2.1 Information You Provide Directly When you sign up for or use our Service we may collect: - Full name - Business name - Email address - Phone number - Business address - Website URL - Payment information (processed securely by Stripe — we do not store full card numbers) - Business hours and service area - Industry type and service model - Calendly booking links - CRM platform information - Any other information you provide in our onboarding forms or communications with us 2.2 Information Collected Automatically When you visit our website or use our Service we automatically collect: - IP address - Browser type and version - Device type and operating system - Pages visited and time spent - Referring URLs - Cookies and similar tracking technologies 2.3 Information From Your Customers As part of providing our AI receptionist Service, our system may collect information from your customers including: - Names and contact information - Service requests and descriptions - Appointment details - Call recordings and transcripts - Text message conversations - Chat conversation logs You are responsible for ensuring your customers are aware that their calls, texts, and chats may be recorded and processed by our AI system. 2.4 Information From Third Parties We may receive information from third-party services you connect to our platform including: - Calendly (booking and appointment data) - Stripe (payment processing) - Twilio (SMS and call data) - Chatwoot (chat conversation data) - CRM platforms you connect (Housecall Pro, Jobber, JobNimbus, ServiceTitan, Buildertrend, CoConstruct) - Facebook and Instagram (social media DM data for Autopilot Pro customers)

We use the information we collect to: - Provide, operate, and maintain our Service - Configure and personalize your AI receptionist - Process payments and manage your subscription - Send you service-related communications - Send appointment confirmations and reminders to your customers on your behalf - Push lead and booking data to your connected CRM - Respond to your support requests - Improve and develop our Service - Monitor and analyze usage patterns - Detect and prevent fraud or abuse - Comply with legal obligations - Send you marketing communications about our products and services (you may opt out at any time)

We do not sell your personal information. We may share your information in the following circumstances: 4.1 Service Providers We share information with trusted third-party service providers who help us operate our Service including: - Stripe (payment processing) - Twilio (phone and SMS services) - Vapi (AI voice services) - Chatwoot (chat services) - N8N (automation workflows) - Email service providers - Analytics providers These providers are contractually obligated to protect your information and use it only for the purposes we specify. 4.2 CRM and Third-Party Integrations If you connect a CRM or third-party platform to our Service we will share relevant lead and booking data with that platform as directed by you. 4.3 Legal Requirements We may disclose your information if required to do so by law or in response to valid legal process including court orders, subpoenas, or government requests. 4.4 Business Transfers If we are involved in a merger, acquisition, or sale of assets your information may be transferred as part of that transaction. We will notify you before your information is transferred and becomes subject to a different privacy policy. 4.5 Protection of Rights We may disclose information when we believe disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.

Our Service records and transcribes inbound phone calls handled by your AI receptionist. By using our Service: - You acknowledge and agree that calls will be recorded - You are responsible for complying with all applicable call recording laws in your jurisdiction and the jurisdictions of your customers - Many states require one-party or two-party consent for call recording — you are solely responsible for ensuring proper disclosures are made to your callers - We provide an optional call recording disclosure message that your AI receptionist can play at the start of each call — we strongly recommend enabling this feature

Our Service sends SMS and text messages to your customers on your behalf as part of the AI receptionist and customer-communication features you subscribe to. CONSENT AND OPT-IN Before any SMS message is sent, our AI receptionist obtains express verbal consent from the customer during the phone call. The AI receptionist states: "I would like to send you a text message with the details we discussed. By agreeing, you consent to receive text messages from [Business Name] powered by Contractor Autopilot. Message and data rates may apply. Message frequency varies. You can reply STOP at any time to opt out. Would you like me to send that text?" Messages are sent only after the customer verbally confirms. No SMS is sent without prior consent. OPT-OUT AND STOP PROCESSING - Every outbound SMS includes opt-out language - Customers can reply STOP at any time to immediately unsubscribe from future messages - Our system processes STOP, CANCEL, END, QUIT, and UNSUBSCRIBE keywords automatically and instantly - Customers may also reply HELP to receive support contact information MESSAGE TYPES AND FREQUENCY Messages may include: - Appointment confirmations and reminders - Scheduling updates and reschedule requests - Quote and estimate follow-ups - Customer inquiry responses Message frequency varies based on customer interactions. Typically 1-5 messages per interaction. CARRIER DISCLAIMER Message and data rates may apply. Carriers are not liable for delayed or undelivered messages. DATA COLLECTION We collect phone numbers, message content, and delivery status for the purpose of providing our Service and ensuring compliance. We do not sell or share phone numbers or message data with third parties for marketing purposes. See our full data practices above in "How We Share Your Information." COMPLIANCE You agree to comply with all applicable SMS and messaging laws including the Telephone Consumer Protection Act (TCPA) and the CAN-SPAM Act. You represent that you will use our messaging features only for legitimate business communications with customers who have provided consent.

We retain your information for as long as your account is active or as needed to provide you the Service. We will retain and use your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. Call recordings and transcripts are retained for 90 days by default. You may request deletion of specific recordings at any time by contacting us. When you cancel your account we will delete or anonymize your personal information within 90 days unless we are required to retain it by law.

We implement industry-standard security measures to protect your information including: - Encrypted data transmission (SSL/TLS) - Encrypted storage of sensitive credentials - Secure secrets vault for API keys and tokens - Access controls and authentication requirements - Regular security monitoring No method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information we cannot guarantee absolute security.

Depending on your location you may have the following rights regarding your personal information: - Access: Request a copy of the information we hold about you - Correction: Request correction of inaccurate information - Deletion: Request deletion of your information - Portability: Request a copy of your data in a portable format - Opt-out: Opt out of marketing communications at any time by clicking unsubscribe or contacting us - Restriction: Request that we restrict processing of your information To exercise any of these rights please contact us at the information provided in Section 13.

We use cookies and similar tracking technologies to track activity on our website and hold certain information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. If you do not accept cookies some portions of our Service may not function properly.

Our Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18 we will take steps to delete that information.

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last Updated" date. We will provide additional notice for material changes such as an email notification. Your continued use of the Service after changes become effective constitutes your acceptance of the revised policy.

Contractor Autopilot AI Email:support@contractorautopilot.ai Website: ContractorAutopilot.ai