1. Introduction
Claudessa, operated by Daemon Ventures LLC ("we," "our," or "us"), provides an AI-powered phone receptionist service designed for home services businesses, including HVAC, plumbing, electrical, and general contracting companies. This Privacy Policy describes how we collect, use, store, and protect your personal information when you use our website at claudessa.com and our phone receptionist service (collectively, the "Service").
By using our Service, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not use the Service.
2. Information We Collect
2.1 Account and Business Information
When you sign up for Claudessa, we collect:
- Your name, email address, and phone number
- Business name, business type, and service area
- Business hours and scheduling preferences
- Billing and payment information (processed securely by our payment provider)
2.2 Voice Onboarding Data
During voice onboarding, our AI calls you to learn about your business. This conversation is recorded and transcribed to build your custom knowledge base. We collect:
- Audio recordings of the onboarding call
- Transcripts generated from the onboarding conversation
- Business details you share during the call (services offered, pricing, FAQs, service policies)
2.3 Call Data
When Claudessa answers calls on your behalf, we collect:
- Inbound caller phone number and caller ID information
- Audio recordings of calls handled by Claudessa
- AI-generated transcripts and call summaries
- Call metadata (date, time, duration, call outcome)
- Information callers voluntarily share (name, contact details, service requests, property details)
2.4 Website Usage Data
We use privacy-focused analytics (see Section 6) to understand how visitors interact with our website. We do not use cookies and do not collect personally identifiable information through our analytics.
3. How We Use Your Information
We use the information we collect to:
- Provide the Service: Answer your business calls with an AI receptionist trained on your specific business information
- Build your knowledge base: Use onboarding conversations to create a custom AI profile that accurately represents your business
- Deliver call reports: Provide you with summaries, transcripts, and actionable insights from each call
- Improve call quality: Analyze call interactions to improve AI accuracy, response quality, and caller satisfaction
- Process payments: Bill you for your subscription and manage your account
- Communicate with you: Send service notifications, account updates, and respond to support requests
- Maintain security: Detect and prevent fraud, abuse, or unauthorized access
- Comply with law: Meet legal obligations, respond to legal process, or enforce our terms
We do not sell your personal information or your callers' information to third parties. We do not use call recordings or transcripts to train general-purpose AI models. Your business data is used solely to power your Claudessa receptionist.
4. Data Retention
We retain your data according to the following schedule:
| Data Type | Retention Period |
|---|---|
| Account information | Duration of your subscription + 90 days after cancellation |
| Call recordings | 90 days, then automatically deleted |
| Call transcripts and summaries | Duration of your subscription + 90 days |
| Knowledge base data | Duration of your subscription + 30 days |
| Billing records | As required by law (typically 7 years) |
| Onboarding recordings | 30 days after knowledge base is built |
You may request early deletion of your data at any time by contacting us. Upon account cancellation, we will delete or anonymize your data within the retention periods listed above, unless we are required by law to retain it longer.
5. Third-Party Services
We use trusted third-party providers to deliver our Service. Each provider receives only the minimum data necessary to perform their function:
Twilio
Purpose: Telephony infrastructure for receiving and routing phone calls.
Data shared: Phone numbers, call audio streams, call metadata.
Privacy policy: twilio.com/legal/privacy
Google Cloud / Gemini AI
Purpose: Real-time voice processing, speech-to-speech AI, and natural language understanding.
Data shared: Call audio streams for real-time processing, text for knowledge base embeddings.
Note: Audio is processed in real time and is not retained by Google for model training under our enterprise agreement.
Privacy policy: cloud.google.com/terms/cloud-privacy-notice
Lemon Squeezy
Purpose: Payment processing and subscription management (Merchant of Record).
Data shared: Name, email, billing address, payment card details (handled directly by Lemon Squeezy; we never store card numbers).
Privacy policy: lemonsqueezy.com/privacy
Fathom Analytics
Purpose: Privacy-focused website analytics.
Data shared: Anonymized page views and referrer data. No personal information is collected or shared.
Privacy policy: usefathom.com/legal/privacy
We do not share your data with any third parties for advertising, marketing, or data brokering purposes.
7. Data Security
We take the security of your data seriously and implement appropriate technical and organizational measures, including:
- Encryption of data in transit using TLS 1.2+ (HTTPS on all connections)
- Encryption of call recordings and sensitive data at rest
- Access controls limiting data access to authorized personnel and systems only
- Regular security monitoring and vulnerability assessments
- Secure credential management with isolated access
- Automatic deletion of call recordings after the retention period
No method of transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. If we become aware of a security breach affecting your personal data, we will notify you and relevant authorities as required by applicable law.
8. Your Rights
Depending on your location, you may have the following rights regarding your personal information:
- Access: Request a copy of the personal data we hold about you
- Correction: Request that we correct inaccurate or incomplete data
- Deletion: Request that we delete your personal data
- Portability: Request your data in a structured, machine-readable format
- Restriction: Request that we limit how we process your data
- Objection: Object to our processing of your data in certain circumstances
- Withdrawal of consent: Where processing is based on consent, withdraw that consent at any time
To exercise any of these rights, contact us at [email protected]. We will respond to verified requests within 30 days.
9. California Privacy Rights (CCPA)
If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with additional rights:
- Right to Know: You may request the categories and specific pieces of personal information we have collected about you in the past 12 months
- Right to Delete: You may request deletion of your personal information, subject to certain exceptions
- Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights
- Right to Opt-Out of Sale: We do not sell personal information, so no opt-out is necessary
To submit a CCPA request, email [email protected] with the subject line "CCPA Request." We may need to verify your identity before processing your request.
10. European Privacy Rights (GDPR)
If you are located in the European Economic Area (EEA) or the United Kingdom, the General Data Protection Regulation (GDPR) provides you with specific data protection rights.
Legal Basis for Processing
We process your personal data under the following legal bases:
- Contract performance: Processing necessary to provide the Service you have subscribed to
- Legitimate interest: Processing necessary for our legitimate business interests, such as improving our Service and preventing fraud
- Consent: Where you have given explicit consent (e.g., for voice onboarding recordings)
- Legal obligation: Processing necessary to comply with applicable law
International Data Transfers
Your data may be processed on servers located in the United States. When we transfer data outside the EEA, we ensure appropriate safeguards are in place, including standard contractual clauses approved by the European Commission. You may request a copy of these safeguards by contacting us.
11. Children's Privacy
Claudessa is a business-to-business service designed for use by home services companies. Our Service is not directed at individuals under the age of 18, and we do not knowingly collect personal information from children. If we learn that we have collected information from a child under 18, we will delete it promptly. If you believe a child has provided us with personal information, please contact us at [email protected].
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by email or by posting a notice on our website at least 30 days before the changes take effect. Your continued use of the Service after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. We encourage you to review this page periodically.
13. Contact Us
If you have questions about this Privacy Policy, want to exercise your data rights, or have concerns about how we handle your information, contact us at:
We aim to respond to all inquiries within 5 business days.