Privacy Policy

Intake form.When you complete our client onboarding form, we receive: your name, business name, email address, phone number, business address, hours of operation, service descriptions, a domain preference, any logo or photos you upload, and any notes you include. We use this information to build, configure, deliver, and support the services you requested, and as described in "How we use your information."

Contact form. If you fill out our general contact form, we receive your name, business name, and the email address or phone number you provide, along with your message.

Personal AI assistant.If you subscribe to the personal assistant service, we receive what you and your assistant exchange: your messages to it, the facts and preferences it is asked to remember, reminders and schedules you create, and — only if you connect them, and only within the scopes you approve — calendar, contact, and email data from your connected accounts. Details, retention, and deletion for this category are in "Personal AI assistant data" below.

AI receptionist chat transcripts. If you interact with an AI-powered chat widget deployed on a site we built (including this one), your chat messages, and any contact information you share during that conversation, may be logged and transmitted to the business operating that site and to us as the service provider. These transcripts are used to respond to your inquiry and to support and improve the service as described below. They are not used for advertising.

AI phone calls. We operate an AI phone line at (605) 315-3900 and provide client AI phone receptionist services. Calls may be recorded and transcribed. Audio, transcripts, caller phone number, and call metadata may be collected and shared with the business you called and with us as service provider, to answer the call and maintain service quality. If you do not consent to recording, hang up and contact us by email or web form instead.

Google Business Profile connection. If you connect a Google Business Profile via our OAuth integration, we receive access tokens and the listing data you approve. You can revoke that access at any time in your Google account settings.

Analytics. We use Vercel Analytics, which is cookieless and does not track you across sites. We see aggregate page views and anonymous interaction events, never your identity.

Local storage.Certain site preferences (such as audio mute state) may be stored in your browser's local storage. This data stays on your device and is not transmitted to us.

We do not use advertising trackers, third-party ad pixels, or cross-site cookies on this website.

We use the information we collect to: respond to inquiries; build, deliver, and maintain client websites and AI receptionist services; process billing through our payment processor; and improve the quality of our services. We do not use your chat content to train AI foundation models. We may review transcripts internally and use de-identified interaction data to fix bugs and improve prompts, routing, and answer quality, not to train third-party base models. We do not sell, rent, or trade your information with anyone. We do not add you to a newsletter.

If you are a LegacyForge client, the leads and customer data your service collects are yours. Inquiries, contact details, chat transcripts, call recordings and transcripts about your customers and prospects belong to you, not to us. We hold and process them as your service provider: to run, secure, support, and improve the service, to fix problems, and to prevent abuse — plus aggregated or de-identified analytics that cannot reasonably identify you or your customers. We do not sell your leads or customer data and we do not pass them to anyone else's marketing.

Export. While your account is active you can ask us for an export of your leads and of the materials you gave us, and we provide it in a common format (such as CSV or JSON) where feasible. After you cancel, that export stays available on request for 30 days. After that window we delete or de-identify your leads from our production systems within a further 30 days, except for time-limited backups and anything we must keep for legal, tax, billing, or security reasons.

This is a privacy statement about data, not an ownership statement about our software. Who owns the site design, code, and AI configuration is set out in the Terms of Service.

If you use our personal AI assistant service, the assistant necessarily handles personal information you choose to share with it — messages, reminders, calendar and contact details from accounts you connect, preferences, and facts it is asked to remember. That data is kept in a per-customer, logically isolated instance — your assistant's memory and files are not commingled with any other customer's. We do not use your data to train AI models, and we do not sell it or share it across clients. Underlying AI-provider infrastructure is shared computing subject to that provider's safeguards; where a provider processes your data to serve you, we use configurations that do not permit the provider to train on it. Connected-account access uses the account provider's own authorization system (OAuth), limited to the scopes you approve, and before your service begins, your welcome packet lists the exact AI providers and connected-account scopes your assistant uses. We are not a HIPAA covered entity or business associate; if regulated data is shared with the assistant despite our instruction not to, it is processed only to operate your service under this policy and deleted on the same schedule below.

