Privacy Policy

LeadVault is operated by Baldwin Digital. We collect the minimum information needed to run an AI phone receptionist for your business: account info, billing info, and call data. We don't sell your data, don't train AI models on your calls, and don't share your data with other customers. Details below.

Account information

Name, email, company name, and password (hashed) collected at signup, plus your preferred area code and any company configuration (greeting, hours).

Billing information

Collected and processed by Stripe. We never see your full card number. We store a Stripe customer ID and subscription ID to operate billing.

Call data

For each call received on your LeadVault phone number: timestamps, duration, caller phone number (when available), full audio recording, transcript, and the AI-generated structured summary.

Usage data

Standard web-app logs: IP address, browser, page visits, action timestamps. Used for security, debugging, and improving the product.

• To operate the AI receptionist service for your account
• To send you welcome emails, call summaries, and urgent alerts
• To bill you for your subscription
• To diagnose issues and improve the product
• To communicate operational updates (downtime, pricing changes, etc.)
• To comply with legal obligations

We do not use your call data to train AI models — yours or anyone else's.

LeadVault offers an optional SMS notification program operated by Baldwin Digital. SMS is not required to use the service, and you only receive text messages if you separately opt in. This section describes the SMS program in detail for carrier and compliance purposes.

Program description

If you opt in, after each inbound call handled by your AI receptionist we may send a text message summary to the mobile phone number on your LeadVault account. Each summary includes the caller's name (when captured), caller phone number, and a short description of the call so you can follow up on the lead. We may also send occasional account-related service messages (for example, critical outage or security alerts).

How you opt in

Opting in to SMS is a separate, optional choice — it is not a condition of purchasing or using LeadVault, and it is not bundled with our Terms of Service. At signup on leadvault.baldwinseo.com, you will see two distinct checkboxes: one to agree to the Terms, Privacy Policy, and Refund Policy (required), and a separate optional checkbox to consent to SMS. You can leave the SMS checkbox unchecked and still create an account and use every feature of LeadVault. You can also enable or disable SMS at any time from your account Settings page. We record the date and time you opted in as proof of consent.

Message frequency

Message frequency varies and depends on how many calls your LeadVault phone number receives. There is no fixed schedule — you will typically receive one text message per completed inbound call on your account.

Message and data rates

Message and data rates may apply. Check with your mobile carrier for details on your plan. LeadVault does not charge for the SMS messages themselves, but your wireless carrier may.

How to opt out (STOP)

You can cancel SMS notifications at any time by replying STOP to any LeadVault text message. After you reply STOP, you will receive one confirmation message and then no further SMS from the program. To re-subscribe, reply START or re-enable SMS in your LeadVault account Settings.

How to get help (HELP)

For help with SMS notifications, reply HELP to any LeadVault text message, or email [email protected].

Carrier disclaimer

Carriers are not liable for delayed or undelivered messages. Message delivery is subject to carrier availability and may be affected by factors outside LeadVault's control.

Privacy of SMS consent and mobile number

The mobile number you provide for SMS notifications, and your consent to receive them, are used solely to deliver call summaries and related service messages. Mobile opt-in data and consent information are not shared with third parties or affiliates for marketing or promotional purposes.

LeadVault uses the following third parties to deliver the service. Each processes only the data needed for its function and is contractually bound to protect it.

• Vapi (Vapi.ai) — voice AI orchestration. Handles live call audio, transcription, and AI responses.
• Twilio — telephony and SMS delivery. Provides and operates the phone number on your account and delivers text message summaries.
• Anthropic (Claude) — LLM used to categorize call transcripts into structured data.
• Deepgram — speech-to-text transcription (via Vapi).
• ElevenLabs — text-to-speech voice synthesis (via Vapi).
• Supabase — database and authentication. Stores your account and Customer Data.
• Stripe — payment processor. Handles subscriptions and card data.
• Resend — transactional email delivery (welcome emails, call summaries).
• Netlify — website and serverless function hosting.

We share your data only with the third-party providers listed above, strictly as needed to operate the service. We do not sell your personal information, call data, or contact lists. We don't share one customer's data with another customer.

We may disclose data if required by law (e.g., valid subpoena or court order). We'll notify you unless legally prohibited from doing so.

Call recordings, transcripts, and summaries are retained per your plan:

• Starter: 30 days
• Pro: 90 days
• Business: 365 days

Account info is retained as long as your account is active, plus up to 90 days after cancellation to allow for reactivation. You can request immediate deletion of all data at any time by emailing us (see below).

We use industry-standard measures to protect your data: TLS for data in transit, encryption at rest (via Supabase's Postgres), row-level security to scope data to your account, strict access controls, and audit logs.

No system is perfectly secure. If we become aware of a breach affecting your data, we'll notify you within 72 hours.

You have the right to: access your data, correct inaccuracies, delete your account and associated data, export your Customer Data in a machine-readable format, and object to processing.

To exercise any of these rights, email [email protected]. We'll respond within 30 days.

People calling your LeadVault phone number have their voice recorded and their speech transcribed. You are responsible for complying with any consent-to-record laws in your state (e.g., one-party vs. two-party consent). We can configure an up-front disclosure in the AI's greeting if your jurisdiction requires it — contact us to request this.

LeadVault is a business-to-business product. We do not knowingly collect personal information from anyone under 18.

We may update this Privacy Policy. Material changes will be announced via email with at least 14 days' notice.

Baldwin Digital — LeadVault
Email: [email protected]