Privacy Policy

1. What We Collect

When you use MainStreet RevOps — including our website, platform, dashboard, or embeddable widgets — we may collect:

• Contact information: name, email, phone number
• Business information: company name, CRM credentials, phone numbers, website URL
• Lead and customer data you process through the platform: names, phone numbers, email addresses, addresses, job details
• Call recordings and voicemail transcriptions (if enabled)
• Usage data: how you interact with the dashboard and platform
• Technical data: IP addresses, browser type, device information

2. How We Use It

We use collected information to:

• Deliver and operate the MainStreet platform and all its features
• Sync leads and job data to your CRM on your behalf
• Send automated communications (SMS, email) to your leads on your behalf
• Generate AI-powered content (voicemail transcriptions, field lead extraction, review response drafts, GBP post drafts)
• Provide customer support and respond to inquiries
• Improve platform reliability, performance, and features
• Comply with legal obligations

3. Your Customers' Data

When MainStreet captures leads and sends automated responses on your behalf, your customers' data (names, phone numbers, email addresses) is processed by MainStreet solely to deliver the service to you. You are the data controller for your customers' information. MainStreet acts as a data processor on your behalf.

You are responsible for ensuring you have appropriate consent from your customers to receive automated communications sent through MainStreet.

4. Third-Party Services

MainStreet uses the following third-party services to deliver the platform. Your data and your customers' data may be processed by these providers as necessary:

• Twilio — voice calls and SMS delivery
• Resend — email delivery
• OpenAI — AI features including voicemail transcription, field lead extraction, and content drafting. Customer PII is filtered before transmission where technically feasible.
• Anthropic (Claude) — AI features including intake classification and marketing content drafting. Customer PII is filtered before transmission where technically feasible.
• Ayrshare — Google Business Profile publishing and review management
• Stripe — subscription billing and payment processing
• Calendly — appointment scheduling links
• Google — Local Services Ads lead ingestion and Maps address enrichment
• Supabase — database and file storage
• Railway — cloud infrastructure

Each provider maintains their own privacy and security standards. We select providers with appropriate data protection commitments.

5. Information Sharing

We do not sell your data or your customers' data. We do not share personal information with third parties except:

• Service providers listed above, as necessary to deliver the platform
• When required by law, court order, or government authority
• To protect the rights, safety, or property of MainStreet or others

6. Data Retention

• Lead and customer data is retained for the duration of your subscription plus 30 days after termination
• Call recordings and media files follow the retention setting in your account (default 90 days)
• You may request earlier deletion at any time by contacting us

7. Security

We implement industry-standard security measures including encrypted data transmission (TLS), encrypted storage, per-tenant data isolation, and access controls. No method of transmission over the internet is 100% secure. We will notify you of any data breach affecting your account as required by applicable law.

8. Your Rights

You have the right to:

• Access the personal information we hold about you
• Correct inaccurate information
• Request deletion of your data
• Export your data
• Opt out of non-essential communications

To exercise these rights, contact us at info@mainstrevops.com.

9. Cookies and Analytics

Our website uses standard analytics tools to understand traffic and improve user experience. We do not use advertising cookies or sell browsing data.

10. Children's Privacy

Our services are not directed at children under 13. We do not knowingly collect information from children.

11. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated via email or website notice at least 14 days before taking effect.

12. Contact

See also our Terms of Service.