1. Introduction
Claudessa, operated by Daemon Ventures Holdings, Inc. ("we," "our," or "us"), provides an AI-powered phone receptionist service designed for home services businesses, including HVAC, plumbing, electrical, and general contracting companies. This Privacy Policy describes how we collect, use, store, and protect your personal information when you use our website at claudessa.com and our phone receptionist service (collectively, the "Service").
By using our Service, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not use the Service.
2. Information We Collect
2.1 Account and Business Information
When you sign up for Claudessa, we collect:
- Your name, email address, and phone number
- Business name, business type, and service area
- Business hours and scheduling preferences
- Billing and payment information (processed securely by our payment provider)
2.2 Voice Onboarding Data
During voice onboarding, our AI calls you to learn about your business. This conversation is recorded and transcribed to build your custom knowledge base. We collect:
- Audio recordings of the onboarding call
- Transcripts generated from the onboarding conversation
- Business details you share during the call (services offered, pricing, FAQs, service policies)
2.3 Call Data
When Claudessa answers calls on your behalf, we collect:
- Inbound caller phone number and caller ID information
- Audio recordings of calls handled by Claudessa
- AI-generated transcripts and call summaries
- Call metadata (date, time, duration, call outcome)
- Information callers voluntarily share (name, contact details, service requests, property details)
2.4 Website Usage Data
We use analytics and advertising tools on this website to understand how visitors find us and use the site, and to show our ads to people who have already visited. Some of these tools set cookies in your browser and share the fact of your visit with third-party advertising platforms, which use it to build an audience we can advertise to later. Section 6 lists every cookie and browser storage item our own code sets, what each is for, and how to switch it off. It also lists the ones we have seen our analytics and advertising tools set. Those companies decide what their tools keep, and that can change.
The advertising and product-analytics tools above run on our public marketing pages only — they are not present in your customer dashboard. Other services do reach signed-in pages as well: Fathom Analytics, which counts page views and sets no cookies; Cloudflare, which delivers and protects the site and measures how fast pages load; and Google Fonts, which supplies the typefaces the site is set in. Section 5 describes what each of them receives, and which pages each one runs on.
None of the advertising, analytics or font services above receive your call data — recordings, transcripts, caller details, or call summaries. Cloudflare is the exception: because it sits in front of this site and our call-handling service, it carries call data as it passes through, and Section 5 lists what it carries. Call data is covered in Sections 2.3 and 4, and it is never used for advertising.
If you use the chat on our website — on our demo pages and in the chat box on our homepage, features and free-trial pages — what you type is sent to our server and on to Google's Gemini AI, which writes the replies. Section 5 lists this under Google Cloud / Gemini AI, and Section 6 explains how your browser keeps the conversation.
2.5 Missed-Call Check and Weekly Email
If you request the missed-call check or join our weekly email, we collect your email address, the page and campaign that led you to the form, and records of your request, confirmation, email-provider acceptance or failure, and unsubscribe choice. This list is separate from a customer account, demo lead, or caller record.
3. How We Use Your Information
We use the information we collect to:
- Provide the Service: Answer your business calls with an AI receptionist trained on your specific business information
- Build your knowledge base: Use onboarding conversations to create a custom AI profile that accurately represents your business
- Deliver call reports: Provide you with summaries and details of the calls we handle for you
- Improve call quality: Analyze call interactions to improve AI accuracy, response quality, and caller satisfaction
- Process payments: Bill you for your subscription and manage your account
- Communicate with you: Send service notifications, account updates, and respond to support requests
- Call and text you about your account: Use the phone number you give us to call you about setup and to send the texts described in our Terms. We don't sell your phone number, and we don't share it with anyone for their own marketing
- Deliver requested email resources: Send the missed-call check you asked for and, only after you confirm, one practical missed-call email a week. Requesting the resource does not start a sales call, and you can unsubscribe at any time
- Maintain security: Detect and prevent fraud, abuse, or unauthorized access
- Comply with law: Meet legal obligations, respond to legal process, or enforce our terms
We do not sell your personal information or your callers' information to third parties. We do not use call recordings or transcripts to train general-purpose AI models.
