Privacy Policy

This Privacy Policy explains how Innotech Development Group LLC (“CallKeep,” “we,” “us,” or “our”) collects, uses, discloses, and protects information in connection with the CallKeep service, our website at callkeep.ai, and the text-message and voice communications sent through the service (collectively, the “Service”). It applies both to the businesses that subscribe to CallKeep and to the individuals who call or text those businesses through the Service. By using the Service, you acknowledge the practices described here.

1. Who we are and how to reach us

The Service is operated by Innotech Development Group LLC. For any privacy question or request, contact us at hello@callkeep.ai. If you are a caller, the business you contacted is also a controller of your information, and you may contact that business directly.

2. The two groups this policy covers

Business customers are the service businesses that subscribe to CallKeep and configure it to respond to their missed calls. Callers (also “end users”) are the individuals who place a phone call to a CallKeep business and may then exchange text messages with that business through the Service. Where a business uses CallKeep to process caller information, the business is the controller of that information and CallKeep acts as its service provider or processor.

3. Information we collect

Information business customers provide

• Account details: business name, contact name, email address, and password credentials.
• Business profile: display name, phone numbers, business address, timezone, hours of operation, services offered, drop-off and scheduling rules, and message branding.
• Messaging-registration details required by mobile carriers, such as legal business name, Employer Identification Number (EIN), and authorized representative contact information.
• Notification preferences, such as the cell number and email address where lead alerts are sent.
• Billing information. We do not collect or store full payment card numbers; payments are processed by our payment processor on its own hosted pages, and we receive only a token and limited transaction details.

Information we collect from callers

• The phone number you called from, and the date, time, and status of the call (for example, answered, missed, or after hours).
• Any voicemail recording you leave and an automated transcript of it.
• The content of the text messages you exchange with the business, and information you choose to provide in them, such as your name, vehicle or service details, the problem you describe, and your scheduling preferences.
• Message delivery metadata, such as delivery status and message segments.

Information collected automatically

• Log and device data when you visit callkeep.ai or use the dashboard, such as IP address, browser type, pages viewed, and timestamps.
• Essential cookies and similar technologies used to keep you signed in and to operate the dashboard securely. We do not use third-party advertising or cross-site tracking cookies.

4. How we use information

• To operate the core Service: detect a missed call, text the caller back on the business's behalf, run the conversation that captures and schedules a request, record and transcribe voicemail, and alert the business to new leads.
• To generate message replies. We use an AI provider to help compose responses within the rules the business configured.
• To provide the business dashboard, account management, and customer support.
• To process billing and prevent fraud and abuse.
• To secure the Service, enforce our Terms, and comply with legal obligations and mobile-carrier requirements.
• To improve and develop the Service using aggregated or de-identified data that does not identify any individual.

5. Text-message program terms, consent, and opt-out

CallKeep sends text messages on behalf of a business to the phone number that called that business. The consent basis is your inbound call to the business: you contacted the business, and it replies by text so it can still help you. The first message identifies the business by name.

• Message frequency varies and depends on your conversation with the business.
• Message and data rates may apply, depending on your mobile carrier and plan.
• Opt-out: reply STOP to any message to stop messages from that business immediately. Reply HELP for support information.
• We maintain a per-business opt-out list and check it before every outbound message. Opting out of one business does not opt you out of a different business you may contact.
• We log consent and opt-out events with timestamps to honor your choices and meet our compliance obligations.

No mobile information is sold or shared with third parties or affiliates for their marketing or promotional purposes. Text-messaging opt-in and consent, and phone numbers collected for messaging, are used only to operate the Service and are never provided to third parties for their own marketing.

6. How we disclose information

We disclose information only as described here:

• To the business you contacted. A caller's messages, voicemail, and lead details are shared with the business the caller called, which is the point of the Service.
• To service providers that process information on our behalf under contracts limiting their use of it (see the subprocessor list below).
• For legal reasons, when we believe disclosure is required by law, regulation, legal process, or a governmental request, or to protect the rights, safety, and property of CallKeep, our customers, or the public.
• In a business transfer, such as a merger, acquisition, financing, or sale of assets, in which case information may be transferred subject to this policy.
• With your direction or consent, for any other disclosure you request or authorize.

