Draft — pending legal review

Privacy Policy

Effective date: October 2026

This Privacy Policy explains how Remedy Circuit LLC (“Remedy Circuit,” “we,” “us,” or “our”) collects, uses, shares, and protects personal information in connection with our website at remedycircuit.com and our hosted customer relationship management (CRM) service (the “Service”). If you have questions, contact us at founder@remedycircuit.com.

1. Who this policy covers

Remedy Circuit provides a CRM service to small businesses (“Customers”). Each Customer gets a private workspace to manage its contacts, pipeline, bookings, quotes and invoices, messaging, and AI agents for web chat, SMS, and phone. This policy covers two kinds of information:

• Information about our Customers and website visitors — for which Remedy Circuit decides how the information is used.
• Information about our Customers’ own contacts and customers (“End Users”) — for example, a person who fills out a Customer’s form, books an appointment, chats with a Customer’s web chat, or texts or calls a Customer’s phone number. We process this information on behalf of, and according to the instructions of, the Customer. The Customer is responsible for its own privacy practices toward its End Users, and End Users should contact that business directly with privacy requests. We will assist our Customers in responding to those requests.

2. Information we collect

Information you provide

• Account information: name, email address, password (handled by our authentication provider — we do not store plain-text passwords), business name, and role.
• Billing information: billing contact details and subscription status. Card numbers are collected and processed directly by our payment processor and are not stored by us.
• Customer content: information Customers enter or import into the Service, such as contact names, email addresses, phone numbers, notes, deals, appointments, quotes, invoices, and messages.
• Communications: messages you send us, such as support requests.

Information collected through the Service

• Messaging and call data: the content of SMS, WhatsApp, email, social-media direct messages, and web chat conversations sent or received through the Service; phone numbers; delivery status; opt-out status; and, for AI phone calls, call metadata (such as duration and outcome), AI-generated call summaries, and transcripts. Call recording through the in-browser phone dialer is off by default and is turned on only by a Customer.
• Form and booking submissions: information End Users submit through a Customer’s forms or booking pages, along with marketing attribution details such as UTM parameters, referring page, and approximate location derived from IP address or phone country code.
• Technical information: IP address, browser and device type, pages viewed, and similar log data, used to operate and secure the Service. Our website uses cookies needed for sign-in and may use analytics, advertising, or live-chat tags where enabled.

3. How we use information

• To provide, operate, maintain, and secure the Service.
• To send and receive messages, place and answer calls, and deliver appointment reminders and notifications on behalf of Customers.
• To generate AI responses, summaries, and suggestions when a Customer enables AI features.
• To process payments and manage subscriptions.
• To communicate with Customers about their accounts, security, and support, and to respond to inquiries.
• To detect and prevent fraud, spam, and abuse, and to comply with legal obligations.

We do not sell personal information, and we do not share personal information for cross-context behavioral advertising. We do not use End User information to market our own products to End Users.

4. SMS and text messaging

The Service is used to send text messages, both by Remedy Circuit to its Customers and by Customers to their own End Users. These may include appointment reminders and confirmations, customer care conversations, account notifications, and — only where the recipient has given consent — marketing messages.

• How consent is collected: recipients opt in by, for example, checking an unchecked consent box on a web form that discloses text messaging, providing a mobile number when booking an appointment to receive reminders, or texting the business’s number first. Marketing messages are sent only with the recipient’s express written consent, and consent is never a condition of purchase.
• Message frequency varies. Message and data rates may apply.
• Reply STOP to any message to opt out, and HELP for help. Opt-outs are recorded automatically, and no further messages are sent to that number other than a confirmation of the opt-out.
• Carriers are not liable for delayed or undelivered messages.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties. This does not prevent sharing with the service providers that deliver messages on our behalf (such as our SMS provider and wireless carriers), solely to provide the messaging service.

See our SMS / Text Messaging Terms for more detail.

5. Service providers we use

We share information with service providers that process it on our behalf, only as needed to run the Service and subject to their own privacy and security commitments. These include providers in the following categories:

• Hosting and infrastructure: Vercel.
• Database and authentication: Google Firebase (Cloud Firestore and Firebase Authentication).
• Payments: Stripe.
• Email delivery: Resend.
• SMS, WhatsApp, and voice: Twilio, and the wireless carriers that deliver messages and calls.
• AI model and voice providers: OpenRouter (which routes requests to AI model providers), Vapi (AI phone calls), and ElevenLabs (AI voice for web chat), used when a Customer enables AI features. The conversation content needed to generate a response is sent to these providers.
• Other features a Customer chooses to enable, such as calendar sync, social-media messaging and posting, website tools, maps, and scheduled-job processing.

We may also disclose information if required by law, to protect the rights, safety, or property of Remedy Circuit, our Customers, or others, or in connection with a merger, acquisition, or sale of assets, in which case this policy will continue to apply to the information transferred.

6. Data retention

We keep account information and Customer content for as long as the Customer’s account is active and as needed to provide the Service. After an account is closed, we delete or de-identify Customer content within a reasonable period, unless we must keep it longer to meet legal, tax, or accounting obligations, resolve disputes, or enforce our agreements. Some operational logs are deleted automatically on a shorter schedule. Opt-out records may be retained so that opt-out requests continue to be honored.

7. Security

We use technical and organizational measures designed to protect information, including per-workspace access controls, encrypted connections, and signed links and webhooks. No system is perfectly secure. See our Security page for details.

8. Your rights and choices

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information, and to object to or restrict certain processing. Customers can update much of their information directly in the Service. To make a request, email founder@remedycircuit.com. We will verify your request before acting on it. If you are an End User of one of our Customers, please contact that business directly; we will support them in responding.

California residents (CCPA/CPRA)

If you are a California resident, you have the right to:

• Know what categories and specific pieces of personal information we collect, the sources, the purposes, and the categories of third parties to whom we disclose it.
• Request deletion of your personal information.
• Correct inaccurate personal information.
• Opt out of the “sale” or “sharing” of personal information — we do not sell or share personal information as those terms are defined under California law.
• Limit the use of sensitive personal information — we do not use sensitive personal information for purposes that give rise to this right.
• Not be discriminated against for exercising these rights.

The categories of personal information we collect are described in Section 2: identifiers (such as name, email, and phone number), commercial information (such as subscriptions, quotes, and invoices), internet or network activity, approximate geolocation, audio-derived information (such as call transcripts and summaries), and the content of communications. You may use an authorized agent to submit a request on your behalf, subject to verification.

9. Children’s privacy

The Service is intended for businesses and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us and we will delete it.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page with a new effective date and, for material changes, notify Customers by email or in the Service.

11. Contact us

Remedy Circuit LLC
Los Angeles, California
Email: founder@remedycircuit.com