4. Data Retention
This schedule covers the copies of your data that we keep. The emails and texts we send you are yours, and the providers in Section 5 hold what they receive under their own privacy policies, linked there.
| Data Type | Retention Period |
|---|---|
| Account information | Kept during your subscription and after it ends. We don't delete it on a schedule today. |
| Call recordings | 90 days, then automatically deleted |
| Call transcripts and summaries | Kept during your subscription and after it ends. We don't delete these on a schedule today. |
| Knowledge base data | Kept during your subscription and after it ends. We don't delete it on a schedule today. |
| Billing records | As required by law (typically 7 years) |
| Onboarding recordings | 30 days after knowledge base is built |
| Unconfirmed missed-call check requests | 30 days, then automatically deleted |
| Confirmed weekly-email records | While subscribed; unsubscribe, suppression, and consent-history records are retained only to honor your choice and document the consent history |
| Do-not-contact list (phone numbers and email addresses) | Kept after we delete the rest of your data, because deleting it would mean we could contact you again. A number or address goes on this list if you ask us not to contact you, or if we decide not to contact it (for example, a number someone else typed into one of our forms). We use the list only to avoid contacting those numbers and addresses. |
You may request early deletion of your data at any time by contacting us. Upon account cancellation, we keep or delete each kind of data as the table above shows, unless we are required by law to retain it longer.
5. Third-Party Services
We use third-party providers to run our Service and our business. For each provider below, we set out what it receives or holds and why.
Hetzner
Purpose: Hosts the servers our Service runs on.
Data shared: Our database runs on Hetzner's servers, so Hetzner's systems store what it holds: your account details and, for each call, the transcript, the summary, and the caller's details, such as name and phone number. We back that database up every night on the same servers, and we keep snapshots of the servers with Hetzner.
Privacy policy: hetzner.com/legal/privacy-policy
GitHub (Microsoft)
Purpose: Stores the private repository that holds our software and the internal working files we use to run, review, and improve the Service.
Data shared: Some of our internal working files in the repository, or earlier versions of them that it keeps, contain callers’ phone numbers and passages from call transcripts. They come from our work reviewing calls and improving the receptionist.
Privacy policy: GitHub General Privacy Statement
Twilio
Purpose: Telephony infrastructure for receiving and routing phone calls, and for sending the text messages we send you about calls.
Data shared: Phone numbers, call audio streams, call recordings (we keep them with Twilio), call metadata, and the text of any call alerts we text you, which carries the caller’s name and phone number and their message or a summary of the call.
Privacy policy: twilio.com/legal/privacy
Google Cloud / Gemini AI
Purpose: Real-time voice processing, speech-to-speech AI, and natural language understanding. It also writes the replies in the chat on our website.
Data shared: Call audio streams for real-time processing. After each call, the call recording, to write the transcript, and the transcript, to write the call summary and check the call's quality. Text for knowledge base embeddings. What you type into the chat on our website, with the recent conversation, to write the chat reply.
Note: We process call audio through Google's Gemini AI on a paid API plan.
Privacy policy: cloud.google.com/terms/cloud-privacy-notice
Anthropic
Purpose: The AI tools we use to review calls and improve the receptionist.
Data shared: Call transcripts and call summaries, including the caller details in them, when we review calls.
Privacy policy: anthropic.com/legal/privacy
OpenAI
Purpose: The AI tools we use to review calls and improve the receptionist can also run on OpenAI’s systems.
Data shared: When our call reviews run on OpenAI’s systems, OpenAI may receive call transcripts and call summaries, including the caller details in them.
Privacy policy: openai.com/policies/privacy-policy
Stripe
Purpose: Payment processing and subscription management.
Data shared: Name, email, billing address, payment card details (handled directly by Stripe; we never store card numbers).
Privacy policy: stripe.com/privacy
Resend
Purpose: Delivers the call alerts we email you, the missed-call check, confirmed weekly email, and customer service messages.
Data shared: Recipient email address, message content (in a call alert, the caller’s name and phone number and their message or a summary of the call), and delivery, bounce, and complaint metadata. A provider acceptance means Resend accepted the message for processing; it does not prove inbox delivery or reading.
Privacy policy: resend.com/legal/privacy-policy
Google Workspace
Purpose: Hosts our company email.
Data shared: Our company mailbox keeps a copy of the emails we send you. When one is a call alert, the copy carries the caller’s name and phone number and their message or a summary of the call.
Privacy policy: cloud.google.com/terms/cloud-privacy-notice
Fathom Analytics
Purpose: Privacy-focused website analytics.
Where: Nearly every page of this site, including your customer dashboard. It records that a page was viewed; it does not receive call recordings, transcripts, or caller details.
Data shared: Anonymized page views and referrer data. No personal information is collected or shared, and Fathom sets no cookies.
Privacy policy: usefathom.com/legal/privacy
Meta (Facebook) Pixel
Purpose: Advertising, remarketing, and conversion measurement. Lets us show Claudessa ads on Facebook and Instagram to people who have visited this website, and measure completed demo requests as advertising conversions.
