Privacy Policy

Information we collect

Account data: name, email, business name, trade, and the identifiers our auth provider assigns.

Booking and customer data entered by contractors or submitted by their customers: names, phone numbers, the service requested, appointment times, and notes.

Call transcripts and recordings from the AI receptionist, plus the outcome of the call.

SMS logs: phone numbers, message content, delivery status, and consent records for booking confirmations and reminders, marketing messages, and review requests, including opt-ins and STOP or HELP replies.

Billing data held by our payments provider: customer id, subscription status, and usage totals. We do not store full card numbers.

How we use it

We use this information to run the website, booking, AI receptionist, reviews, and invoicing; to send the messages described in the Terms; to bill the subscription and AI-minute overage; to prevent abuse; and to fix errors. Error reports are scrubbed of customer names, phone numbers, and addresses before they are sent to our error monitor.

Text messages

Providing a phone number does not opt you or your customers into SMS. Only an explicit opt-in is consent to receive transactional SMS from Storefront, and you agree to collect that same explicit opt-in from your own customers before we text them. We record three consent types, matching the product consent log: booking confirmations and reminders (booking confirmations, appointment reminders, and the short acknowledgement after a web booking, only after an explicit opt-in), marketing messages (promotional messages, only after a separate opt-in), and review requests (a request for a review after a completed job, only after an explicit opt-in). Message frequency varies with bookings, reminders, and review requests, and is typically a few messages per appointment. Message and data rates may apply. Reply STOP to opt out and HELP for help. Consent to receive text messages is not a condition of purchase. You are responsible for the consent you collect from your customers and for not texting a number that has opted out.

Call recording

Calls handled by the AI receptionist may be recorded and transcribed, and callers are notified at the start of the call.

Subprocessors

We use subprocessors by category: hosting (the application and database), auth (sign-in and organizations), payments (subscriptions and invoices), telephony (SMS), and AI voice (the receptionist that answers and places calls). They process data only to provide that category of service.

Retention

We keep account, booking, call, SMS, and billing records while the account is open and as needed for those purposes, including records a carrier or tax rule requires. Consent logs are kept so a later opt-out is not forgotten. You may ask us to delete customer data, except for records the law requires us to keep.

Ownership

The contractor owns their customer data. We process it to provide Storefront. We do not sell it.

Privacy requests

To access, correct, or delete personal information, contact us from the email address on the contractor account and use the subject line Privacy request.

Changes

When this policy changes, the version marker and Last updated date on this page change with it.