Privacy Policy

1. Introduction

DewPoint FrontDesk, a product of The DewPoint Group LLC, headquartered in Los Angeles, CA (“Company”, “we”, “our”, or “us”), respects your privacy and protects the personal information collected through dpgfrontdesk.com, our Sydney voice AI assistant, and the Client Command portal. This Privacy Policy explains what information we collect, how we use it, and the choices available to you.

2. Information We Collect

We collect information you provide directly or through phone and website interactions:

• Contact & Account Details: Name, phone number, email address, service address, company website URL, and Stripe billing identifiers.
• Telephony & Audio Data: Inbound and outbound dispatch call recordings (disclosed at the beginning of the call), speech-to-text transcripts, and carrier caller ID metadata (ANI).
• Job Intake Parameters: Trade issue descriptions, appointment preferences, property type, and customer-supplied access notes.
• Website Analytics & Campaign Attribution: Pageviews, conversion events (such as demo interactions, website scans, and checkout clicks), referral/UTM campaign tags, browser metadata, and truncated/masked IP addresses collected via Vercel Web Analytics, first-party telemetry, and (when configured) Google Analytics 4.

3. How We Use Your Information

We use collected information strictly for service delivery, customer support, and operational improvement:

• Answering inbound calls, verifying service areas, triaging emergencies, and booking appointments onto our clients' calendars.
• Sending requested SMS appointment confirmations, magic reschedule links, and diagnostic deposit links.
• Maintaining carrier compliance under CTIA and A2P 10DLC mobile messaging standards.
• Measuring website traffic, campaign effectiveness, and platform reliability.

4. Mobile Messaging Privacy & Infrastructure Subprocessors

We do not sell, rent, or trade your personal information or your customers' call data to third-party advertisers or data brokers.

SMS Opt-In Non-Sharing Commitment: No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties, except aggregator and telecom providers required to deliver the messaging service.

Data is processed only through vetted cloud infrastructure providers required to deliver the service—built on SOC 2 Type II–audited cloud providers (Supabase for encrypted PostgreSQL storage with Row-Level Security, Vercel for edge hosting and web analytics, and Vapi for real-time voice orchestration), alongside Twilio (telephony and SMS routing), Stripe (PCI-DSS Level 1 billing and payment links), and enterprise speech/LLM inference providers under API data-privacy terms.

5. California Consumer Privacy Act (CCPA)

California residents have the right to request disclosure of the categories and specific pieces of personal information collected, request deletion of personal information, and exercise privacy rights without discrimination. To submit a privacy request, email support@dpgfrontdesk.com.

6. Security & Data Retention

We implement administrative and technical safeguards including TLS 1.3 encryption in transit, AES-256 encryption at rest, and tenant-isolated access controls. Call recordings and transcripts are retained according to client account settings and applicable legal requirements, and may be deleted upon verified client request.