarah — this is Alex from ABC Plumbing. Sorry we missed your call! What's going on? Reply here and we'll get you booked. Reply STOP to opt out."
Booking confirmation: "ABC Plumbing: You're booked for Tuesday, Feb 18 at 2:30 PM. We'll text 30 min before we arrive. Reply RESCHEDULE to change or STOP to opt out."

Opt-out

Consumers can revoke consent at any time by replying STOP, CANCEL,END, QUIT, or UNSUBSCRIBE to any ReCall-sent message. Opt-out is enforced by Twilio at the carrier level and is honored immediately and permanently for that number/business pair. Consumers may also text HELPto receive support contact information. Standard message and data rates may apply.

Frequency: variable, based on the consumer's own conversation cadence with the business. Typically 1–5 messages per service inquiry.

3. Sub-processors we rely on

Twilio — voice + SMS delivery
Google — Calendar API + optional OAuth sign-in
Anthropic — Claude 4.5 for lead triage (transient — Anthropic does not retain your data for training)
OpenAI — Whisper for voicemail transcription (transient)
Stripe — subscription billing
Resend — transactional email
MongoDB Atlas — encrypted data storage

4. Data retention

Account data: kept while your subscription is active. Deleted within 90 days after final account closure, or immediately on written request (except records we're legally required to keep).
Lead and SMS data: kept for as long as your account is active. You can delete individual leads and messages anytime from the Leads dashboard.
Payment records: kept for 7 years to comply with tax/accounting rules.

5. Your rights

Depending on where you live, you may have the right to:

Access the personal data we hold about you
Correct inaccurate data
Delete your data (subject to legal retention requirements)
Export your data in a portable format
Object to or restrict certain processing

Email support@recall.business to exercise any of these rights. We respond within 30 days.

California (CCPA/CPRA)

We don't sell or "share" personal information as defined by California law. California residents can request disclosure of the categories of personal information we collect, and can request deletion, at the email above.

EEA / UK (GDPR)

We process personal data under the legal basis of contract performance (delivering the Service you signed up for) and legitimate interest (security, fraud prevention). If you're in the EEA or UK, you can lodge a complaint with your local data protection authority.

6. Security

All traffic is encrypted in transit (TLS 1.2+). Data at rest is encrypted at the database layer. Passwords are hashed with bcrypt. We use least-privilege access controls and log all administrative actions. Please still choose a strong, unique password.

7. Children

ReCall is a B2B product for adult tradespeople. We don't knowingly collect data from anyone under 18.

8. Cookies

We use only strictly-necessary cookies (auth session, CSRF protection). No advertising or cross-site tracking cookies. No third-party analytics that identify individual users.

9. Changes to this policy

We'll announce material changes by email or in-app at least 14 days before they take effect. The "Last updated" date at the top of this page reflects the most recent revision.

10. Contact

Data questions: support@recall.business. Mailing Address: Valitura, LLC 1065 SW 8th Street Miami, FL 33130 USA