Conduit

Privacy Policy

Effective July 2026. Conduit provides an AI office assistant that answers calls and texts for local service businesses. This page explains what we collect, why, and what we will never do with it — in plain language, because the legalese version of trust is still trust.

The short version

  • Calls handled by the assistant are recorded and transcribed — and every caller is told so, up front, in the greeting. That sentence cannot be turned off.
  • Your business data (contacts, jobs, quotes, invoices, call history) belongs to the business. We process it to run your office; we don't sell it, rent it, or use it to advertise.
  • We never train AI models on your data, and our AI providers are contractually barred from doing so too.
  • Texting is strictly consent-based: STOP always works instantly, and we keep opt-outs for 10 years even if you leave.
  • You can export everything, any time, from Settings.

What we collect

  • Account data— your name, email, and sign-in credentials (passwords are hashed; we can't read them).
  • Business data you enter — services, prices, hours, policies, team contacts.
  • Communications — recordings, transcripts, and metadata of calls the assistant answers; SMS conversations on your business number; voicemails.
  • Customer records — names, phone numbers, addresses, and job history of your customers, as captured on calls or imported by you. You are the controller of this data; we process it on your behalf.
  • Product usage — pages visited and features used inside the app, to improve the product. No cross-site tracking, no ad networks.

Call recording & AI disclosure

Every call the assistant answers begins with a disclosure that the call is recorded and that the caller is speaking with an AI assistant. This is machine-appended to every greeting — including custom ones — and cannot be removed, so your business meets two-party consent standards in every US state. Voice audio is used only to run the call; we do no voice biometrics of any kind.

Where your data goes

We use a small set of infrastructure providers (hosting, telephony, AI, email) to run the service — each one is listed on our subprocessors pagewith what they do. Data lives in US data centers, encrypted in transit and at rest. Every tenant's data is isolated with database-enforced row security — isolation is a property of the database, not of our application code being bug-free.

Retention & deletion

  • Call recordings: 90 days by default, then deleted.
  • Transcripts and business records: kept while your account is active.
  • SMS opt-outs: 10 years (a legal obligation we'd keep anyway).
  • Close your account: export first if you want it; we delete tenant data on request and after the wind-down grace period.

Your rights

Email support@conduit.appto access, correct, export, or delete your data. If you're a customer ofa business that uses Conduit, contact that business first — it controls the records — and we'll help them honor your request.

Changes

If this policy changes in a way that matters, we'll email account owners before it takes effect — not after.