Privacy Policy

Fixalo (“we,” “our,” “us”) provides an AI voice receptionist for independent tradespeople. This policy explains what information we collect when you sign up for the service, when your customers call your Fixalo number, and what we do with that information.

This is a plain-language summary written for clarity, not a substitute for legal advice. If something here is unclear, email hello@meetfixalo.com.

What we collect

From you (the tradesperson): your email, business name, owner first name, contact phone number, the inbound number assigned to your account, business hours, trade type, billing information held by Stripe, and access tokens you authorize for QuickBooks Online and Google Calendar.

From your callers:phone number (caller-ID), audio of the call, the transcript Fixalo’s speech-to-text generates from that audio, name, address, and the description of the issue they share with our agent. Calls are recorded; the agent discloses this at the start of every call.

Automatically: per-call usage events (duration, provider costs, model used) so we can bill accurately and triage quality.

How we use it

• Run your inbound call agent (route the call, transcribe it, generate replies, text you a summary).
• Save leads and emergencies to your dashboard.
• Read from / write to QuickBooks (customers, invoices, estimates) when you authorize that integration.
• Bill you on a usage-attributed basis.
• Investigate problems, prevent abuse, and improve the agent.

We do not sell your data. We do not use your callers’ recordings to train any third-party model.

Third-party services

Fixalo is built on top of vendors who each handle a slice of the flow. Your data passes through them only as needed:

• Supabase — database and authentication.
• Stripe — payment processing and subscription billing.
• Twilio — phone-number provisioning and SMS delivery.
• LiveKit — real-time voice transport.
• Deepgram — speech-to-text for the agent.
• Cartesia — text-to-speech for the agent.
• OpenRouter / Anthropic / Google / OpenAI — large-language-model inference.
• Resend — outbound email (magic links, account notices).
• QuickBooks Online (Intuit) — invoicing and customer book of record (you opt in).
• Google Calendar — appointment availability (you opt in).
• Vercel / Fly.io — application hosting.

Call recording & consent

Inbound calls are recorded for service quality. The agent discloses this at the start of every call. If a caller objects, they can hang up before sharing any information. Several U.S. states require two-party consent (CA, FL, MA, MD, IL, PA, WA among others); the opening disclosure is intended to satisfy those rules.

Retention

Call records, transcripts, and lead rows are retained for the life of your account. You can request deletion of specific records or your entire account by emailing us. QuickBooks data remains in your QuickBooks; we only mirror customer-index entries for caller-ID matching, which we delete when you disconnect QuickBooks or close your account.

Your rights

You can ask us at any time to:

• Tell you what we have on file.
• Correct or delete a specific record.
• Delete your entire account.
• Receive a copy of your data in a portable format.

California, Colorado, Virginia, and other state-privacy-law residents have the equivalents codified — emailing the address below is sufficient.

Security

QuickBooks tokens are Fernet-encrypted at rest. Service-role keys and signing secrets live in Fly secrets, never in client code. Webhooks (Stripe, QuickBooks, LiveKit) are signature-verified before processing.

Changes

We’ll update the “Last updated” date above and, for material changes, email account holders. Continued use of the service after a change means you accept the new policy.

Contact

Questions, deletion requests, or privacy concerns: hello@meetfixalo.com.