What we collect, why, and how to get it deleted

Short version: we collect what it takes to answer your phone and manage your Google listing, we do not sell any of it, and we delete it when you leave. Written in plain words because a privacy policy nobody can read protects nobody.

1. Who this covers

Three groups: shop owners who use or ask about the service; callers who ring a shop whose phone we answer, or our demo lines; and visitors to this site.

2. This website

No analytics, no advertising pixels, no cookies, no third-party scripts. The only outside service a link on this site goes to is Stripe’s hosted checkout page, which has its own policy.
Our hosting provider keeps ordinary server logs (IP address, page requested, time) for a short period for security. We do not use them to identify you.
What you type into a form goes to our own server and nowhere else. Each form says exactly what it is for.

3. Shop owners (clients and prospects)

What: business name, your name, email, phone numbers, hours, service area, calendar system, emergency rules, website and Google listing links, the plan you chose, your consent choices with their time stamps, and your billing history (card details stay with Stripe; we never see the full number).

Why: to build and run your receptionist, manage your Google profile, bill you, send your reports, and prove consent if Google or you ever ask. We also keep a copy of every email between us.

Who else sees it: the voice platform that runs the receptionist, Stripe for billing, our email provider for sending reports, and the map-ranking and listing tools used to do the Google work. Each is under a contract that limits them to doing that work. Nobody else. We do not sell, rent or trade client data, and we never use it to train any AI model.

Free-audit requests: business name, trade, address or Maps link, and the email to send it to. Used for one audit email. You are not added to any list.

4. Callers

When you call a shop whose phone we answer, the AI receptionist tells you in its first sentence that it is an AI and that the call may be recorded. The call audio and a transcript are kept so the shop can see what was asked and so we can check the receptionist did its job. The receptionist collects what the shop needs to do the work: your name, callback number, address and what is wrong. If you book a job, one confirmation text goes to the number you called from; reply STOP and no further texts are sent. Your details belong to the shop you called and are handled under its instructions. Demo-line recordings are deleted within 30 days. We do not run voice identification or sentiment analysis on any call.

5. Email

Every email we send carries our physical mailing address and an unsubscribe link, and we honor unsubscribes immediately (the law allows 10 business days; we do not need them). Service emails a client needs to run the service (your forwarding card, your monthly report, a billing receipt) continue while you are a client. We send very little email to people who are not clients, and never to a purchased list.

6. How long we keep it

Client records: for the life of the account plus 3 years, because tax and consent records have to be producible.
Call recordings and transcripts: as set in your client agreement; by default 12 months, deleted on request sooner.
Demo-line recordings: 30 days.
Audit requests and unused intake forms: 90 days, then deleted.
Intake forms where health data was declared: not kept at all.

7. Your choices

Email us to see what we hold about you, to correct it, to have it deleted, or to get a copy. We answer within 2 hours in our support hours and finish deletion requests within 30 days, keeping only what the law or a dispute requires. Callers should ask the shop they called first; if the shop sends you to us, we will help.

8. Security

Access to client data is by invited, named accounts only, removed when you leave. Keys and passwords are never stored in code. We do not hold your Google password, ever. If something goes wrong with your data, you hear from us within 72 hours of us knowing.

9. Children, health data, and where we operate

This is a business service and we do not knowingly collect anything from anyone under 18. We do not accept clients that handle health information (dental, med-spa, clinics) in our first year, and our intake form declines them. We serve businesses in Oklahoma, Texas and Kansas; callers can be anywhere, which is why the recording notice is in every greeting regardless of state.

10. Changes

If this policy changes in a way that matters, clients get an email 14 days before it takes effect. The date below is the date of the current version.

Last updated 2026-10-20. Questions: hello@secondforeman.com, or the mailing address in the footer.