Privacy Policy

Effective date: August 31, 2026 · Last updated: August 31, 2026

This Privacy Policy explains how BookedOps LLC ("BookedOps", "we", "us") collects, uses, discloses, and protects personal information in connection with our website and our AI receptionist service for home-service businesses (the "Service"). By using the website or the Service, you agree to this Policy.

1. Who we are and how to contact us

BookedOps is operated by BookedOps LLC, a limited liability company organized in New Jersey, United States. For any privacy question or request, contact us at privacy@bookedops.ai. A postal address is available on request.

2. Our role: business customers vs. their leads

Our customers are home-service businesses ("Business Customers"). When a Business Customer uses the Service, we process information about the people who call, text, or chat that business ("Leads") on the Business Customer's behalf and under their instructions — for that data we act as a service provider / processor, and the Business Customer is the controller. For information about the Business Customer's own account and staff, and for our website, we act as the controller.

3. Information we collect

From Business Customers (account data)

Name, business name, email address, phone number, and job title of the account owner and the staff contacts they designate for call/lead alerts.
Business configuration you provide: hours, service area, pricing ranges, emergency criteria, escalation contacts, and disclosure scripts.
Billing details (processed by our payment processor; we do not store full card numbers).

From Leads, on the Business Customer's behalf

Contact details a caller provides: name, phone number, service address, and email address if given.
The content of the interaction: what the caller says or writes, the nature and urgency of the issue, preferred appointment window, and diagnostic details.
Call audio recordings and written transcripts of calls, texts, and chats.
The phone number the interaction came from and the number it reached, and basic call metadata (time, duration, outcome).

Automatically

Standard server logs (IP address, timestamps, request data) and error-monitoring data for the website and Service.
Strictly necessary cookies to operate the site. We do not use advertising or cross-site tracking cookies.

4. How we use information

Answer, transcribe, and run a structured intake on incoming calls, texts, and chats for the Business Customer.
Classify urgency and escalate genuine emergencies to a human by SMS and phone call to the Business Customer's designated contacts.
Send the Business Customer a summary and transcript of each interaction by SMS and email.
Provide, maintain, secure, debug, and improve the Service.
Communicate with Business Customers about their account, service changes, and support.
Comply with law, enforce our agreements, and protect the rights and safety of users and the public.

AI processing: interaction content is sent to our AI model provider (see §6) to extract structured details and classify urgency. We do not use Lead content to train third-party public models.

5. Text messaging (SMS)

BookedOps sends service-related (transactional) text messages only — for example, new-lead notifications, emergency escalation alerts, and appointment-related follow-ups. We do not send marketing or promotional text messages under this program.

Consent. Recipients are (a) Business Customers who provide their mobile number when signing up, and (b) the staff contacts a Business Customer designates and confirms have agreed to receive operational alerts about that business's own calls. Where texts are sent to a Lead, it is at the Business Customer's direction and based on the Lead's interaction with that business.
Message frequency varies based on call and lead volume.
Message and data rates may apply from your carrier.
Opt out at any time by replying STOP to any message; reply HELP for help; reply START to resume. Opting out will stop operational alerts to that number.
We do not sell or share mobile phone numbers, SMS opt-in information, or consent with third parties for their own marketing purposes.
Carriers are not liable for delayed or undelivered messages.

6. How we share information

We share personal information only as described here. We do not sell personal information.

Service providers (subprocessors)

We use vetted providers that process data solely to deliver the Service on our instructions:

Twilio — telephone calls, SMS, and phone numbers.
Retell AI — real-time voice-agent orchestration (call handling, speech-to-text, text-to-speech).
Anthropic — the AI language model that processes interaction content to extract details and classify urgency.
Supabase — database, authentication, and storage hosting (including recordings and transcripts).
Vercel and Cloudflare — application, website, and content-delivery hosting.
Resend — transactional email delivery.
Sentry — application error monitoring.

These providers may in turn engage their own subprocessors to deliver their services.

With the Business Customer

Information about a Lead's interaction is made available to the Business Customer that the Lead contacted.

Legal, safety, and business transfers

We may disclose information to comply with law or valid legal process, to protect the rights, property, or safety of any person, or in connection with a merger, acquisition, financing, or sale of assets (with notice where required).

7. Call and message recording

Calls and messages handled by the Service are recorded and transcribed for quality, record-keeping, dispute resolution, and Service improvement. Callers are told at the start of a call that the assistant is automated, and, where a state requires all-party consent to record, a recording disclosure is provided and the call proceeds only on that basis.

8. Retention

Account data is retained for the life of the account and for a reasonable period afterward to meet legal, tax, and dispute-resolution needs. Call recordings and transcripts are retained for the period the Business Customer configures — by default, 90 days — after which they are deleted or de-identified. Backups and logs age out on a rolling schedule.

9. Security

We protect information with encryption in transit, access controls, per-customer data isolation, and audit logging of automated actions. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, or restrict the use of your personal information, and to appeal a decision. Business Customers can manage most account data directly or by contacting us. Leads: because we process your information on behalf of the business you contacted, please direct requests to that business; if you reach us first at privacy@bookedops.ai we will refer the request to them and assist as their processor. We do not discriminate against you for exercising these rights.

11. Children

The Service is for businesses and is not directed to children under 16. We do not knowingly collect their personal information.

12. International users

We are based in the United States and process information there. If you contact a Business Customer from outside the U.S., your information will be transferred to and processed in the U.S.

13. Changes to this Policy

We may update this Policy from time to time. Material changes will be reflected by a new "Last updated" date and, where appropriate, additional notice.

14. Contact

BookedOps LLC
New Jersey, USA
privacy@bookedops.ai