Privacy Policy

Last updated: [Insert effective date] · Draft prepared as a starting template — Andreas should have this reviewed by a licensed attorney/privacy counsel before publishing live.

This Privacy Policy explains how Framewyre ("Framewyre," "we," "us") collects, uses, stores, and shares information when you use our contractor CRM platform and Clara, our built-in AI voice receptionist and AI project manager (together, the "Service"). It applies to our customers ("Contractors," "you") and, where relevant, to the individuals your business interacts with through the Service (your leads, clients, and subcontractors). Framewyre is currently offered as a beta / early-access product — see our Terms of Service for details.

1. Overview

Framewyre is a SaaS platform: your business's data lives in your own account workspace. We collect information you and your team provide directly, information generated automatically as you use the CRM, and — because Clara is built into the Service — call, SMS, and related data processed as Clara answers phones, sends texts, and helps run follow-ups on your behalf.

2. Information We Collect

2.1 Business & account information

Company name, contact name, email address, phone number, and password (hashed, never stored in plain text).
Billing details processed through our payment processor (we do not store full card numbers ourselves).

2.2 Customer, lead & CRM data you enter

Leads, estimates, invoices, schedules, job/task records, photos, notes, and messages you or your team enter into the CRM.
Information about the subcontractors and clients you manage in your pipeline (names, phone numbers, emails, job addresses).

2.3 Call recordings, transcripts & SMS content from Clara

Caller/recipient phone numbers, call and text timestamps, call duration, and call outcome.
Call audio, and where enabled, call recordings and/or AI-generated transcripts of calls Clara answers or places on your behalf, used to power the conversation, log the outcome to your CRM, and (where you have this enabled) provide you a record of the call.
The content of SMS text messages Clara sends and receives on your behalf (for example, appointment confirmations, review requests, and follow-up messages) and any reply a recipient sends back.
Structured details Clara asks callers/texters for (name, project type, budget, timeline, and address) and any appointment she books, logged into your CRM pipeline.

2.4 Email content processed for automation features

Where you enable review-request or follow-up email features, the relevant email content (e.g., recipient address, subject, and body of automated messages sent on your behalf) is processed and sent through our email delivery provider.

2.5 Usage & device data

Log data such as IP address, browser type, device identifiers, pages viewed, and timestamps, collected automatically to operate and secure the Service.

3. How We Use Information

Provide, operate, and maintain the CRM and Clara features you've enabled;
Process payments and manage your subscription;
Power Clara's calls, SMS, and email automation, and route the results into your pipeline (leads, bookings, messages, review requests, follow-ups);
Send you service communications (billing notices, security alerts, product updates);
Monitor, secure, and improve the Service, including detecting abuse of calling/texting/email features;
Comply with legal obligations and enforce our Terms of Service.

We do not sell your data, and we do not use one customer's data to train models used for another customer's account.

4. Third-Party Service Providers & Subprocessors

We use a small set of trusted providers ("subprocessors") to deliver the Service. They may only process data as necessary to provide their service to us, under contractual confidentiality/security obligations:

Google Cloud Platform / Firestore — application hosting and primary database storage for your account and CRM data.
Twilio — the telephony/SMS platform used to place and receive Clara's phone calls and to send/receive SMS text messages on your behalf.
Google Gemini (Google AI) — the AI model used to power Clara's conversational call handling, message drafting, and related AI features.
Gmail / SMTP email delivery — used to send account, notification, and automated follow-up/review-request emails on your behalf.
Payment processor — used to process subscription billing (we do not store full card numbers ourselves).

We may add or change subprocessors as the Service evolves; material changes will be reflected in an update to this Policy. We do not sell personal information or your data to third parties, and we do not share your account's data with other customers.

Important — Clara

5. Clara Voice & SMS Processing

Clara — provided on the Core + Clara and Premium plans — answers inbound calls using real-time conversational AI, can place certain outbound calls (for example, about overdue tasks, invoices, or appointment reminders), and sends/receives SMS text messages on your behalf — such as appointment confirmations, review requests, and follow-ups to your customers and leads. This section explains how that call/SMS data is handled and what you, as the Contractor, are responsible for.

5.1 What Clara processes

Live call audio, processed in real time so Clara can hold a conversation, ask qualifying questions, and respond — call recordings and/or transcripts may be generated and retained as described in Section 7 (Data Retention), where the feature is enabled on your account;
Caller/recipient phone number, call/text time, duration, and a short summary of the outcome (e.g., "booked estimate," "took a message," "sent review request");
The content of SMS messages Clara sends and any replies received;
Any personal information a caller or texter shares (name, project type, budget, timeline, address) that Clara logs into your CRM pipeline as a lead, note, or booked appointment.

