Privacy Policy
Effective October 1, 2026
This policy explains what information Crestpoint Ventures LLC ("CallsIn", "we", "us") collects, how we use it and the choices you have. It covers our website, our dashboard, and the calls and text messages we handle for the local businesses that use our service.
The short version: we use your information to answer calls, send texts and book appointments. We don't sell it. We never share your mobile number or text message consent with third parties or affiliates for their marketing.
Who this covers
- Business customers: the businesses that sign up for CallsIn and the people who log in to their dashboards.
- Callers and texters: people who call or text a business that uses CallsIn. For them we act as a service provider for that business, and the business's own privacy policy also applies.
- Website visitors: people who visit this site or fill out our demo form.
Information we collect
- Contact details: name, phone number, email, business name and address you give us.
- Call information: the calling number, time and length of the call, caller ID and carrier verification results used to spot spam.
- Call transcripts and summaries: when the AI receptionist answers a call, we keep a transcript and a short summary so the business can see what was said. Every call the AI answers starts with a short notice that the call may be transcribed. In healthcare mode (see below), transcripts aren't kept.
- Call recordings: audio is kept only when the business has turned recording on. Then the notice at the start of the call says it may be recorded. Calls transferred to the business owner, and the owner's own calls, aren't recorded.
- Notes about repeat callers: the AI keeps short notes about people who have contacted the business before, like their name, address and past jobs, so it can help them next time.
- Text messages: the content of texts sent to and from a business's CallsIn number, and whether a person has opted out or opted back in.
- Appointment details: the service requested, address, and date and time booked.
- Payments: businesses pay for CallsIn through Stripe. If a business takes card payments on its own invoices, its customers pay through Stripe Connect. Card numbers go to Stripe, and we see things like the amount and whether it was paid.
- Account and usage data: login email, settings, and basic logs like IP address and pages visited in the dashboard, used for security.
- Website analytics: on our marketing website (not the dashboard), Google Analytics uses cookies to count visits and see which pages and buttons people use, like how many people start a free trial. It doesn't receive what you type into forms, and we don't use it for advertising. You can opt out with Google's opt-out browser add-on.
How we use it
- To answer calls, reply to texts, book and confirm appointments, and send reminders and review requests for the business you contacted. Reminders and review requests only go out between 8 AM and 8 PM, the business's local time.
- To text only these people for a business: people who called or texted it, people who booked through its booking page, and existing customers the business added or imported after confirming they gave the business their number and agreed to get texts.
- To show the business its calls, messages and bookings in its dashboard.
- To reply to demo requests and support questions, and to run and bill business accounts.
- To block spam and abuse and keep the service secure.
- To follow the law and carrier rules, including honoring opt-outs.
We do not use callers' information to market our own products to them, and we do not use it to build profiles for advertising.
AI processing
Our AI receptionist and text assistant use AI models from third-party providers to understand what a caller needs, write replies, and make call summaries and tags. The call or message content is sent to these providers only to produce a response, and they handle it under their data protection terms with us. We don't sell this content or use it for advertising.
The AI greets callers and says it's the business's virtual assistant, and the business can't remove that part. If someone asks if it's a real person, it says honestly that it's an AI assistant. AI text replies work the same way.
Healthcare businesses
Dental and medical businesses that sign up get a stricter healthcare mode automatically. In this mode, call transcripts aren't kept, the AI only schedules appointments and takes messages, and it doesn't give medical advice. We also log who opens the business's records.
Signing in with Google
If you sign up or log in with Google, Google shares your name, email address and a Google account ID with us. We use them only to create your account and log you in. We never get your Google password, and signing in with Google doesn't give us access to your Gmail, contacts, files or calendar. We don't share this information or use it for advertising. You can disconnect Google anytime under Settings, Login and security in your dashboard, or from the security page of your Google account.
If a business shares its Google Calendar with CallsIn, we read its busy times and add booked appointments to it, only to schedule that business's appointments. Our use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.
Text messaging and your mobile number
We do not sell or share your SMS opt-in data or personal information with third parties for marketing purposes.
No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.
The first text a business sends you through CallsIn always includes the business name and "Reply STOP to opt out." You can stop texts at any time by replying STOP, and that stops all texts from that business. We keep your opt-out even if the business deletes your contact. Reply START to opt back in. Reply HELP for help. See our SMS Terms for details.
Who we share it with
We don't sell or rent personal information. We share it only with:
- The business you contacted, which sees your calls, messages and bookings in its dashboard.
- Service providers that help us run CallsIn. They may use the data only to provide their service to us:
- Twilio, for phone calls and text messages
- Vapi, for AI voice calls
- Deepgram, for turning speech into text (through Vapi)
- ElevenLabs, for AI voices
- Anthropic, for the AI that writes text replies, call summaries and tags
- Google, for signing in with Google and for Google Calendar, and Google Analytics for website visit statistics
- Stripe, for CallsIn billing and for a business's own invoice payments through Stripe Connect
- Supabase, for database hosting
- Render, for hosting
- Our email provider, for account and billing emails
- Systems the business connects, if it sets up webhooks. Webhooks send call and text details, including transcripts and recording links, to the business's own systems. The business is responsible for those systems and what happens to the data there.
- Legal reasons, when required by law or to protect people's safety or our rights.
- A business sale, if CallsIn is merged or sold, under the same protections described here.
How long we keep it
We keep call, message and booking records while the business's account is open so they can see their history. A business can ask us to set a shorter period, and then call details and message text are deleted automatically after that.
| Type of data | How long we keep it |
|---|---|
| Business account data (login, settings) | While the account is open. Deleted within 90 days after the account closes. |
| Contacts, text messages, calls and bookings | While the account is open, unless the business deletes them sooner. Deleted within 90 days after the account closes. |
| Call transcripts and summaries | Same as calls. In healthcare mode, transcripts aren't kept. |
| Call recordings | Only kept if the business turns recording on. Then the same as calls. When we delete a recording, we also delete it from Twilio and Vapi. |
| Opt-outs (STOP) | Kept even if the business deletes the contact, so we keep honoring them. |
| Billing records | As long as tax law requires. |
| Security logs | As long as we need them to keep the service secure, and deleted with the account's other data unless we need them to look into a problem or the law requires us to keep them. |
When a business deletes a contact, that contact's messages and call transcripts, recordings and summaries are deleted too. When a business closes its CallsIn account, its data (contacts, messages, calls, recordings and transcripts) is deleted within 90 days after the account closes, except what we must keep by law.
Security
Data is encrypted in transit, passwords are stored as salted hashes, and dashboard access is limited to the business and our team. For businesses in healthcare mode, we also log who opens their records. No system is perfectly secure, so please tell us right away if you think something is wrong.
Your choices
- Stop texts: reply STOP to any message. Reply START to opt back in.
- Access or delete: email us and we'll help you see or delete your information. If you were a caller of one of our business customers, we may pass your request to that business.
- California and other state rights: depending on where you live, you may have extra rights to know, correct or delete your information. We don't sell or share personal information for targeted advertising.
Children
CallsIn is for businesses and is not directed to children under 13. We don't knowingly collect information from them.
Changes
If we change this policy we'll update the date at the top. Big changes will be posted on this page before they take effect.
Contact us
Crestpoint Ventures LLC
1908 Thomes Ave STE 12444
Cheyenne, WY 82001
Email: support@trycallsin.com