Privacy Policy

Draft for legal review — last updated September 21, 2026.

CoreLink Digital Solutions ("CoreLink", "we", "us") answers phone calls for small service businesses and gives those businesses an app to run their customers, schedule, jobs and payments. This policy explains what personal information we collect, why, who we share it with and the choices you have. It covers this website, the CoreLink app (iPhone, Android and web) and the receptionist service.

Who this applies to

Businesses that use CoreLink (the contractor, their owner and staff). For your account information, we decide how and why it is used.

People who call, text or pay a business that uses CoreLink. When you call a plumber and CoreLink answers, we handle your call on that business's behalf and under its instructions. The business is responsible for its relationship with you; we keep your information only to provide the service to that business. If you want your details removed, you can ask the business or ask us directly (see "Your choices").

Visitors to this website and people who apply to work with us.

What we collect

Account details. Name, email address, phone number, business name, service area, business hours, password (stored hashed, never in plain text) and the role of each team member.

Business records you create. Customers, appointments, jobs, estimates, invoices, notes and requests you send us to change your receptionist.

Calls. When the receptionist answers a call: the caller's phone number, the date, time and length of the call, a recording of the call where the business has recording switched on, a written transcript, a short summary, and details the caller gives (for example a name, an address, what the problem is and when it started). Callers are told at the start of the call that it may be recorded.

Texts. Messages sent from the business's number through CoreLink (appointment reminders, payment links, estimates) and their delivery status. We do not read or store incoming text conversations that happen outside the app.

Payments. Payments are processed by Stripe. We receive and keep the amount, status, date, the last four digits and card brand for receipts, and payout status. We never see or store full card numbers or bank details; those go directly to Stripe under Stripe's privacy policy.

Device and usage information. IP address, device type, operating system, app version, the pages and screens you use, error reports and crash logs. In the app we use this only to keep the service working; we do not use it for advertising.

Notifications. If you turn on push notifications, a device token so we can deliver them.

Forms on this website. Whatever you type into our contact, quote, setup, data-request and work-with-us forms, and the voice memo you send with an application.

How we use it

To answer calls, book appointments and keep records for the business you called or work for.
To run your account: sign-in, team invitations, notifications you asked for, receipts and reminders.
To set up and adjust your receptionist when you ask us to.
To take and pay out payments through Stripe.
To bill you for your plan, after your free month.
To answer support requests and tell you about changes to the service.
To keep the service secure, prevent fraud and abuse, and fix errors.
To meet legal obligations and enforce our terms.

We do not sell personal information, and we do not use it for third-party advertising.

Who we share it with

Only companies that help us run the service, under contracts that limit what they can do with it:

Telephony and AI voice partners that carry the calls, transcribe them and generate summaries on our behalf.
Stripe for payments, payouts and billing.
Hosting and storage providers for our servers, database and encrypted backups (United States).
Email and text delivery providers for the messages the service sends.
Apple, Google and Expo to distribute the app and deliver push notifications.
Error-monitoring tools that receive crash reports (which may include your account ID and device details, never call recordings).
Shopify, which hosts this website and its forms.

We may also share information when the law requires it, to protect people's safety or our rights, or as part of a merger or sale of the business (we would tell you first). Within a business account, the owner and staff of that business can see the records for that business, according to their role.

How long we keep it

Account and business records: for as long as the account is open, then deleted within 30 days of the account being closed. Backups roll off within a further 30 days.
Call recordings and transcripts: for as long as the business keeps them; the business can delete a recording at any time.
Payment and billing records: 7 years, as tax and accounting rules require.
Support and form messages: up to 2 years.
Work-with-us applications and voice memos: up to 1 year.

Your choices

Delete your account. In the app: More → Account → Delete my account. Everything tied to your business is removed on the schedule above.
Access, correct, delete or get a copy of your data. Use the data request form or email support@corelinkdigitalsolutions.com. This applies whether you use CoreLink for your business or you called a business that does. We reply within 10 business days and complete deletion within 30. We may ask you to confirm your identity first, and we will not treat you differently for asking.
Notifications. Turn email and push notifications on or off in the app under More → Notifications.
Marketing email. We do not send marketing email today. If we ever do, every message will have an unsubscribe link. Service emails (invitations, receipts, reminders, security notices) are part of the service.
Website cookies. See below.

If you live in California, New York or another state with a privacy law, the rights above are how you exercise it. We do not sell or share personal information for targeted advertising. You can appeal a decision we make about your request by replying to our response; if you are still unhappy you can contact your state attorney general.

Cookies and tracking

This website is hosted on Shopify and sets only Shopify's own cookies: the ones needed for the site and its forms to work, and Shopify's built-in visit analytics. We do not use Google Analytics, advertising pixels, chat widgets or social-media trackers, and we do not load fonts or scripts from third parties. You can opt out of analytics on the Your Privacy Choices page, and we honor the Global Privacy Control browser signal. The CoreLink app does not use cookies or advertising identifiers.

Children

CoreLink is for businesses and their adult customers. It is not intended for anyone under 13 and we do not knowingly collect information from children. If you believe a child has given us information, email us and we will delete it.

Security

Information is encrypted in transit and at rest, access inside CoreLink is limited to people who need it to run the service, passwords are hashed, and backups are encrypted and tested. No system is perfectly secure; if we learn of a breach affecting you, we will tell you and the authorities as the law requires.

Where your data lives

Our servers and providers are in the United States. If you use the service from elsewhere, your information is transferred to and handled in the United States.

Changes

When we change this policy we update the date at the top and, for material changes, tell account holders by email or in the app before they take effect.

Contact

CoreLink Digital Solutions
support@corelinkdigitalsolutions.com
Mailing address: [to be added when the company is formed]