Privacy Policy

What this policy covers

CallStone™ is a trade name of Heeley Enterprises LLC. This policy explains how CallStone™ handles information when businesses use our website, missed-call recovery, messaging, lead-management, appointment, team, and billing services. For information a business submits about its callers and customers, that business generally decides why and how the information is used, and CallStone™ processes it on the business's behalf. The business remains responsible for its own privacy notices, permissions, and legal obligations.

Information we collect and its sources

We may process account names and email addresses; business profile, team, and calendar settings; caller names, phone numbers, messages, service requests, notes, estimates, appointments, and assignment history; SMS consent and opt-out evidence; subscription and invoice identifiers; and device, browser, log, and security records needed to operate the service.

We receive information directly from account holders, participating businesses and their customers; automatically from use of the service; and from connected providers such as communications, calendar, identity, hosting, email, and payment services.

Payment-card details are collected and processed by Stripe and are not stored in CallStone™'s application database.

How information is used

Information is used to provide and secure the service, route messages, schedule work, synchronize calendars, maintain consent and activity records, deliver account notices, process subscriptions, prevent abuse, troubleshoot failures, and comply with legal obligations.

Text-message privacy

CallStone™ does not sell, rent, or share mobile numbers, SMS consent, or SMS opt-in data with third parties for their independent marketing purposes. Mobile information will not be shared with third parties or affiliates for marketing or promotional purposes. Sharing with service providers that support message delivery is permitted only as needed to provide the messaging service. A business using CallStone™ may use messaging only for the customer relationship and message purpose the recipient agreed to receive.

Service providers and disclosures

CallStone™ uses infrastructure and service providers such as OpenAI Sites and Cloudflare for hosting and storage, Twilio for communications, Resend for email delivery, Stripe for billing, and connected Google or Microsoft calendar services. Information is shared only as needed to provide the requested feature, protect the service, comply with law, or complete a business transaction involving the service.

CallStone™ does not sell caller phone numbers or SMS consent information, and does not disclose that information for any third party's independent marketing.

Retention and security

We retain workspace and account records while the account is active and afterward only as reasonably needed to provide exports or account closure, complete billing and tax records, maintain security and backups, resolve disputes, enforce agreements, and satisfy legal obligations. Message content and lead records follow the workspace's service needs and deletion instructions. Consent, opt-out, transaction, and acceptance evidence may be retained for the applicable limitation period or longer when law requires it. Backup copies may remain for a limited period until overwritten through the normal backup cycle.

Retention depends on the type and sensitivity of the information, the purpose for which it was collected, the account's instructions, and applicable legal requirements. When information is no longer reasonably needed, we delete or deidentify it where practicable. CallStone™ uses access controls and reasonable technical safeguards, but no service can guarantee absolute security.

Your choices and privacy rights

Depending on where you live and subject to legal exceptions, you may have rights to know or access personal information, correct inaccuracies, delete information, receive a portable copy, opt out of a sale or sharing for targeted or cross-context behavioral advertising, limit certain uses of sensitive information, appeal a denied request, and receive equal service without unlawful discrimination for exercising a privacy right.

CallStone™ does not sell personal information or share it for targeted or cross-context behavioral advertising, and does not use sensitive personal information to infer characteristics about individuals. We will honor applicable opt-out preference signals if our practices change in a way that makes them relevant.

Workspace owners may request access, correction, export, or deletion by emailing callstonesupport@gmail.com. We may need to verify the requester's identity and authority. Authorized agents may submit requests where permitted by law. Callers should normally contact the business they communicated with first because that business controls its customer records; we will assist that business as required. Text recipients may use any reasonable method to revoke consent, including replying STOP, and may reply START or UNSTOP to opt back in when supported.

Children

The service is for businesses and is not directed to children under 18. We do not knowingly collect personal information directly from children through account registration. If you believe a child submitted personal information to us, contact us so we can review and take appropriate action.

State-specific protections

Residents of states with comprehensive privacy laws may exercise the rights their applicable law provides. The scope of those rights and our duties varies by law and may depend on whether CallStone™ or a participating business controls the information. Nothing in this policy limits a non-waivable state privacy right.

Changes

Material changes will be posted with a revised effective date. Additional notices or consent will be provided when required.