Last updated September 29, 2026
Towntide Voice Privacy Policy
Draft, needs lawyer review. This policy is a working draft (2026-09-29-draft) and is not in force until reviewed by a lawyer and published at launch.
Who we are
Towntide Voice is an AI receptionist that answers phone calls for trade businesses, books jobs, texts callers back and passes emergencies to the business's on-call person. It is operated by AO, a sole proprietorship operated by Dallas Mayne ("AO", "we"), in Alberta, Canada. For the business owners who sign up, we are the controller of their account data. For people who call a business that uses Towntide Voice, the business decides how caller information is used and we process it on the business's behalf (we are its service provider / processor).
What we collect and why
| Owner account: name, business name, email, phone, address, service area, hours, prices and on-call numbers | To set up and run the receptionist and bill you |
| Callers: phone number, name, address, job details and anything said on the call | To answer the call, book or pass on the job and text the caller about it |
| Call audio (only if the business turns recording on) and a written transcript of every call | So the business can check what was said, and to handle disputes |
| Texts to and from the business's Towntide number, including STOP replies | To send booking confirmations, reminders and missed-call text-backs, and to honour opt-outs |
| Connected tools (e.g. Jobber): access tokens and the client and request records we create | To put booked jobs straight into the business's own system |
| Billing: plan, invoices and payment status (card details stay with Stripe) | To charge the subscription |
We don't sell personal information, we don't "share" it for cross-context behavioural advertising, and we don't use it for advertising. We don't make decisions with legal or similarly significant effects about you by automated means alone.
Legal bases (GDPR and UK GDPR)
- Contract: to provide the service you signed up for.
- Legitimate interests: security, fraud prevention, fixing errors and improving the service.
- Consent: marketing emails and optional features you turn on (you can withdraw at any time).
- Legal obligation: tax, accounting and responding to lawful requests.
Call recording, AI disclosure and consent
Every call starts with a short notice that the caller is speaking with an AI assistant for the business and, if the business records calls, that the call is recorded. Callers can ask for the call not to be recorded, or ask for a person, and the assistant will take a message instead.
Some places require every person on a call to agree to recording (for example California, Florida, Illinois, Maryland, Massachusetts, Montana, New Hampshire, Pennsylvania and Washington in the United States). The notice at the start of every call is how we ask; callers who continue after the notice are treated as agreeing. Recording is off by default and the business chooses to turn it on.
Towntide Voice is not an emergency service. Anyone in danger should call 911.
Texts (CASL and US TCPA)
We only text a caller about their own call or booking (a missed-call text-back, a confirmation or a reminder). We never send marketing texts to callers. Every text identifies the business, and replying STOP stops all texts from that number immediately.
Service providers
We use these providers to run Towntide Voice. Each is bound by a contract to protect the data and use it only for us:
- Vercel (hosting, United States and Canada edge)
- Supabase (database and sign-in, hosted in Canada: ca-central-1)
- Resend (email delivery, United States)
- Twilio (phone numbers, calls and texts, United States)
- OpenAI (AI text and speech processing, United States; API data isn't used to train their models)
- Stripe (payments and billing; Stripe holds card numbers, we never see them)
- Jobber (only if the business connects it)
Where your data is stored
Our main database is in Canada. Some providers process data in the United States or elsewhere, so it may be accessible to authorities there. For transfers of data about people in the EU or UK we rely on the European Commission's adequacy decision for Canada (commercial organisations under PIPEDA), and on Standard Contractual Clauses and the UK Addendum with our providers.
How long we keep it
- Call transcripts and recordings: deleted after the business's retention setting (30 to 365 days; 90 days by default).
- Texts and opt-out records: opt-outs are kept for as long as the number is in use, so we never text someone who said STOP.
- Owner account and billing records: while the account is open, then 7 years for tax records (Canada Revenue Agency rules).
Your rights
- Everyone: ask to see, correct or delete your personal information, or ask how it's used. We answer within 30 days (Canada: PIPEDA and Alberta PIPA allow up to 45 days in some cases; we aim for 30).
- Canada: you can complain to the Office of the Privacy Commissioner of Canada or, in Alberta, the Office of the Information and Privacy Commissioner of Alberta.
- EU and UK: you also have the rights to restrict or object to processing, to data portability, and to complain to your local data protection authority (in the UK, the ICO).
- California (CCPA/CPRA): you have the rights to know, delete and correct, to opt out of sale or sharing (we do neither), to limit use of sensitive personal information, and not to be treated differently for using these rights. An authorised agent can make a request for you.
To use any of these rights, email d.mayne@hotmail.com or use the contact form. We'll confirm your identity before we act. If your request is about data a business holds about you, we'll pass it to that business and help it answer.
Emails and texts (CASL)
We send service messages (receipts, security and account notices) because they're needed to run your account. We send marketing emails only with your consent, every one identifies AO and includes our mailing address and a one-click unsubscribe, and we act on an unsubscribe within 10 business days (usually straight away).
Cookies
We use only the cookies needed to sign you in, keep you secure and remember your language. No advertising or cross-site tracking cookies.
Children
Towntide Voice isn't for children. It's for businesses and adults. We don't knowingly collect information from anyone under 16.
Security and breaches
Data is encrypted in transit and at rest, access is limited to the people who need it, and admin actions are logged. If a breach creates a real risk of significant harm, we'll notify you and the Privacy Commissioner of Canada and the Alberta Information and Privacy Commissioner as the law requires (and EU/UK authorities within 72 hours where GDPR applies).
Changes
If we make a material change we'll email account holders and post the new version here before it takes effect.
Contact and Privacy Officer
Dallas Mayne (Privacy Officer)
AO, a sole proprietorship operated by Dallas Mayne
5509 Taylor Way
County of Grande Prairie No. 1, AB T8W 0H3
Canada
Email: d.mayne@hotmail.com · or use the contact form