JS Solutions provides an AI phone answering service to local trade businesses. This policy covers what we collect, why, and who sees it.
We do not sell, rent, or share mobile phone numbers with anyone. Mobile numbers collected for text notifications are used solely to send those notifications to the business owner who provided them. They are not shared with third parties, affiliates, or advertisers for any purpose, and they are not used for marketing.
A subscribing business owner receives one text message per call our service answers on their behalf. In practice that is typically between two and ten messages per day, depending on how many calls their business receives. There is no fixed schedule — messages are sent only when a real customer calls their line.
Reply STOP to any message to stop receiving them, or tell us directly and we will remove your number. Reply HELP for contact details. Stopping notifications does not cancel your service — call us to do that.
Information about a call is visible to that business and to us. It is never shown to another business, and it is never sold or shared for advertising. Callers' details are used for one purpose: so the business can call them back.
Every connection to this service is encrypted in transit with TLS. The site declines to load over an unencrypted connection, and session cookies are marked so a browser will only ever send them over HTTPS.
Passwords are stored as PBKDF2-HMAC-SHA256 hashes with a per-account salt. We cannot read your password, recover it, or tell you what it is — if it is lost, it is reset, not retrieved.
Call records are held on a private disk at our hosting provider that is not reachable from the public internet. Access requires an individual account, and every account is scoped to one business: a signed-in user cannot reach another business's calls even by typing the address directly. Backups are held under the same restrictions.
Call records are kept while a business is a customer and for 12 months after they leave, so they can request a copy. A business can ask us to delete their data at any time and we will do so within 30 days.
The phone platform sends us its own copy of each call when the call ends. We keep that copy for 90 days so an unusual delivery can be understood after the fact, then delete it while keeping the call record itself. A delivery we were never able to file is the exception — we keep it until it is filed, because it is the only remaining copy of that call.
Separately, we keep a record of every time someone opened a business's information — who, when, and from what address — for six years. That record holds no call contents, only the fact that a page was opened, and each entry carries a fingerprint of the one before it so a deleted or altered line can be detected. It exists so that a business can be told exactly who has seen its customers' details, and so that we cannot quietly rewrite the answer.
California requires the consent of all parties to record a phone call. Where call recording is enabled for a business, callers are told at the start of the call. Where it is not enabled, we keep a written transcript only.
Email jake@caughtbycora.com to see what we hold about you, to correct it, or to have it deleted.