Privacy Policy

Information you give us

• Account and business information — name, business name, email address, phone number, business address, trade, and login credentials for Business users.
• Carrier verification information — for Business users, the legal business name, federal tax ID (EIN), business type, and business address. Phone carriers require this to verify a business before its number is allowed to text customers; we submit it to our telecommunications provider for that verification and do not use it for any other purpose.
• Early-access and marketing information — if you sign up for early access or to receive updates, the name, email address, mobile number, and trade you provide, along with a record of the consent you gave (including the exact wording shown, the date, and the time).
• Payment information — billing details for your subscription and the information needed to onboard your payment account. Card payments are processed by our payment processor; we do not store full payment-card numbers.
• Content you and your Customers create — the text of SMS/MMS messages, photos and files sent by message (for example, receipts or job photos), voicemail audio, a voicemail greeting you record in your own voice, job and quote details, prices you set, and notes.

Information we collect automatically or generate

• Communications metadata — phone numbers involved, timestamps, call and message status and delivery events, and whether a message was inbound or outbound.
• Voicemail recordings and transcripts — when the Services take a voicemail, we store the recording and may create a text transcript to summarize it for the Business.
• AI-derived information — structured details our models extract from a conversation (such as an inferred job type, address, or intent) and the drafts our models generate for a Business to review.
• Consent and compliance records — records of opt-ins, opt-outs (STOP), help requests (HELP), and the send-gate decisions we log for every outbound message.
• Usage and device information — log data, IP address, browser/device type, and product-analytics events describing how Business users interact with the app.
• Cookies and similar technologies — we use strictly-necessary cookies to keep you signed in and a limited set of analytics/functionality cookies. We do not use third-party advertising cookies.

How we collect Customer information

Customer information generally comes to us because the Customer contacted a Business — by calling or texting the Business's Buildelio number, or by giving the Business their number when requesting service — and because the Business uses Buildelio to handle that communication. We also generate information about a communication (such as metadata and AI-derived fields) in the course of providing the Services. Recording and transcription of voice content is done to provide the Services; the Business is responsible for any notice or consent its jurisdiction requires for recording.

How we use information

We use personal information to:

• provide and operate the Services — answer missed calls, run conversations, create jobs, and draft quotes, change orders, and invoices for a Business to review and approve;
• process payments — facilitate deposits and invoice payments and manage subscriptions through our payment processor;
• use AI to assist the Business — classify messages, extract job details, and generate drafts. Anything with a price, promise, or legal implication is presented as a draft and is not sent until a human at the Business approves it;
• send required and requested communications — service messages, the automated first-contact disclosure, opt-out confirmations, and transactional email;
• contact you about early access and product updates you asked for — you can unsubscribe from marketing email at any time, and reply STOP to opt out of any marketing texts;
• keep the Services safe and reliable — authenticate users, enforce tenant isolation, prevent abuse and fraud, debug, and monitor errors and performance;
• improve the Services — understand usage and quality, including through limited human review of message content; and
• comply with law — meet legal, regulatory, tax, and messaging-compliance obligations, and enforce our Terms.

We do not use the content of your communications to train our own or third parties' foundational AI models, and the commercial API terms of our AI vendors prohibit training their models on the data we send them by default. We do not sell personal information, and we do not share it for cross-context behavioral advertising.

When we share information

Within a Business. Information about a Business's Customers and jobs is available to that Business's authorized users. Businesses are separated from one another; one Business cannot see another Business's data.

Service providers (subprocessors). We share information with vendors who process it on our behalf to run the Services, under contracts that limit their use of the information. Our current subprocessors include:

• Twilio — SMS/MMS, voice, and voicemail
• Stripe — payment processing
• Anthropic — AI text classification and drafting
• OpenAI — voice-to-text transcription
• Google — address validation (street addresses provided for a job)
• Supabase (hosted on Amazon Web Services) — database, authentication, and file storage
• Railway — application hosting
• Resend — transactional email
• Sentry — error monitoring
• Axiom — application logging
• PostHog — product analytics

Legal and safety. We may disclose information if required by law or legal process, or to protect the rights, property, or safety of Buildelio, our users, or others.

Business transfers. If Buildelio is involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction, subject to this Policy.

Mobile opt-in and consent data is never shared with third parties or affiliates for their own marketing purposes.

SMS messaging and your consent

Business messaging through Buildelio is consent-based. Recipients can reply STOP at any time to stop receiving text messages, START to opt back in, and HELP for help; we honor STOP globally and promptly and record it. The first automated message in a conversation discloses that it is automated. Business-initiated messages are designed to stay within daytime hours in the recipient's local time; replies within a conversation the recipient started may fall outside them. Business users also receive operational texts about their own account, and can set their own texting window — including hours outside the default — in Settings. Message frequency varies, and message and data rates may apply. See our SMS Program Terms for details.

How long we keep information

We keep personal information for as long as needed to provide the Services and for legitimate business and legal purposes — for example, to maintain your account and records, resolve disputes, and meet tax, accounting, and compliance obligations. Certain records, such as consent and opt-out records and message-send logs, are retained for compliance and audit purposes even after other data is deleted. When information is no longer needed, we delete or de-identify it.

How we protect information

We use technical and organizational measures designed to protect personal information, including encryption of data in transit, database-level tenant isolation so each Business's data is segregated, access controls, and restricted use of administrative credentials. No system is perfectly secure, and we cannot guarantee absolute security.

Your choices and rights

• Business users can access and update account information in the app, and can contact us at privacy@psglabs.io to close their account. On request we will export or delete a Business's data, subject to records we must retain by law.
• Customers can opt out of messages at any time by replying STOP. To access, correct, or delete other information, a Customer can contact the Business they communicated with (which controls that information) or contact us at privacy@psglabs.io and we will assist or route the request appropriately.

We will not discriminate against you for exercising your rights.

Children's information

The Services are for businesses and are not directed to children. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us information, contact us and we will delete it.

U.S. state privacy rights

Depending on your state of residence (for example, California under the CCPA/CPRA, and Virginia, Colorado, Connecticut, Utah, and other states with comprehensive privacy laws), you may have rights to access, correct, delete, or obtain a portable copy of your personal information, and to opt out of certain processing. As described above, we do not sell personal information or share it for cross-context behavioral advertising. To exercise a right, contact us at privacy@psglabs.io; we will verify your request as required and respond within the time the law allows. You may designate an authorized agent where the law permits, and you may appeal a decision by replying to our response.

Where we operate

Buildelio is offered in the United States and is intended for U.S. businesses and their Customers. We do not intend to offer the Services in other countries, and we do not knowingly process personal information subject to the GDPR.

Changes to this Policy

We may update this Policy. If we make material changes, we will provide notice (for example, by email or in the Services) and update the "Last updated" date above. Your continued use after the effective date means you accept the updated Policy.

Contact us

PSG Labs LLC (d/b/a Buildelio), 6545 Market Avenue North, STE 100, Canton, OH 44721

Privacy: privacy@psglabs.io