Privacy Policy

Effective: May 31, 2026 · Last updated: May 31, 2026

1. Scope & who this covers

This policy explains how Main Street Phone ("we," "us," "Main Street Phone") collects, uses, and shares information when you visit mainstreetphone.com, sign up for our service, or interact with an AI receptionist powered by Main Street Phone on behalf of a business.

We collect information from two groups of people, and this policy uses different terms for each:

• Business Customer. A small business (shop owner, contractor, salon, etc.) that signs up for our service and connects their calendar so our AI can book on their behalf.
• Caller. A person who calls the phone number of a Business Customer and ends up speaking with our AI receptionist.

2. Information we collect

From Business Customers

• Account information: business name, owner name, email, phone number, service area, business hours, services you offer.
• Configuration: the answers you give in our onboarding quiz used to build your receptionist (tone, services, pricing rules, emergency rules, FAQs, what to say to callers).
• Calendar access: when you connect a Google, Microsoft, Jobber, Housecall Pro, or similar account, we receive a permission token that lets us read and write events on the calendar(s) you grant us access to. We do not read messages, contacts, or any other data outside the granted scopes.
• Payment information: handled by our payment processor; we receive only a customer ID and the last four digits of your card.
• Communications with us: emails, support tickets, and any other messages you send.

From Callers

• Phone number (caller ID).
• Name, callback number, service address, and any information you provide when you speak with our AI receptionist.
• Audio recording and text transcript of the conversation. Calls are recorded. You may end the call at any time if you do not consent.
• Call metadata: time, duration, the business you called, the outcome (booked, took a message, escalated to the owner, etc.).

Automatically (everyone)

• Device & usage data on our website: IP address, browser type, pages viewed, referring URL, approximate location (from IP), and cookies necessary for the site to function.

3. How we use information

We use the information described above to:

• Operate and provide the AI receptionist service.
• Build and maintain each Business Customer's custom AI agent based on the configuration they provide.
• Place and answer phone calls, transcribe them, and create calendar events.
• Notify Business Customers of new bookings, leads, emergencies, and other call outcomes via SMS and email.
• Identify and prevent fraud, abuse, and misuse.
• Comply with legal obligations.
• Improve the service, including by reviewing call quality and aggregating non-identifying patterns. We do not use Caller voice recordings or transcripts to train third-party general-purpose AI models without contractual no-training protections in place with our vendors.

4. How we share information

We share information with the third-party service providers below to deliver our service. Each is contractually limited to processing information only on our behalf and only as needed to perform their function.

We may also share information when required by law, in response to lawful requests by public authorities, to protect our rights or the safety of any person, or in connection with a merger, acquisition, or sale of assets (in which case we will notify you in advance).

We do not sell personal information as the term "sale" is defined in U.S. state privacy laws, and we do not engage in cross-context behavioral advertising.

5. Google API user data

Main Street Phone's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

• We request only the Google Calendar scopes necessary to create and manage events on the calendar(s) you authorize.
• We do not use your Google data to develop, improve, or train generalized or non-personalized AI/ML models.
• We do not transfer your Google data to third parties for advertising, market research, or unrelated purposes.
• You can revoke our access at any time at myaccount.google.com/permissions or by disconnecting from within our app.

6. Call recording & transcription

All calls answered by our AI are recorded and transcribed. Recording laws vary by state. Some states (including California, Florida, Illinois, Maryland, Massachusetts, Pennsylvania, and Washington) require all parties to a call to consent to recording.

Business Customers represent and warrant that they have configured their service so that Callers are notified that calls are recorded, where required by applicable law, and that they have all necessary consents and authority to permit us to record and process calls on their behalf.

Callers are notified at the start of the conversation that they are speaking with a virtual receptionist. By continuing the call after that disclosure, you consent to being recorded. You may end the call at any time.

7. Data retention

• Account data: retained while your account is active and for up to 24 months after closure.
• Call recordings and transcripts: retained for 90 days by default, then deleted, unless the Business Customer configures a different period or applicable law requires longer retention.
• Calendar events we created: remain on your calendar; we do not separately retain copies after they are written.
• Backups and aggregated, de-identified analytics: may be retained longer for service integrity.

8. Your rights & choices

Depending on where you live, you may have rights to:

• Access the personal information we hold about you.
• Request that we correct or delete it.
• Opt out of certain uses (such as targeted advertising, which we do not do).
• Withdraw consent we previously relied on.
• Lodge a complaint with a privacy regulator.

To exercise any of these rights, email privacy@mainstreetphone.com. We will respond within the timelines required by applicable law (generally 30–45 days).

If you are a Caller and want your phone number or recording removed from a specific Business Customer's records, contact that business directly. We can also assist if you contact us with the date, time, and number you called.

9. California residents (CCPA / CPRA)

Under the California Consumer Privacy Act as amended by the CPRA, California residents have the rights described in Section 8 above, plus the right to know the categories of personal information collected, the sources, the business purposes, and the third parties with which it is shared — all of which are disclosed in this policy. We do not sell personal information and do not share it for cross-context behavioral advertising.

You may also designate an authorized agent to make a request on your behalf. We will verify your identity before responding to requests that involve personal information.

10. Security

We use industry-standard administrative, technical, and physical safeguards to protect personal information, including encryption in transit (TLS), encryption at rest for stored credentials, principle-of-least-privilege access controls, and short-lived OAuth tokens for third-party integrations. No system is perfectly secure; if we learn of a security incident affecting you, we will notify you promptly as required by law.

11. Children

Our service is not directed to children under 13, and we do not knowingly collect personal information from children. If we learn we have collected information from a child under 13, we will delete it.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date and, where required by law, provide additional notice. Continued use of the service after changes take effect constitutes acceptance.

13. Contact

Main Street Phone
Email: privacy@mainstreetphone.com
General questions: hello@mainstreetphone.com