We do not sell personal information, and we do not share it for cross-context behavioral advertising.

7. Service providers (subprocessors)

• Twilio — telephony and SMS delivery.
• Supabase — database, authentication, and storage.
• Anthropic — AI generation of message replies. Called directly, with no gateway or aggregator, and not used to train their models (see Section 8).
• Resend — transactional email notifications.
• Stripe — payment processing.
• Vercel — application hosting.

Each processes information only as needed to provide its function to CallKeep. This list may change as our vendors change; contact us for the current list.

8. Google user data and Limited Use

When a shop connects a Google Calendar, CallKeep requests only two scopes: calendar.events, to read the times that are already committed and to write the drop-off it books, and calendar.calendarlist.readonly, so the shop can pick which of their calendars to use. Access is limited to the single calendar the shop selects, and their OAuth tokens are encrypted at rest.

CallKeep’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use, transfer, or sell Google user data, whether raw, aggregated, anonymized, or derived, to create, train, or improve any generalized or foundational artificial intelligence or machine learning model.

What reaches our AI assistant, and what does not

CallKeep uses one AI provider, Anthropic, called directly through the Anthropic API with no gateway, aggregator, or model hub in between. Under Anthropic’s commercial terms, inputs and outputs from the API are not used to train their models by default.

From a connected Google Calendar, the only thing that reaches the model is the derived result of a free and busy calculation: the drop-off times that remain open. Event titles, descriptions, attendees, locations, organizers, and invitation content are never read into that path. They are shown only to the shop, in their own dashboard, so they can see why a slot is unavailable. No Google user data is used to train, fine-tune, or improve any model, ours or anyone else’s.

9. Data retention

We retain information for as long as a business account is active and as needed to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements. When information is no longer needed, we delete or de-identify it within a reasonable period. Callers who opt out remain on the suppression list so we can continue to honor the opt-out.

10. Data security

Each business's data is logically isolated from every other business's, and access is restricted through authentication and row-level access controls. We use encryption in transit and other industry-standard safeguards. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Your rights and choices

Depending on where you live, you may have some or all of the following rights regarding your personal information: to know or access what we hold, to correct it, to delete it, to obtain a portable copy, and to opt out of sale or sharing (which we do not do). To exercise a right, email hello@callkeep.ai. We will verify your request and respond within the time required by applicable law. We will not discriminate against you for exercising these rights. If a business used CallKeep to process your information, we may refer your request to that business as the controller.

California residents

Under the California Consumer Privacy Act, as amended, California residents have the rights described above. In the preceding 12 months we collected the categories of information described in Section 3 (identifiers, commercial information, electronic communications content, and internet activity). We do not sell or share personal information as those terms are defined by California law, and we do not use sensitive personal information for purposes requiring an opt-out. You may exercise your rights, or designate an authorized agent to do so, by contacting us above.

Other US state privacy laws

Residents of states with comprehensive privacy laws (including Virginia, Colorado, Connecticut, Utah, Texas, and others) have comparable rights of access, correction, deletion, and portability, and the right to appeal a declined request. Contact us to exercise these rights or to appeal.

12. Children's privacy

The Service is intended for businesses and is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact us and we will delete it.

13. International users

The Service is operated in the United States and intended for US businesses and their callers. If you access it from outside the United States, you understand your information will be processed in the United States, where privacy laws may differ from those in your location.

14. Third-party links

Our website or messages may link to third-party sites, such as a payment page. Those sites are governed by their own privacy policies, and we are not responsible for their practices.

15. Changes to this policy

We may update this policy from time to time. When we do, we will revise the “last updated” date above, and for material changes we will provide additional notice to account holders. Your continued use of the Service after an update means you accept the revised policy.

16. Contact us

Innotech Development Group LLC (CallKeep). Email hello@callkeep.ai.