Privacy Policy

Our role

For information about a business's account, we decide how it's used. For information about callers, we act on behalf of the business they called: the business decides why that information is collected, and we process it to answer and fulfil their calls. Questions about a particular business's use of your information are best directed to that business — we will help them respond.

Information we collect

From businesses:

• Account details: the email address and password used to sign in (passwords are stored only as a secure hash).
• Business settings: name, greeting, hours, timezone, payment and delivery preferences, rules, and the transfer phone number.
• Store connection: the store address and WooCommerce API keys, which we encrypt before storing.
• Store data we sync to answer calls: products, prices, stock, delivery zones, and location hours.

From callers:

• The phone number you call from (caller ID).
• What you tell the call taker to place an order: your name, delivery address, a callback number, the items you order, and how you'll pay. We never collect card numbers on calls.
• A recording and transcript of the call, an automatic summary, and its outcome (for example, an order placed or a transfer to staff). Callers are told at the start of every call that it is recorded.
• If the business asks, whether you'd like its marketing texts — your answer, the question you were asked, and when — kept as proof of consent for the business, along with any later request to stop.

How we use it

• To answer calls, look up products and delivery fees, and place orders into the business's store.
• To recognise returning callers by phone number, so they can confirm a saved address instead of repeating it.
• To show businesses their calls, transcripts, and outcomes, and to resolve problems with orders.
• To operate, secure, and improve the service, and to contact businesses about their account.

We do not sell personal information, and we don't use callers' information for advertising.

Who processes it

We use these service providers, under agreements that limit their use of the data to providing their service to us:

• Supabase — our database and sign-in.
• Vercel — hosting for our website and application.
• Vapi — runs the voice conversation, including speech recognition, voice, and call recording; it uses AI model providers such as OpenAI to understand and respond.
• Twilio — phone numbers and call delivery.
• Anthropic — prepares product names for voice ordering. It receives store catalog data only, not caller information.
• Resend — sends account emails such as invitations.

Orders are also sent to the business's own online store (for example, WooCommerce), which is operated by that business.

Where it's stored

Our service providers store and process information in the United States, so it may be accessible to authorities there under United States law. We use providers that protect it with encryption in transit and access controls.

How long we keep it

We keep business account information and call records while the business's account is active, so the business can review its calls and orders. When a business closes its account, we delete its data within 90 days, unless we must keep something longer to meet a legal obligation.

Security

Information is encrypted in transit. Store API keys are additionally encrypted at rest, and access to business data is limited to that business's signed-in members and to our staff who need it to run the service.

Your choices and rights

You can ask to access or correct personal information we hold about you, or ask us to delete it, by emailing support@buildmeapp.io. If you're a caller, you can also ask the business you called. If you don't want a call recorded, you can hang up and contact the business another way. If you're not satisfied with our response, you can contact the Office of the Privacy Commissioner of Canada.

Contact

Questions about this policy or your information: support@buildmeapp.io. We'll update this page when our practices change, and note the date at the top. See also our Terms of Service.