The short version. We do not sell personal information and never have. We do not use call recordings to train AI. When you call or text a business that uses PowerFrame, that business decides why your information is collected; we process it only for them. This website sets no advertising cookies. You can ask what we hold about you, ask us to correct or delete it, and we will answer within 45 days.
PowerFrame LLC ("PowerFrame," "we") operates powerframe.ai and provides an AI assistant that answers calls and text messages for businesses. This policy covers three groups of people:
For visitors and clients, we decide how information is used and we are the "business" or "controller" under privacy laws.
For callers, the business you contacted decides why your information is collected and how long it is kept. We act as that business's service provider ("processor") and use your information only to provide the service to that business, under a written contract that forbids us from selling it, sharing it for advertising, or using it for our own purposes. If you are a caller and want to see, correct or delete your information, contact the business you called; we will help them respond, and if you contact us directly we will forward your request to that business within five business days.
We do not collect precise geolocation, biometric identifiers, or information from data brokers.
Calls handled by the assistant are recorded and transcribed so that the business can act on your request, a person can pick up where the assistant left off, and we can check the assistant's work. The assistant tells you at the start of every call that it is an AI and that the call is recorded. Recordings and transcripts belong to the business you called. We do not use them to train AI models, and our vendors are contractually barred from doing so. Voice recordings are not used to identify you by voiceprint.
We use information to:
We send marketing email only to people who asked for it, and every message has an unsubscribe link. We do not do automated profiling that produces legal or similarly significant effects about anyone.
We share information only with vendors that help us run the service, each under a contract that limits them to providing their service to us and bars them from selling or using the information for their own purposes, including AI training. Current categories and providers:
| Purpose | Provider |
|---|---|
| Telephone numbers, call routing and SMS carriage | Twilio, and messaging carriers |
| AI voice conversation | Retell AI |
| AI language model | Anthropic (Claude), under terms that exclude training on customer data |
| CRM, scheduling, messaging and call recording storage | HighLevel |
| Database and application hosting | Supabase, Vercel |
| Payments | Stripe |
| Website analytics (cookieless) | Plausible |
| Email and business tools | Google Workspace |
We update this list when providers change. We also share information when the law requires it (for example a valid subpoena), to protect the safety of a person, to enforce our agreements, with professional advisers under confidentiality, and with a successor if PowerFrame is sold or merged, in which case this policy continues to apply. We do not sell personal information, we do not share it for cross-context behavioral advertising, and we have not done either in the past twelve months.
| Information | Kept for |
|---|---|
| Website form submissions | Until you ask us to delete them, or 24 months after your last contact |
| Call recordings, transcripts and messages handled for a client | While the client's account is active and 90 days after it closes, unless the client asks for earlier deletion or the law requires longer |
| Consent, opt-out and message records | At least five years, as telemarketing law requires |
| Client account and billing records | Seven years after the account closes, for tax and accounting |
| Server and security logs | Up to 90 days |
Clients can set shorter retention for their own call data by writing to us. Deleted data may persist in encrypted backups for up to 35 days before those backups expire.
Information is encrypted in transit (TLS 1.2 or higher) and at rest (AES-256). Access is limited to staff and contractors who need it for their work, protected by multi-factor authentication, and logged. Client data is separated per account in our database. We review vendor security before we use them. No system is perfectly secure; if a breach affects your information we will notify affected clients without undue delay and individuals as the law requires. Our Security page has more detail.
Wherever you live, you can ask us to:
Email hello@powerframe.ai with "privacy request" in the subject, or write to the address below. We will confirm receipt within 10 business days and respond within 45 days (extendable once by 45 days with notice). To protect you, we verify requests by matching the details you provide to what we hold, and we may ask for more information. An authorized agent may submit a request with your written permission. We will not treat you differently for exercising your rights. If you are a caller, we will forward your request to the business you contacted, as explained in Section 2. If you believe we have not handled a request properly, you may appeal by replying to our response, and you may contact your state attorney general.
Under the California Consumer Privacy Act as amended (CCPA/CPRA), California residents have the right to know what personal information we collect, use and disclose; to delete it; to correct it; to opt out of sale or sharing; to limit use of sensitive personal information; and not to be discriminated against. In the past twelve months we have collected the categories listed in Section 3 (identifiers, commercial information, internet activity, audio recordings and professional information), from the sources listed there, for the purposes in Section 5, and disclosed them for business purposes to the providers in Section 6. We have not sold or shared personal information and we do not use sensitive personal information for purposes other than providing the service. Because we do not sell or share, there is no opt-out to exercise, but we honor Global Privacy Control signals as an opt-out anyway (Section 11). Submit requests by the method in Section 9. We do not knowingly sell or share personal information of anyone under 16.
Residents of Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, Delaware, New Jersey, New Hampshire and other states with privacy laws have similar rights and may use the same method.
This website uses Plausible, a cookieless analytics service that counts page views without storing identifiers on your device. We set no advertising or tracking cookies on powerframe.ai. Booking pages and the client portal are hosted by our scheduling and CRM provider, which sets cookies needed to run those pages. We honor Global Privacy Control and Do Not Track browser signals. Our Cookie notice lists exactly what is set, and will be updated before any advertising conversion tag is added to this site.
Our website and services are for businesses and are not directed to children under 16. We do not knowingly collect information from children, and we delete it if we learn we have.
We are a United States company and process information in the United States. Our vendors may process it in other countries under contracts that require the same protection. We do not offer our services outside the United States.
When we change this policy we post the new version here with a new date. Changes that matter are emailed to clients at least 30 days before they take effect.
PowerFrame LLC, 30 North Gould Street, Suite R, Sheridan, Wyoming 82801. hello@powerframe.ai. Put "privacy request" in the subject line.
Back to powerframe.ai · Legal · Terms of service · Acceptable use · Messaging terms · AI disclosure · Cookies · Security · Accessibility
Questions: hello@powerframe.ai · PowerFrame LLC, 30 North Gould Street, Suite R, Sheridan, Wyoming 82801