5.2 You are responsible for obtaining caller/recipient consent

You (the Contractor/customer) must obtain any consent required by law from the people Clara calls or texts, or who call/text you — including any disclosure required by state law that a call is being handled by an AI voice assistant (see 5.3 below), and the SMS consent obligations described in Section 6. You remain responsible for confirming your specific use complies with applicable law, including the federal Telephone Consumer Protection Act (TCPA) where relevant.

5.3 Two-party consent states (including Florida)

Florida — where Framewyre is based — is a "two-party" (all-party) consent state under the Florida Security of Communications Act (Fla. Stat. § 934.03): every person on a call must be told the call is being handled by an AI assistant before that AI-assisted portion of the call proceeds. Other two-party/all-party consent states include, without limitation, California, Illinois, Pennsylvania, and Washington — the specific list and requirements can change, so confirm current law for every state your callers are located in.

Clara includes a default spoken disclosure at the start of calls (e.g., "this call is handled by an AI voice agent") — you can review this disclosure in your account's Clara settings.
You must keep this disclosure enabled for any jurisdiction that legally requires it, and must not configure Clara in a way that removes or obscures the required notice.
If you or your subcontractors also record calls independently (e.g., on a personal phone) outside of Clara, that recording is not covered by this section and you must separately ensure compliance.

5.4 Storage & your controls

Call/SMS data described in 5.1 is stored within your account workspace, encrypted in transit, and accessible only to authorized users in your account (see Section 8);
Any lead, note, or appointment Clara creates from a call or text becomes ordinary CRM content, retained the same way as anything else you enter into Framewyre (see Section 7);
Live call audio and message content is processed by the third-party providers listed in Section 4 (Twilio for calling/SMS, Google Gemini for AI processing) strictly to power Clara's functionality — they do not retain or reuse this data beyond providing that service to us and to you.

This section is informational and not legal advice. Consent, disclosure, and telemarketing/messaging laws vary by state/country and change over time. Confirm your specific obligations with a licensed attorney before enabling Clara for outbound calling or texting in any jurisdiction.

7. Data Retention

Account and CRM content is retained for as long as your account is active, plus a limited export/grace period after cancellation (see our Terms of Service, Section 13).
Call recordings, transcripts, and SMS content processed by Clara are retained for as long as reasonably necessary to provide the Service, support your account, and meet legal/record-keeping obligations, after which they are deleted or de-identified on a rolling basis. Any lead, note, or appointment Clara creates from a call/text is retained as ordinary CRM content per the policy above.
We may retain limited data longer where required for legal, security, tax, or dispute-resolution purposes.

8. Data Security

We use industry-standard safeguards — including encryption in transit, access controls, and authentication requirements, built on infrastructure provided by Google Cloud Platform — to protect your data. No system is 100% secure; if we become aware of a breach affecting your data, we will notify you consistent with applicable law.

9. Your Privacy Rights

Depending on where you or the individuals in your CRM are located, you (or they) may have rights to access, correct, export, or delete personal information, and to opt out of certain processing (for example, under state privacy laws such as the California Consumer Privacy Act, or under the EU/UK GDPR where applicable). As the Contractor, you are the data controller for the lead/client/sub information you enter into Framewyre; we act as your service provider/processor and will assist you in responding to verified requests. To exercise rights regarding your own account information, or to request access to or deletion of your data, contact us at the details in Section 13.

10. Cookies & Similar Technologies

Our marketing website and application may use cookies and similar technologies (such as local storage) to keep you logged in, remember preferences, and understand aggregate usage of the site. You can control cookies through your browser settings; disabling them may affect some functionality (for example, staying logged in).

11. Children's Privacy

The Service is intended for business use by adults and is not directed to children under 13 (or the relevant minimum age in your jurisdiction). We do not knowingly collect personal information from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time, including as our subprocessors or features change. Material changes will be communicated by email or an in-app notice before they take effect. The "Last updated" date at the top of this page reflects the most recent revision.

13. Contact

Questions about this Privacy Policy, or requests regarding your data, can be sent to info@framewyre.com or (239) 555-0142.

This page was drafted as a starting template. It is provided for convenience only, does not constitute legal advice, and must be reviewed and finalized by a licensed attorney/privacy counsel before this site goes live.