Last updated: June 1, 2026
Zach Schiess, an individual sole proprietor doing business as "HyperLocAI" ("we," "us," or "our"), located in Colorado, United States, is committed to protecting the privacy of individuals who interact with our platform. This Privacy Policy explains how we collect, use, disclose, and safeguard information in connection with our AI-powered call handling and lead capture service ("Service"). By using the Service, you agree to the practices described in this policy.
We collect the following categories of information through the operation of our Service:
We use collected information for the following purposes:
We do not sell, rent, or trade personal information. We may share information in the following limited circumstances:
Consumers who interact with HyperLocAI do so in the context of calling a participating business whose phone line is connected to our platform. When a consumer's call is unanswered, HyperLocAI offers the consumer two opportunities to opt in to text follow-up:
No SMS is ever sent unless the caller affirmatively presses 1 on one of these two IVRs.
Call Recording Notice: Both the Stage 1 IVR and the Stage 2 callback IVR open with a notice that the call may be recorded. We retain audio of each IVR and the caller's keypad response as a record of consent. Recordings are used solely to verify consent, support quality assurance, and resolve disputes, and are retained per the schedule in Section 6 below.
Automated System Disclosure: Callers who press 2 to speak with our virtual assistant are informed before the conversational exchange begins that they are speaking with an automated AI system, in accordance with applicable law including California SB 1001 and FCC TCPA guidance on AI-generated voices.
For a complete walkthrough of both consent stages, see our SMS Consent & Opt-In Flow page.
If you are a caller who has had your information captured through our Service and would like to request deletion of that information, please contact us at zach@hyperlocai.com. We will respond within 30 days.
HyperLocAI operates two distinct categories of SMS messaging:
Message frequency varies based on conversation activity. Standard message and data rates may apply.
We do not share mobile information, phone numbers, or SMS opt-in data with third parties or affiliates for marketing or promotional purposes. SMS consent and phone number information collected through our service is used solely for the operation of the customer-care follow-up service and is not shared with any third parties or affiliates.
No promotional or marketing content to consumers. HyperLocAI does not, and will not, send promotional, marketing, sales, or advertising content via SMS to consumers under any circumstances. All consumer-facing SMS messages are customer-care in nature and directly responsive to the consumer's inquiry. We do not operate marketing campaigns, broadcasts, recurring promotional messages, or any other non-transactional outreach to consumers.
Call recordings and transcriptions are retained for up to 90 days to support quality assurance and dispute resolution, after which they are deleted. Lead summaries delivered to subscribing businesses are retained for the duration of the business's active subscription plus 30 days following cancellation. Subscriber account data is retained for as long as the account is active or as required by law.
We implement industry-standard technical and organizational measures to protect information against unauthorized access, disclosure, alteration, or destruction. These include encrypted data transmission (TLS/HTTPS), access controls, and secure infrastructure through our third-party providers. No method of electronic transmission or storage is 100% secure; we cannot guarantee absolute security.
Our Service relies on the following third-party providers, each subject to their own privacy policies:
Subscribing businesses may optionally connect their own Google Calendar to the Service. This section describes exactly how HyperLocAI accesses, uses, stores, and shares Google user data. If a business does not connect a Google Calendar, we never request or receive any Google user data.
When a business owner connects their calendar, we request only the two narrowest scopes that support the feature:
calendar.events) — used to create an event when the
business owner confirms an appointment, to let the owner edit or remove those appointments from within the
HyperLocAI dashboard, and to display the owner's schedule in that dashboard.calendar.freebusy) — used to determine which time
windows the business is actually available, so the assistant only suggests genuinely free times. Free/busy
returns availability only, not event details.The assistant never books an appointment on its own. It may only propose times; a person at the business must confirm before anything is written to the calendar.
We store an encrypted Google refresh token (AES-GCM, encrypted at rest with a key held outside the database) so the connection persists without repeated sign-ins, the identifier of the calendar the business selected, and the Google event identifier of appointments we created, so those bookings can later be updated or removed. We do not copy, index, or retain the contents of a business's calendar. Calendar data is read on demand and shown to the authenticated business owner; it is not stored in our database.
HyperLocAI's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
A business can disconnect its calendar at any time using the Disconnect control in the HyperLocAI client portal, or from the Google Account permissions page. On disconnect we delete the stored refresh token immediately. Events already created on the business's calendar remain on that calendar and under the business's control; delete them in Google Calendar if they are no longer wanted. To request deletion of any remaining associated data, contact zach@hyperlocai.com.
The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided information through our platform, contact us immediately at zach@hyperlocai.com.
We may update this Privacy Policy periodically. When we do, we will revise the "Last updated" date at the top of this page. We encourage you to review this policy regularly. Continued use of the Service following any changes constitutes acceptance of the updated policy.
If you have questions, concerns, or requests related to this Privacy Policy or your personal information, please contact:
Zach Schiess — HyperLocAI
zach@hyperlocai.com