Privacy Policy

Last updated: [effective date]

This policy explains how [CansOut.AI legal entity name] ("CansOut", "we", "us") handles personal information. It covers:

• Visitors to cansout.ai and people who contact us;
• Operators — the dumpster-rental businesses that use our platform — and their staff and drivers; and
• End Customers — people who book, call, chat with, text or pay an operator through our platform.

If you are an End Customer: the dumpster company you rented from controls your information and decides how it is used. We process it on their behalf as their service provider. Their privacy policy applies, and you should send requests about your information to them. We will help them respond.

1. Information we collect

From website visitors

• Information you submit, such as your name, company, e-mail, phone and message when you request a demo or subscribe.
• Technical information your browser sends, such as IP address, browser type and pages visited, in our server logs. Our site loads web fonts from Google, which receives your IP address when fonts load.
• We use only cookies needed for the site to work. [Update this section if analytics or advertising tags are added.]

From operators and their users

• Account details: names, e-mail addresses, phone numbers, roles and sign-in credentials (stored as secure hashes), and authenticator enrollment.
• Billing details: billing contact and payment method. Card details are collected and stored by Stripe; we receive only a token, the card brand and the last four digits.
• Usage information: how the platform is used, device and log data, and support communications.
• Driver information: sign-in device identifiers and, while the driver app is in use, location, photos and service events recorded for jobs.

On behalf of operators, about End Customers

• Contact details, job-site addresses (and their map coordinates), orders, quotes, invoices and payment status.
• Payment tokens, card brand and last four digits (never full card numbers).
• Phone calls with the AI Agent: call audio as it is processed, transcripts, and recordings where the operator has enabled recording.
• Chat conversations, text messages and e-mails exchanged with the operator through the platform, and messaging consent and opt-out records.
• Photos, scale tickets and service records captured by drivers.

2. How we use information

• To provide the platform: bookings, dispatch, the driver app, the customer portal, billing, and the AI Agent.
• To bill operators, including metered usage.
• To secure the platform, prevent fraud and abuse, and troubleshoot.
• To provide support and send service communications.
• To improve the platform using de-identified and aggregated data.
• To market CansOut to business contacts, who can opt out at any time.
• To comply with law and enforce our terms.

We use End Customer information only to provide the platform to the operator it belongs to, as they instruct, and not for our own marketing.

3. How the AI Agent handles information

• During a call, audio is streamed to a speech-recognition provider to produce a transcript. The transcript, the operator's settings and relevant order details are sent to an AI model provider to generate replies, which a voice provider turns into speech.
• These providers process the data to deliver the service to us and are contractually restricted from using it for other purposes. We do not use operator or End Customer data to train AI models. [Verify each provider's current terms.]
• Where an operator connects its own AI provider account, that provider processes the data under the operator's agreement with it.
• When a caller pays by keypad, the call is handed to our telephony provider's secure payment capture. The AI does not hear the keypad entry, and it is never transcribed.
• We do not create voiceprints or other biometric identifiers from calls.

4. Text messaging

Texts are sent to End Customers on an operator's behalf for orders and account updates, and only where consent rules allow. Reply STOP to opt out or HELP for help. Mobile numbers and text-messaging opt-in data are never sold or shared with third parties or affiliates for their marketing purposes.

5. How we share information

• Service providers who help us run the platform (listed below), under contracts that limit their use of the data.
• Operators — End Customer information is available to the operator it belongs to.
• Integrations an operator connects, such as accounting software or Google Business Profile, at that operator's direction.
• Legal and safety — when required by law or to protect rights, property or safety.
• Business transfers — in a merger, acquisition or sale of assets, subject to this policy.

We do not sell personal information, and we do not share it for cross-context behavioral advertising.

Service providers

[Confirm this list against production before publishing, and commit to notifying operators before adding a new provider.]

6. How long we keep information

• Operator account and billing records: for the life of the account, then as long as needed for tax, accounting and legal purposes.
• Operator Data, including End Customer information: while the operator's subscription is active, then available for export for 30 days, then deleted within 90 days, except in backups that expire on their normal schedule.
• Call recordings: [12 months by default, or the operator's configured period].
• Website demo requests: [24 months] unless you become a customer.
• Server logs: [90 days].

7. Security

We protect information with measures including encryption in transit, tenant isolation, role-based access, multi-factor authentication for administrators, signed webhooks and audit logging. See our Trust & Security page. No system is perfectly secure; if a breach affects your information, we will notify you or the relevant operator as the law requires.

8. Your privacy rights

Depending on where you live — including California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon and other states with privacy laws — you may have the right to:

• know about and access the personal information we hold about you;
• correct or delete it;
• receive a portable copy; and
• opt out of sale, targeted advertising or profiling (we do none of these).

Send requests to [email protected]. We will verify your identity before acting, you may use an authorized agent, and you may appeal a decision by replying to our response. We will not discriminate against you for exercising your rights. End Customers should contact the operator first; we will pass on requests we receive and help the operator respond.

9. Children

CansOut is a business service and is not directed to children under 16. We do not knowingly collect their personal information.

10. Where information is processed

We and our service providers process information in the United States.

11. Changes to this policy

We will post updates here and change the "last updated" date. If a change is material, we will notify operators by e-mail or in the console before it takes effect.

12. Contact us

[Legal entity name and postal address]
Privacy: [email protected] · Security: [email protected]