Plain-English
privacy.

Handled is operated by Christian G Flair LLC, a Florida limited liability company. The legal contact for privacy questions is hello@handled.build.

Account data: your business name, contact email, phone, billing address, and the plan you chose.

Operational data: the call recordings, transcripts, and metadata produced by your AI receptionist while it answers your line, plus the bookings and messages it takes.

Telemetry: standard server logs, IP, user agent, and product analytics on the marketing site (no third-party trackers on the dashboard).

We don't sell your data, your callers' data, or your call recordings to anyone. We don't train external models on your transcripts. We don't run third-party advertising trackers on the customer dashboard.

To run your AI receptionist, route calls, write and store transcripts, send booking confirmations and account email, bill you, and notify you of failures.

To improve our own service (call quality monitoring, model selection, and product analytics), using your data only as the operator of your account, never resold.

In use today: Vapi (voice infrastructure), Supabase (database + auth), Stripe (billing), Resend (transactional email), Vercel (hosting + edge). Meta WhatsApp Business Cloud is set up but not switched on. No message traffic runs through it while our Meta verification is outstanding. No SMS provider is connected to Handled. If a messaging channel goes live for your account, that vendor is added to the subprocessor schedule in the DPA and you get 14 days' notice before it handles your data. Each subprocessor is contractually bound to handle your data only as needed to operate the service.

Every call your assistant answers opens with an AI + recording disclosure, before the caller is asked anything. That opening is the same in every state, which is what the two-party-consent states (CA, FL, IL, MD, MA, MT, NV, NH, PA, WA) require: consent happens at the start of the call, not part-way through.

Recording runs for the whole call. There is no mid-call pause and we do not claim one. A caller who would rather not be recorded can say so and ask for a person instead, and the assistant takes a message for a callback. See /compliance for the pattern every opening line follows.

You can export your account data, your transcripts, and your customer list at any time from the dashboard. You can request deletion by emailing hello@handled.build; we delete inside 30 days unless retention is required for tax or legal reasons.

California (CCPA), Virginia (VCDPA), and EU (GDPR) residents have the additional rights granted under those laws. Contact hello@handled.build to exercise them.

Handled is a B2B product. We do not knowingly collect data from anyone under 16. If you believe we have, contact hello@handled.build and we will delete it.

Material changes to this policy are emailed to active customers with at least 14 days' notice. The effective date below is updated each time.