Privacy Policy

From you (the business owner): your email for sign-in, your business profile (name, services, hours, prices), knowledge files you upload or import, and the integration credentials you connect (e.g. your CRM API token, Google account). Payment details go directly to Stripe — we never see or store card numbers.

From your callers, on your behalf: phone numbers, names they give, what they say on calls and in texts (as audio processed in real time, and as stored transcripts), and the messages or appointments that result. For this data your business is the controller; Holloway processes it to run your receptionist.

Only to run the Service: answering your calls, quoting from your own business information, capturing leads into your CRM, notifying you, and showing you what happened in your dashboard. We don’t sell data, and we don’t use your calls to train AI models.

Twilio (telephony and SMS), OpenAI and Google (real-time AI processing of call audio and text), Supabase (database and file storage), Vercel and Railway (hosting), Stripe (billing), and — only if you connect them — Pipedrive, Google Calendar/Gmail, or Jobber. Each receives only what its role requires.

Integration credentials (CRM tokens, OAuth refresh tokens, API keys) are encrypted at rest with a separate master key. Data access is scoped per business account. Transport is TLS everywhere.

Transcripts, messages, and captured leads are kept so your dashboard history works, and deleted when you delete them or close your account. Deleting your account removes your business data from our systems; copies already delivered into YOUR systems (your CRM, your calendar, your phone) are yours to manage.

Calls handled by Holloway are transcribed so you can review them. Depending on your jurisdiction you may be required to notify callers that calls are recorded/transcribed or that an AI assistant is answering — that notice is your responsibility as the business owner (see the Terms).

Ask us to access, correct, export, or delete your data any time: dremlyukhweb@gmail.com. If you’re a caller whose call a Holloway-powered business handled, contact that business first — it controls the data — and we’ll help them honor your request.