Privacy Policy

1. If you run or work for a business on Gesser OS

We collect:

• Account details: your name, email, password (stored as a hash by our sign-in provider) and two-step verification settings.
• Business details: company name, phone, address, service area, hours, logo, services and prices.
• Billing details: your plan and payment status. Card numbers are entered on Stripe's pages and are never stored by us.
• Usage and technical data: pages used, actions taken, device and browser, IP address, and logs kept for security and troubleshooting.
• Location, only while a team member has clocked in and shared it for dispatch.

We use this to provide the service, keep it secure, bill you, support you, and tell you about changes to the service.

2. If you are a customer of a business that uses Gesser OS

The business you contacted decides what is collected and why; we process it for them. Depending on how you contacted them, this may include:

• Your name, phone number, email and service address.
• What you asked for: the problem, the equipment, photos you sent, your appointment, estimates, invoices and payment status.
• Messages you exchanged with the business by web chat, text, email, Messenger or Instagram.
• Phone calls: the business's line may be answered by an AI assistant. Calls may be recorded and transcribed, and the assistant says so when the call starts.

To see, correct or delete this information, contact the business you dealt with. If you cannot reach them, write to us and we will pass your request on.

3. AI processing

Messages, call audio and transcripts are sent to AI providers so the assistant can understand and reply. We send only what is needed for that task. We do not sell this information, and we do not use your customers' information to advertise to them.

If a business connects its own AI tool to its workspace, that tool receives the data the business authorizes, under that tool's own privacy terms.

4. Who we share information with

We share information only with companies that help us run the service, under contracts that limit what they can do with it:

• Supabase — database, file storage and sign-in.
• Vercel — application hosting.
• Stripe — subscription billing and card payments.
• Twilio — phone numbers, calls and text messages.
• Vapi — the AI phone receptionist, including call recording and transcription.
• Resend — sending email.
• AI model providers (such as OpenAI and Anthropic) — generating replies, summaries and transcriptions.
• Meta Platforms — Messenger and Instagram messaging, when a business connects them.
• Google — maps, calendar and sign-in, when used.

We also share information when the law requires it, to protect people or the service, or as part of a sale or merger of our business. We do not sell personal information.

5. Text messages

Phone numbers and text-message consent are not shared with third parties for their marketing. Message and data rates may apply. Reply STOP to any text to stop receiving them, or HELP for help.

6. Cookies and measurement

We use cookies that are needed to keep you signed in and secure. Some public pages of a business, such as its booking or quote pages, may use that business's analytics or advertising pixel. Pages that show a customer's own documents are not measured.

7. How long we keep it

We keep a business's data while its account is active. After an account is cancelled we keep it for at least 30 days so it can be exported or the account reopened, and then delete it on request, except what the law requires us to keep, such as billing records.

Call recordings, transcripts and message history are kept with the business's records for as long as its account is active, unless the business asks us to delete them sooner.

8. Security

Each business's data is kept separate from every other business's. Access requires sign-in, owners and admins use two-step verification, and data is encrypted in transit. No system is perfectly secure; if a breach affects your information we will notify you as the law requires.

9. Your choices

You can ask us for a copy of your personal information, to correct it or to delete it. Business owners can export their workspace data from the app at any time. Residents of some states have additional rights; we honor requests wherever you live.

10. Children

The service is for businesses. It is not directed to children under 13, and we do not knowingly collect their information.

11. Changes

If we change this policy in a significant way, we will tell account owners by email or in the app before the change applies.

Contact

Gesser Services LLC, Atlantic City, New Jersey, USA. Questions about this page: office@gesseros.com.