Data shared: The pages you viewed on our website, your IP address, and browser information, tied to a cookie identifier. If you successfully submit a demo request, we also tell Meta that it was completed as an advertising conversion event (Lead, labeled demo_request). We do not send Meta your name, email, phone number, call recordings, transcripts, or any caller information.
Privacy policy: facebook.com/privacy/policy
Google Analytics and Google Ads remarketing
Purpose: Website traffic analytics and remarketing. Google Analytics tells us which public marketing pages visitors use and how they found us. Its advertising features can also make an eligible visit available for Google Ads personalization and remarketing, so Google may show Claudessa ads to that visitor later.
Where: Our public marketing pages and signup. Not in your customer dashboard.
Data shared: The page viewed; the full page URL, including Google ad-click parameters; referrer; IP-derived approximate location; browser and device information; and Google cookie or advertising identifiers. We do not send Google your name, email address, phone number, call recordings, transcripts, caller details, or customer-dashboard data through this website advertising setup. Separately, starting October 16, 2026, if you come to our site from one of our Google ads and then sign up or pay us, we will report that to Google as an ad conversion, sending only Google's ad-click ID, whether it was a sign-up or a payment, a reference number for it, the time and its dollar value (zero for a sign-up) — never your name, email address or phone number, hashed or otherwise. We won't report it if your browser sent a Global Privacy Control signal or you chose “Only necessary cookies”, and we never report a sign-up or payment made before October 16, 2026.
Worth knowing: Where prior consent is required, Google's advertising storage and personalization stay off until you choose them. If your browser sends a Global Privacy Control signal, we treat it as an opt-out and keep Google remarketing off. For other eligible visits, Google may read or write advertising cookies, receive data related to online advertising, and use the visit for personalized advertising and remarketing. Full page URLs and Google ad-click identifiers are not redacted before Google's tag sends them.
Privacy policy: policies.google.com/privacy
OpenAI ad measurement (ChatGPT ads)
Purpose: Ad measurement: it tells us whether our ads in ChatGPT lead to sign-ups and payments.
Data shared: If you sign up or pay us, our server reports it to OpenAI, sending only an event ID, whether it was a sign-up or a payment, the time and a page address on our website — plus OpenAI's ad-click ID when you came to us from one of our ads in ChatGPT. No name, email address or phone number, hashed or otherwise. We won't report it if your browser sent a Global Privacy Control signal or you chose “Only necessary cookies”.
Privacy policy: openai.com/policies/privacy-policy
PostHog
Purpose: Product analytics — how people move through our marketing pages and signup so we can fix what is confusing.
Where: Our public marketing pages and signup. Not in your customer dashboard.
Data shared: Page views, clicks, and device information, tied to a cookie identifier. If you have an account, this can be linked to it.
Privacy policy: posthog.com/privacy
Cloudflare
Purpose: Delivers this website, protects it from abuse, measures how fast pages load, and routes email sent to our addresses. Four functions: the network that serves the site, the "verify you are human" check on our forms (Turnstile), page-load performance measurement, which Cloudflare adds to the page at its network edge, and the routing of email sent to our claudessa.com addresses.
Where: The network and the page-load measurement reach every page of this site, including your customer dashboard. The Turnstile check runs only on pages that carry a form.
Data shared: Your IP address, browser and device information, the address of the page you are on, and page-load timings. Because Cloudflare sits in front of this whole site and in front of our call-handling service, it also carries call data as it passes through: the live audio of each call as it streams between the phone network and the receptionist, the caller's number and the call details the phone network sends us, and the caller names, phone numbers, and call summaries your dashboard shows you. Email sent to a claudessa.com address also passes through Cloudflare on its way to us, so if you reply to a call alert and quote it, Cloudflare carries the caller details in your reply.
Privacy policy: cloudflare.com/privacypolicy
Google Fonts
Purpose: Supplies the typefaces this site is set in.
Where: Nearly every page of this site, including your customer dashboard.
Data shared: Your IP address and browser information, because your browser downloads the font files directly from Google. Nothing else — no page content, no account data, no call data. This is separate from Google Analytics, which is listed above.
Privacy policy: policies.google.com/privacy
We do not sell your personal information, and we do not share call recordings, transcripts, caller details, or any customer account data with advertising services, including the Meta and Google advertising tools listed above, or with data brokers. The sign-up and payment reports described above — to OpenAI, and to Google from October 16, 2026 — are the one exception, and they carry only what those entries list.
