Privacy Policy

This policy explains how Blue Heeler Bytes LLC ("we", "us") handles personal information in Blue Heeler Bytes (the "Service"). The Service is used by home-services businesses ("Customers") to manage leads and customers. It covers two groups of people: users of the Service (Customer staff), and the Customer's own leads and customers whose details are stored in it.

1. Our role

For information about a Customer's leads and customers, the Customer decides what to collect and how to use it; we process it on the Customer's behalf as a service provider. If you were contacted by a business using the Service, that business's own privacy policy applies, and you can contact them directly. For account information about Service users, we are responsible for it.

2. Information we collect

• Account information: name, work email, role, password (stored hashed), and multi-factor authentication settings.
• Customer Data: lead and customer contact details, notes, job records and photos, and the content of SMS and email messages sent and received through the Service.
• AI chats: if a business offers the AI chat on its request page, the messages you type to the AI assistant there and the assistant's replies, saved with your request.
• Consent records: SMS opt-in and opt-out events and email unsubscribes, with timestamps, kept to demonstrate compliance.
• Usage and security data: sign-in times, IP address, browser type, and an audit log of actions taken in the Service.

3. How we use it

• to provide the Service: deliver messages, run follow-up automations, and show reports;
• to run the AI features described in section 5;
• to secure the Service: authenticate users, detect abuse, and keep audit logs;
• to enforce opt-outs and meet legal obligations;
• to provide support and communicate with Customer administrators about their account.

We do not sell personal information, and we do not use Customer Data to advertise to anyone.

4. Text messaging

Mobile numbers and SMS opt-in consent are used only to send the messages the recipient agreed to receive. Mobile information and SMS consent are not shared with third parties or affiliates for marketing or promotional purposes. Reply STOP to any message to opt out, or HELP for help. Message frequency varies; message and data rates may apply.

5. AI features

Businesses can turn on two AI features. Both use only what the business writes about itself in the Service, together with the request in question:

• AI review for the business's staff. When a new service request comes in, an AI reads it, notes whether it fits the business and whether the same phone number or email was turned away before, and drafts a reply. Staff read the draft and decide what to send. The AI never sends anything on its own. If you give the address where you need the work done, it is added to your request, with the city, state and ZIP code looked up through Amazon Location Service (part of Amazon Web Services).
• AI chat on the request page. Right after you send a request, the business may offer a chat with an AI assistant. The chat says up front that it's an AI, not a person. It can answer basic questions about the business and ask a few questions to help the business prepare. The chat is saved with your request, the business's staff can read it, and the AI review uses it.

The AI can make mistakes, and the business will confirm anything important, such as prices or appointment times. Don't share payment card numbers, passwords, or government ID numbers in the chat, and don't use it for emergencies: call 911.

The AI features run on Anthropic's Claude models through Amazon Bedrock, in our Amazon Web Services account. Under Amazon Bedrock's terms, what we send to the models isn't used to train them and isn't shared with the model's developer. We don't use AI chats or requests to train any AI model.

AI chats and reviews are kept with the request, and are deleted when the business deletes the lead, or as described in section 8.

6. Service providers

We share information only with vendors that help run the Service, under contracts that limit their use of it:

• cloud hosting and storage — Amazon Web Services;
• AI models for the features in section 5 — Anthropic's Claude, run through Amazon Bedrock (part of Amazon Web Services);
• SMS delivery — Twilio;
• email delivery — SendGrid;
• payment processing — Stripe (we don't store full card numbers).

We may also disclose information when required by law or to protect the rights and safety of users and others.

7. Security

Each Customer's data is isolated from every other Customer's, at the database and application layers. Data is encrypted in transit and at rest, access is role-based, and multi-factor authentication is available.

8. Retention

We keep Customer Data while the Customer's account is active and delete it within 14 days after the account closes, except consent, opt-out, and audit records we must keep by law. Backup copies expire within 7 days after deletion.

9. Your choices and rights

Service users can update their account details in the app. If you are a Customer's lead or customer, contact that business to access, correct, or delete your information; we will help them respond. Depending on where you live, you may have additional rights under state privacy laws — contact us at privacy@blueheelerai.com to exercise them.

10. Children

The Service is for businesses and isn't directed to children under 13.

11. Changes

We'll post updates here and change the date above; for material changes we'll notify Customer administrators.

12. Contact

Blue Heeler Bytes LLC, 714 S. Hillside Ave, Elmhurst, IL 60126, privacy@blueheelerai.com.