You can request a full export of your assistant's memory, or its deletion, at any time — not just at the end of service. Deletion completes within 30 days, residual copies in routine backups cycle out within 90 days, and when your service ends we offer the export and perform the deletion by default. Assistant memory follows this schedule rather than the 24-month transcript default under Data retention.

Accounts must be held by adults, and the service is not directed at children under 13. If you connect accounts or share details involving other people — family reminders, household schedules, contacts — you are responsible for having the authority to do so. Please do not share information you are not comfortable having processed by an AI system; the assistant is not designed to receive or store medical records or other specially regulated data.

Billing for our services is handled by Stripe, Inc.We do not store your payment card numbers, CVV codes, or full card details on our systems at any point. Stripe's collection and use of payment information is governed by Stripe's Privacy Policy.

To deliver our services we rely on the following categories of service providers. Each processes your information only to the extent needed to perform their function:

• Vercel: website hosting and deployment.
• Stripe, Inc.: payment processing (see Payment data above).
• xAI Corp.: AI language model provider. Chat-widget messages and AI receptionist conversations (including "Ada" on this site and receptionists we host for clients) are processed by xAI Grok models via the xAI API to generate replies and operate the service.
• Anthropic, PBC: AI language model provider used in our internal build and operations pipeline (for example drafting and site engineering). Visitor-facing chat and receptionist traffic is not sent to Anthropic.
• Voice-AI and telephony providers: call routing, recording, and speech-to-text for our AI phone lines. Depending on the line, this currently includes Vapi, Inc. and xAI (Grok voice), plus the telephone carriers that connect the call.
• Google LLC: Google Business Profile listing management, if you connect a profile through our OAuth integration.
• Email / notification providers: used to deliver form submissions to our team inbox.

We do not share your information with these providers beyond what is necessary to operate the services you engage with.

We use commercially reasonable administrative and technical measures to protect your information, including encryption in transit and access controls. No method of transmission or storage is 100% secure. Payment card data is handled by Stripe and is never stored by us. If we learn of a breach affecting your personal information, we will notify you as required by applicable law.

This website does not set advertising or tracking cookies. Vercel Analytics operates without cookies. We may set minimal session-related cookies required for form submission security. Your browser's local storage may hold site preferences you set (see above).

Contact and intake form submissions are retained as ordinary business correspondence for as long as they are relevant to an ongoing or potential engagement. AI chat transcripts and call recordings are retained for up to 24 months to support service delivery and quality improvement, unless a longer period is required for legal, billing, or security purposes. Google Business Profile access tokens are kept only while your profile is connected. If you request deletion, we will remove your information unless we are required to keep it, for example records tied to a billing event or active contract. If you are a client and you cancel, the export and deletion timeline in "Who owns client data" above governs the leads and customer data your service collected. Personal AI assistant data — memory, reminders, conversation history, and connected-account data — does not follow the 24-month default: it follows the 30/90-day schedule in "Personal AI assistant data" above, and that section's 30-day deletion completion window controls over the general 30-day response window below.

You may request access to the information we hold about you, ask us to correct inaccurate information, or ask us to delete it. We do not sell personal information and do not share it for cross-context behavioral advertising. We will not discriminate against you for exercising your privacy rights. Email sales@legacyforgeai.com with your request and we will respond within 30 days. Depending on where you live, additional rights may apply under applicable state or federal law. Contact us to discuss.

We are a United States company and your information is processed in the United States.

Our services are designed for adults — whether for business or personal use, account holders must be 18 or older. Neither this website nor any of our services is directed at children under 13, and we do not knowingly collect personal information from anyone under 13. Family-reminder details about a minor are limited to what an adult account holder chooses to enter; we do not create profiles for minors. If you believe we have inadvertently collected information from a child, contact us and we will promptly delete it.

This Privacy Policy is governed by the laws of the State of South Dakota, USA.

If we update this policy, we will post the revised version here with an updated date. Material changes will not be applied retroactively to information collected under an older version of this policy.

LegacyForgeAI LLC · Sioux Falls, South Dakota
Privacy inquiries: sales@legacyforgeai.com