We do share website-visit data from this marketing site with Google and Meta, listed above, so we can advertise to people who have already visited us. Under California law this counts as "sharing" for cross-context behavioral advertising — see Section 9 for how to opt out. Section 6 explains how to switch it off in your browser.
7. Data Security
We take the security of your data seriously and implement appropriate technical and organizational measures, including:
- Encryption of data in transit (HTTPS on all connections)
- Call recordings stored with our telephony provider, encrypted at rest, and retrievable only with our account credentials
- Access controls limiting data access to authorized personnel and systems only
- Regular security monitoring and vulnerability assessments
- Secure credential management with isolated access
- Automatic deletion of call recordings after the retention period
No method of transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. If we become aware of a security breach affecting your personal data, we will notify you and relevant authorities as required by applicable law.
8. Your Rights
Depending on your location, you may have the following rights regarding your personal information:
- Access: Request a copy of the personal data we hold about you
- Correction: Request that we correct inaccurate or incomplete data
- Deletion: Request that we delete your personal data
- Portability: Request your data in a structured, machine-readable format
- Restriction: Request that we limit how we process your data
- Objection: Object to our processing of your data in certain circumstances
- Withdrawal of consent: Where processing is based on consent, withdraw that consent at any time
To exercise any of these rights, contact us at support@claudessa.com. We will respond to verified requests within 30 days.
9. California Privacy Rights (CCPA)
If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with additional rights:
- Right to Know: You may request the categories and specific pieces of personal information we have collected about you in the past 12 months
- Right to Delete: You may request deletion of your personal information, subject to certain exceptions
- Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights
- Right to Opt-Out of Sale: We do not sell personal information
- Right to Opt-Out of Sharing: We share marketing-site visit and browser data with Google and Meta for remarketing, which California law treats as "sharing" for cross-context behavioral advertising. You may opt out by turning on Global Privacy Control, using the other browser controls in Section 6, or emailing us.
To submit a CCPA request, or to opt out of sharing, email support@claudessa.com with the subject line "CCPA Request." We may need to verify your identity before processing your request.
10. European Privacy Rights (GDPR)
If you are located in the European Economic Area (EEA) or the United Kingdom, the General Data Protection Regulation (GDPR) provides you with specific data protection rights.
Legal Basis for Processing
We process your personal data under the following legal bases:
- Contract performance: Processing necessary to provide the Service you have subscribed to
- Legitimate interest: Processing necessary for our legitimate business interests, such as improving our Service and preventing fraud
- Consent: Where you have given consent, including for advertising storage and personalized or remarketing uses where applicable law requires it, and for voice onboarding recordings
- Legal obligation: Processing necessary to comply with applicable law
International Data Transfers
Your data may be processed on servers located in the United States. When we transfer data outside the EEA, we ensure appropriate safeguards are in place, including standard contractual clauses approved by the European Commission. You may request a copy of these safeguards by contacting us.
11. Children's Privacy
Claudessa is a business-to-business service designed for use by home services companies. Our Service is not directed at individuals under the age of 18, and we do not knowingly collect personal information from children. If we learn that we have collected information from a child under 18, we will delete it promptly. If you believe a child has provided us with personal information, please contact us at support@claudessa.com.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by email or by posting a notice on our website at least 30 days before the changes take effect. Your continued use of the Service after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. We encourage you to review this page periodically.
Notice: Google advertising cookies take effect October 5, 2026
Starting October 5, 2026, we are turning on Google Ads remarketing on our public marketing pages for visitors who choose to allow advertising cookies, as described in Sections 5 and 6. This lets Google use an eligible visit to show you Claudessa ads on other sites. Nothing about this changes before October 5, 2026. Until that date, Google's advertising storage, user data, and personalization stay off for every visitor and ads-data redaction stays on — even if you have already made a cookie choice; before that date your choice is only recorded, not acted on. We are posting this notice at least 30 days before that date, exactly as the paragraph above promises. Global Privacy Control keeps Google and Meta advertising off for your browser before and after that date, whatever you choose.
Notice: Google sign-up and payment reports take effect October 16, 2026
Starting October 16, 2026, if you come to our site from one of our Google ads and then sign up or pay us, we will report that to Google as an ad conversion, as described in Section 5. Nothing about this changes before October 16, 2026, and a sign-up or payment made before that date is never reported to Google.
13. Contact Us
If you have questions about this Privacy Policy, want to exercise your data rights, or have concerns about how we handle your information, contact us at:
Claudessa (Daemon Ventures Holdings, Inc.)
Mailing address: Daemon Ventures Holdings, Inc., 2810 N Church St STE 90757, Wilmington, DE 19802
We aim to respond to all inquiries within 5 business days.