Privacy Policy

Second Shift Systems ("we", "us", "our") provides automation services — including AI receptionist chat, SMS appointment reminders, and lead follow-up — to local service businesses ("Clients") and their customers. This Privacy Policy explains what information we collect, how we use it, and the choices you have.

1. Information We Collect

We collect the following categories of information:

• Account information from our Clients: business name, contact name, email address, phone number, business address, hours, services, and pricing.
• End-customer information submitted to our Clients through chat, forms, SMS, or phone calls: name, phone number, email, service requested, appointment date and time, and message content.
• Communication logs: chat transcripts, SMS messages sent and received, call metadata, and email delivery records.
• Technical data: IP address, browser type, device information, and basic usage analytics.

2. How We Use Information

• To deliver the AI receptionist, reminder, and follow-up services our Clients have purchased.
• To send SMS, email, and voice communications on behalf of our Clients to their customers.
• To improve our service quality, debug issues, and prevent abuse.
• To comply with legal obligations.

3. SMS & Messaging Consent

By providing your phone number to a business that uses Second Shift Systems, you consent to receive SMS messages related to your inquiry, appointment, or relationship with that business. Message frequency varies. Message and data rates may apply.

You can opt out at any time by replying STOP to any SMS message. Reply HELP for assistance. We do not sell or share mobile opt-in information or consent with third parties for marketing purposes.

4. How We Share Information

We share information only with the service providers required to deliver our service:

• Twilio — to send and receive SMS messages and voice calls.
• Lovable Cloud (Supabase) — for database, authentication, and backend infrastructure.
• AI model providers (Google, OpenAI) — to generate chat and voice responses on behalf of our Clients.
• Email delivery providers — to send transactional and reminder emails.

We do not sell personal information. We may disclose information if required by law or to protect the rights, property, or safety of our users or the public.

5. Data Retention

We retain account and communication data for as long as a Client account is active. Upon written request, we will delete or anonymize personal information within 30 days, except where retention is required by law.

6. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, delete, or export your personal information, or to object to certain processing. To exercise any of these rights, contact us at the email below.

California residents have additional rights under the CCPA, including the right to know what personal information we collect and the right to request deletion.

7. Cookies

Our website uses cookies and similar technologies for authentication, session management, and basic analytics. You can disable cookies in your browser, but parts of the service may not function properly.

8. Security

We use industry-standard safeguards including encryption in transit, encrypted database storage, and role-based access controls. No system is 100% secure, and we cannot guarantee absolute security of information.

9. Children's Privacy

Our services are not directed to children under 13. We do not knowingly collect personal information from children under 13.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The "Effective Date" at the top of this page reflects the latest revision. Material changes will be communicated through our website or by email.

11. Contact Us

Questions about this Privacy Policy or your data? Contact us at hello@secondshiftsystems.com.