Plain-English
privacy.
We don't sell your data, we don't train external models on your transcripts, and we don't run trackers on your dashboard. The rest of the policy below.
Effective 2026-04-30 · Christian G Flair LLC
Who runs Handled
Handled is operated by Christian G Flair LLC, a Florida-licensed limited liability company. The legal contact for privacy questions is privacy@handled.build.
What we collect
Account data — your business name, contact email, phone, billing address, and the plan you chose.
Operational data — the call recordings, transcripts, and metadata produced by your AI receptionist while it answers your line, plus the events synced to your CRM.
Telemetry — standard server logs, IP, user agent, and product analytics on the marketing site (no third-party trackers on the dashboard).
What we don't collect
We don't sell your data, your callers' data, or your call recordings to anyone. We don't train external models on your transcripts. We don't run third-party advertising trackers on the customer dashboard.
How we use it
To run your AI receptionist, route calls, write transcripts, sync to your CRM, send recap SMS / email, bill you, and notify you of failures.
To improve our own service — call quality monitoring, model selection, and product analytics — using your data only as the operator of your account, never resold.
Subprocessors
Vapi (voice infrastructure), Twilio (telephony + SMS), Supabase (database + auth), Stripe (billing), Resend (transactional email), Vercel (hosting + edge). Each is contractually bound to handle your data only as needed to operate the service.
Recording + AI disclosure
Every call your assistant answers opens with a recording + AI disclosure. Two-party-consent states (CA, FL, IL, MD, MA, MT, NV, NH, PA, WA) are auto-honored. Callers can opt out of recording by saying so; the rest of the call continues unrecorded. See /compliance for the exact scripts.
Your rights
You can export your account data, your transcripts, and your customer list at any time from the dashboard. You can request deletion by emailing privacy@handled.build; we delete inside 30 days unless retention is required for tax or legal reasons.
California (CCPA), Virginia (VCDPA), and EU (GDPR) residents have the additional rights granted under those laws. Contact privacy@handled.build to exercise them.
Children
Handled is a B2B product. We do not knowingly collect data from anyone under 16. If you believe we have, contact privacy@handled.build and we will delete it.
Updates
Material changes to this policy are emailed to active customers with at least 14 days' notice. The effective date below is updated each time.