Privacy Policy

1. Overview

This policy explains what information Handled AI (“we,” “us”) collects, how we use it, and who we share it with. It covers two kinds of people: the business owners who sign up for our Service, and the leads those businesses collect through it.

2. Information We Collect

From businesses using the Service:

• Account information: name, email, password (handled by our authentication provider, Supabase)
• Business information: business name, industry, services, service area, contact details
• Billing information: handled entirely by Stripe — we never see or store your card details
• Usage data: how you use the dashboard, for improving the Service

From leads (a business’s customers/prospects):

• Name, phone number, email, and any details submitted through a business’s lead capture page
• Messages exchanged with the business through the Service’s SMS/email follow-up

Lead information is collected and controlled by the business using our Service, not by us directly — we process it on that business’s behalf.

3. How We Use Information

• To provide the Service: capturing leads, AI qualification/scoring, drafting and sending follow-up messages, scheduling, reporting
• To process payments and manage subscriptions
• To communicate with you about your account or the Service
• To maintain security and prevent misuse
• To improve the Service

We do not sell your information or a business’s lead data to third parties.

4. Third-Party Service Providers

We rely on the following providers to operate the Service. Each processes only the data needed for its function:

• Supabase — database hosting and authentication
• OpenAI — AI lead qualification, message drafting, and marketing analysis (receives lead/business context needed to generate that output)
• Twilio — sending and receiving SMS messages
• Resend — sending and receiving email
• Stripe — subscription billing and payment processing
• Meta (Facebook/Instagram) — for businesses that connect their ad account, to read ad performance and (optionally) publish content
• Google Calendar / Outlook (Microsoft) Calendar — for businesses that connect a calendar, to check existing events for scheduling conflicts and to create an event when an appointment is booked through the Service. We only access the one calendar the business selects, and only for that purpose.

5. SMS & Email Messaging

If you (as a lead) receive a text message from a business using our Service, it’s because that business used our platform to follow up with you after you contacted them. Message and data rates may apply. Reply STOP to any text to opt out of further messages — this is handled immediately and automatically. Every email includes an unsubscribe link.

6. Data Retention

We retain account and lead data for as long as the account is active, and for a reasonable period afterward in case the account is reactivated or as required for legal/accounting purposes. You can request deletion of your account and associated data by contacting us at support@handledintegrations.com.

7. Security

We use industry-standard measures (encrypted connections, access controls, database row-level security) to protect your data. No system is 100% secure, and we can’t guarantee absolute security.

8. Your Rights

Depending on where you live, you may have the right to access, correct, or delete your personal information, or object to certain processing. To exercise these rights, contact us at support@handledintegrations.com. If you’re a lead who wants your information removed from a business’s account, you can also contact that business directly.

9. Children's Privacy

The Service is not directed at children under 13, and we don’t knowingly collect their information.

10. Changes to This Policy

We may update this policy from time to time. We’ll update the “Last updated” date above when we do.

11. Contact

Questions about this policy? Contact us at support@handledintegrations.com.