Privacy Policy

AfterTone is operated by AfterTone LLC, a South Carolina limited liability company, 280 Wild Olive Dr., Columbia, South Carolina 29229. This policy explains how AfterTone handles information through its websites, controlled pilot, missed-call recovery service, Customer Workspace, and optional Nova virtual receptionist.

Our role

Business customers decide why and how AfterTone is used for their callers and prospects. For that customer data, AfterTone acts as a service provider or processor and follows the business customer's documented instructions, this policy, and applicable law. AfterTone is responsible for account, application, billing, security, support, and direct website information it collects for its own business purposes.

Information we process

Depending on enabled features, we may process business and signer details; caller and recipient telephone numbers; call timestamps, routing, duration, outcomes, and identifiers; SMS content and delivery status; opt-in, opt-out, and complaint records; voicemail audio; Nova call transcripts and summaries; appointment and calendar information; workspace assignments and notes; support communications; payment and subscription references; and technical, security, and audit records. Payment-card data is handled by the payment processor and should not be entered into ordinary AfterTone forms or messages.

Nova voice and artificial intelligence

When a customer enables Nova, callers hear that Nova is a virtual receptionist and that the call may be transcribed for service and quality. Twilio and speech-processing services made available through Twilio process live caller audio so Nova can understand and respond; AfterTone does not intentionally retain that live caller audio. AfterTone may retain the resulting transcript, summary, appointment or lead record, and separately chosen voicemail audio. OpenAI may process text to generate a response, and ElevenLabs may process reply text to create speech. AfterTone does not create voiceprints, perform biometric identification, or use caller content to train a general-purpose model. AI responses can be inaccurate, so customers must review material appointments, leads, and escalations.

How we use information

We use information to provide configured call, voicemail, messaging, receptionist, workspace, calendar, reporting, billing, and support functions; document consent and opt-outs; secure and troubleshoot the service; prevent fraud or abuse; comply with law; and improve reliability. We use identifiable caller or customer information only as reasonably necessary for those purposes or as instructed by the applicable business customer.

Google user data

If a customer connects Google Calendar or another supported Google service, AfterTone uses the authorized data only to provide the user-facing feature the customer selected, such as viewing availability or creating, changing, and canceling appointments. Access tokens and Google user data are not used for advertising, sold, or used to train generalized AI models. We limit access to the permissions needed for the feature and handle Google user data in accordance with the Google API Services User Data Policy, including its Limited Use requirements. A customer may revoke Google access through AfterTone or the customer's Google account.

Service providers and disclosures

Providers supporting telecommunications and live speech processing, AI response generation, text-to-speech, hosting, databases, email, analytics, calendars, payments, security, and professional services may process limited information for AfterTone. Current key categories include Twilio and its configured speech providers, OpenAI, ElevenLabs, Google, Render, Supabase, Stripe, and contracted email or analytics providers. They receive only the information reasonably needed for their role and are not authorized by AfterTone to use mobile information, consent records, or customer data for their own advertising or lead generation. We may also disclose information when required by law, to protect rights or safety, or as part of a business transaction subject to appropriate confidentiality and notice.

No sale or cross-context advertising

AfterTone does not sell personal information and does not share it for cross-context behavioral advertising. Mobile information, telephone numbers, SMS consent records, message content, voicemail, transcripts, and appointment information are not shared with third parties or affiliates for their marketing or promotional purposes. AfterTone does not use one customer's identifiable contacts to benefit another customer or generate leads for another customer.

De-identified information

AfterTone may use aggregated or de-identified information for internal analytics, security, reliability, benchmarking, and product development. We take reasonable measures designed to prevent association with an individual, household, or customer; do not attempt to re-identify it except to test safeguards; and do not sell those outputs.

Retention and security

We retain each category only for as long as reasonably necessary for the service, customer instructions, consent and opt-out evidence, security, accounting, disputes, legal obligations, or a documented legal hold. Timing varies by record type and provider lifecycle. When information is no longer required, we delete, de-identify, or securely dispose of it, subject to ordinary backup and provider deletion cycles. We use encrypted transport, access controls, application-level access restrictions, audit records, credential protections, and other safeguards appropriate to the pilot. No system is completely secure.

Your choices and requests

You may reply STOP, STOPALL, CANCEL, END, QUIT, UNSUBSCRIBE, REVOKE, or OPTOUT, or otherwise clearly ask us to stop SMS messages. You may request access, correction, export, or deletion by contacting us. When a business customer controls the information, we may direct the request to that business or assist it in responding. We may retain records required for opt-out suppression, contracts, security, disputes, or law.

Children and excluded sensitive uses

The service is intended for businesses and adults seeking local services and is not directed to children under 13. The controlled pilot is not approved for emergency dispatch, debt collection, handling protected health information or payment-card data, collecting government identifiers or passwords, or providing legal, medical, or financial advice. Customers must not enable a sensitive or regulated workflow without a separate written review and approval.

Changes

We may update this policy as the service changes. The effective date identifies the current version. Material changes apply prospectively, and we will provide any notice required by law or contract.

Contact

Email [email protected]. Legal notices may also be mailed to AfterTone LLC, 280 Wild Olive Dr., Columbia, South Carolina 29229.