Privacy

Last updated October 27, 2026.

Website and owner login

Cloudflare hosts the public website and the private owner dashboard. It processes standard request information such as IP address, browser information, requested page and time to deliver and secure them. We do not add advertising or analytics trackers. Google Fonts receives requests for the fonts on these pages. Cloudflare may use essential security cookies when needed.

The owner dashboard uses an essential session cookie after sign-in. Passkey public credentials and necessary session and authentication records are stored in Cloudflare D1. Your passkey's private key stays with your device or password manager. The dashboard is access controlled; recordings and transcripts are not published on the public site.

AI calls and providers

The current demo uses Vapi to coordinate calls, Deepgram for transcription and OpenAI for language responses. The AI processes what callers say to answer approved business questions and prepare a call report. Calls configured for recording can produce audio, transcripts and summaries, including a caller's name, callback number, service address and problem. Calls must disclose AI use and recording before collecting details. Do not provide card numbers, passwords or sensitive medical information.

When the service is enabled for a business, relevant reports are available only to that business's authorized owner. Cloudflare stores dashboard records; Vapi and the configured voice, transcription, model and phone providers process call information. A request to delete our dashboard copy does not instantly erase every provider copy. We do not claim zero provider retention or that every provider uses the same model-training rules.

Retention and deletion

The dashboard has a daily cleanup for old call records, intended to keep them for no more than 90 days plus the daily cleanup interval. Provider recordings and transcripts have separate retention settings. The owner dashboard is still being tested; commercial service is not yet enabled.

Email us for access or deletion requests. After verifying the request, we remove information we control and address relevant provider-held copies, subject to required legal retention. We do not promise that deleting a dashboard entry automatically deletes an upstream recording.

Email and texts

Email is used to respond to your request. When an approved business's missed-call text service is enabled, it may send one relevant follow-up, not marketing texts; reply STOP to opt out. Cold marketing outreach is currently on hold. No automatically renewing paid trial or customer subscription checkout is active on this website.

Sharing and your choices

We do not sell personal information. Relevant call details are shared with the business called and the providers needed to run the service. We do not use private calls or reports as public testimonials without separate permission.

Provider information: Cloudflare privacy, Vapi data flow, Deepgram privacy, and OpenAI business data privacy.

Contact

Questions or deletion requests: hello@sundowndesk.com.