Privacy policy

Our customers are the businesses that subscribe. We are the data controller for their account information.

Their customers are the people who call, text or book with those businesses. For that information we are a processor: the business decides what is collected and why, and we hold it on their instructions. To have your information removed, contact the business you dealt with. If you cannot reach them, contact us and we will pass it on.

• Account details for the business: name, email, phone number, address, hours and billing details.
• Contact records for people reaching that business: name where given, phone number, email, and messages exchanged.
• Call metadata: the number dialled, the time, and whether it was answered. We do not record call audio.
• Consent records: whether someone opted in or out, when, and on what basis. This ledger is append-only and is never edited.
• Source information: how an enquiry arrived, so a business can tell which advertising produced which job.

• We do not sell personal information, and never have.
• We do not share one business’s customer data with another business.
• We do not use customer messages to train machine learning models.
• We do not record telephone calls.
• We do not message a business’s customers on our own behalf.

Messages go only to people who contacted a business or gave express written consent. Anyone can stop them by replying STOP, which takes effect immediately and permanently for that number. Detail is in our messaging terms.

Only the suppliers needed to run the service, each handling one part of it:

• A messaging provider, to deliver SMS to carriers.
• A database and authentication provider, to store the account and its data.
• An email provider, to notify the business.
• A hosting provider, to serve the application.
• An error monitoring provider, to alert us when something breaks.

Each is bound by contract to process data only on our instructions, and we will name the current suppliers on request. We may also disclose information where the law requires it.

Account information is kept while the account is open and for seven years afterwards for tax purposes. Messages, call metadata and lead records are deleted within 30 days of an account closing, or sooner if the business asks.

Consent and opt-out records are kept indefinitely. That is deliberate: deleting an opt-out would allow somebody to be messaged again after asking not to be, which is the one outcome the record exists to prevent.

You may have the right to see the information we hold about you, correct it, delete it, or object to how it is used. Ohio has no general consumer privacy statute at the time of writing; we extend these rights to everyone regardless.

Email support@clienttell.com. We respond within 30 days, never charge for a request, and never treat anyone differently for making one.

Data is encrypted in transit and at rest. Each business’s data is isolated at the database level rather than by application code, so a fault in our software cannot show one tenant another’s records. Staff access is limited, logged, and requires a reason.

ClientTell is a tool for businesses and is not directed at children. We do not knowingly collect information from anyone under 13.

If this changes materially we will email account holders before it takes effect. Questions go to support@clienttell.com or +1-561-860-4710.

ClientTell LLC, Sandusky, OH 44870, United States.