This policy explains how Front&Center (“we”, “us”) collects and uses personal information when you use our website, dashboard, and phone receptionist service. We aim to follow Canadian privacy expectations (including PIPEDA and applicable provincial laws).
What we collect
- Account data: email, business name, profile/setup answers, owner/staff phone numbers
- Telephony data: caller ID, call times, duration, transcripts, call summaries, and call audio recordings (recording is on by default; each business can turn it off)
- SMS content needed to run follow-ups and owner alerts
- Usage and device/log data needed to secure and operate the product
- Billing identifiers from Stripe (card numbers are handled by Stripe, not stored by us)
How we use information
To provide the receptionist, route and summarize calls, send SMS, notify business owners, bill subscriptions, prevent abuse, and improve reliability. We do not sell personal information.
Subprocessors
We use service providers to operate the product, including Twilio (voice/SMS), OpenAI (speech and language), Supabase (authentication), Stripe (payments), hosting providers (for example Vercel and Railway), Resend (email alerts, if enabled) and Sentry (error monitoring). Only if you connect them, we also send data to Google Calendar or Microsoft Calendar (bookings), Jobber and HubSpot (jobs, contacts and call summaries), and Stripe Connect (deposit payments, paid into your own Stripe account). If you turn on phone notifications, alerts go through your browser's push service. Cloudflare Turnstile checks that visitors to our public forms are not bots. Google Ads, Google Analytics (GA4) and the Meta pixel load on our marketing pages only after you accept cookies. Some providers process data in the United States or other countries. By using the service, you understand that information may be transferred and stored outside Canada with contractual and technical safeguards appropriate for a SaaS product.
Phone calls, recordings, and AI
When recording is on, callers always hear a notice that the call is recorded. Whether the AI also says it is a virtual assistant is each business's choice. Businesses can turn recording off. Recordings, transcripts and summaries belong to the business; callers can ask the business to delete theirs, and the business can ask us.
We don't use callers' conversations to train AI models, and our AI provider's API terms don't allow it to either. Promotional and follow-up texts to customers name the business and tell them they can reply STOP to opt out; replying STOP opts a number out of future texts from that business. Call recordings are stored with our telephony provider (Twilio) in the United States.
Cookies and similar technologies
We use cookies and similar technologies for sign-in sessions, security, and basic product operation. Our marketing pages may also use hosting/analytics tooling from our providers. Advertising and analytics cookies (Google Ads, GA4, Meta) are off until you accept them, and you can change your choice at any time. You can also control cookies through your browser settings; some features may not work if you block them.
If you accept on our cookie banner, our pages also load tags from Google (Google Ads and Google Analytics) and Meta, so we can see which ads bring visitors and sign-ups. If you decline, those tags don't load. You can change your choice anytime with “Cookie settings” at the bottom of our pages.
When you first arrive, we also remember on your device which link or ad brought you here (campaign tags in the link, the page you landed on, and the site you came from) for 90 days. If you create an account, it's saved with your account so we know which campaigns work.
Retention
Call recordings are deleted after 12 months. Call records, transcripts, and related dashboard data are kept while your account is active so you can review them. After account closure, we delete or anonymize data within a reasonable period unless we must keep records for legal, security, or accounting reasons.
Your choices and rights
You can update business settings in the dashboard, cancel your subscription, download your data and delete your account from Settings, and request access, correction, or deletion of personal information by emailing us. Depending on where you live, privacy laws may give you additional rights. We will respond to requests within a reasonable time.
Who is responsible
Front&Center's Privacy Officer is responsible for the personal information we hold and for answering privacy questions and requests. Contact them at support@frontandcenter.ca with “Privacy request” in the subject.
Security
We use industry-standard safeguards appropriate to a small SaaS product (encrypted transport, access controls, least-privilege keys). No method of transmission or storage is perfectly secure.
Children
The service is intended for businesses, not for children under 13 (or the age required by local law). We do not knowingly collect personal information from children.
Changes
We may update this policy from time to time. The “Last updated” date at the top will change when we do. Continued use of the service after an update means you accept the revised policy.
Contact
Privacy questions or requests: support@frontandcenter.ca