Privacy Policy

This policy covers the Call To Action website and app, operated by Rice Digital LLC (“we”, “us”). It applies to two groups:

Business owners who create an account and use the app to run their trade, and their customers and callers — the people whose phone numbers, messages, photos and job details pass through the app on behalf of a business.

We process customer and caller data for the business that owns the account. That business decides what it collects, who it texts, and how long it keeps records. If you are a caller or customer of a business that uses Call To Action, that business is your first contact for questions about your data.

Account information. Your name, email address, a hashed password, and — if you sign in with Google — the name, email and profile photo Google shares with us.

Business information. Business name, trade or industry, service area or address, phone numbers you connect, message templates, quiet hours and automation settings, and the internal material and labour costs and profit margin you enter for quoting.

Caller, lead and customer information. Incoming and outgoing phone numbers, call records, names and addresses if someone gives them, job details gathered in conversation, the full text of SMS conversations, notes owners save, and follow-up tasks.

Photos. Two kinds. Photos a customer sends by MMS are referenced and fetched temporarily for review; we store the reference to the message, not a public copy. Before-and-after job photos taken by your team are stored in private, job-scoped storage that only people you authorize can open.

Quotes and payments. Quote line items, totals, deposit amounts, quote approval responses from customers, and payment records you enter yourself. We do not collect or store card numbers.

Jobs and scheduling. Appointment dates and times, the customer contact details used for reminders, reminder consent and approval records, and which employees may see which jobs.

Technical records. Sign-in and system logs, webhook delivery records, usage counts, and an audit trail of important actions such as approvals and status changes.

To send the text-back message to a caller you missed and continue the conversation.

To gather job details, organize them into a lead, and show you dashboards, alerts and follow-up tasks.

To let you build, approve, print and send quotes, and to track deposits and balances you record.

To schedule jobs, let employees see their assignments, and send reminders you approved.

To keep the service working and secure: authentication, fraud and abuse prevention, troubleshooting, and enforcing these terms.

Some features send text or images to an AI model provided through our AI gateway so the app can draft an intake conversation, summarize a lead, suggest a follow-up, describe what is visible in a job photo, or estimate project size from a photo and a measurement you supply.

Photos used for review are handled as temporary inputs for that request; the review text is only saved when the owner chooses to save it. AI output is a suggestion, never a promise: it can be wrong or incomplete, it does not set prices, availability or appointments on its own, and a quote only goes to a customer after the owner approves it.

SMS and call handling run through a messaging provider (Twilio) that we connect on the business's behalf. That provider sends and receives messages, returns delivery receipts, and stores message records under its own privacy terms. Phone numbers you connect are used to send and receive business messages.

Opt-out requests are honored: a reply of STOP (and similar words) marks a contact as not to be messaged, and the app blocks further automated messages to them. Quiet hours and message limits are enforced from the business's settings.

Deposits and payments use a payment page the business owns and hosts. When a customer pays there, their card or bank details go to that payment provider, not to us. What we store is the record the business enters: amount, date, method and note.

We do not sell personal information and do not share it for advertising.

We share it only with:

• Our service providers who process data for us: the hosting, database and authentication platform (Lovable Cloud), the messaging provider (Twilio), the AI gateway used for the features above, and Google for sign-in.
• Paddle.com, our Merchant of Record, which sells subscriptions to businesses and handles payments, subscription management, tax compliance and invoicing under its own privacy notice.
• Professional advisers such as lawyers and accountants, where needed.
• People the business invites — team members or employees, who see only the access the owner grants them. Calendar-only employees see job details and schedules, not customer quotes, internal costs or private notes.
• Anyone the law requires, where we are legally compelled to disclose information.

Each provider acts under its own terms and privacy notice. Rice Digital LLC is established in Ohio, United States, and data is stored and processed there; if you serve customers elsewhere, that means their information is handled there.

Every business's data is separated from every other business's at the database level, so one account cannot read another's records. Access requires a signed-in session with the right role. Secrets and API keys stay on the server and are never sent to a browser. Customer quote links and appointment links use unguessable, expiring tokens, and job photos use short-lived private links instead of public URLs. Internal costs and profit margin are never included in customer-facing quotes or printed PDFs.

We keep records while the business's account is active, because the app needs them to run conversations, quotes and schedules. When a business cancels or closes its account, we keep its data for 90 days (so it can resubscribe or export records) and then delete or anonymise it. Job photos used for AI review are not stored; saved job-completion photos follow the same 90-day rule.

Limited billing and tax records may be kept longer where the law requires it, and backups roll off within that same 90-day window.

The app does not yet offer a self-service button to erase a whole account. To close an account or have its data deleted, write to ricedigital.llc@gmail.com and we will confirm the request and tell you what is removed and what must be kept (for example, records we are legally required to retain).

Depending on where you live, you may be able to request access to your information, a copy of it, correction of inaccuracies, deletion, or that we stop processing it. You can also object to messages: replying STOP to a text ends further automated messages to that number.

Business owners can correct or remove their own records inside the app, and can change automation, quiet hours and chatbot settings at any time. To make a request about personal data, contact ricedigital.llc@gmail.com.

The service is for businesses and is not directed at children. We do not knowingly collect information from anyone under 16. If you believe a child's information has reached us, contact us and we will remove it.

If we change this policy we will update the date at the top and, for material changes, tell you in the app or by email before they take effect.

Questions, requests or complaints about this policy: ricedigital.llc@gmail.com.