Privacy Policy

Effective date: May 15, 2026

1. Who We Are

Porchlight ("we", "us", "our") operates an AI-powered receptionist platform for contractors, available at this website. This Privacy Policy explains how we collect, use, and protect information when you use our Service — both as a contractor subscriber and as a caller who contacts a contractor that uses our platform.

2. Information We Collect

Account Information (Contractors)

  • Email address and password (hashed — never stored in plain text)
  • Company name, contact name, and business phone number
  • Service area and service types
  • Payment information (processed and stored by Stripe — we never store card numbers)

Call & Lead Data

  • Caller phone numbers
  • Caller names, addresses, and job descriptions (as provided by the caller to the AI)
  • Call transcripts generated from the conversation
  • AI-generated lead summaries
  • Call duration and metadata

Usage Data

  • Pages visited and features used within the dashboard
  • Session information (login times, browser type)

3. Call Recording & Transcription

Calls handled by Porchlight are recorded and transcribed in real time. The audio recording and resulting transcript are stored on your account and used to generate a structured lead summary.

Before the AI receptionist begins speaking, every caller hears an automated notice that the call may be recorded ("This call may be recorded for quality.", or the Spanish equivalent for Spanish-language calls). This notice is intended to satisfy the disclosure requirements of most US jurisdictions, including states that require two-party consent for call recording.

Contractors remain responsible for confirming that the recording notice, together with any additional disclosures, satisfies the laws applicable to their business, customers, and locations (including the Telephone Consumer Protection Act and state wiretapping laws). The AI does not proactively announce that it is an AI, but will acknowledge that it is an AI assistant if a caller asks directly.

4. How We Use Your Information

  • To provide and operate the AI receptionist service
  • To send you email notifications about new leads and account activity
  • To process subscription payments and manage billing via Stripe
  • To monitor service health, diagnose errors, and improve reliability
  • To comply with legal obligations

We do not use your call transcripts, lead data, or customer information to train AI models — ours or any third party's. Data sent to Anthropic and ElevenLabs is processed solely to generate responses for that specific call and is governed by their respective data processing terms.

5. Data Sharing

We do not sell your data. We share data only with the following service providers, as necessary to operate the platform:

  • Twilio — phone number provisioning, voice call routing, and SMS delivery
  • Stripe — subscription billing and payment processing
  • Anthropic — AI language model used to conduct and transcribe calls and generate lead summaries
  • ElevenLabs — text-to-speech voice synthesis used during calls (if enabled on your account)
  • Hosting and infrastructure providers — cloud hosting and database services used to run the platform

We may also disclose information if required by law, court order, or to protect the rights and safety of our users or the public.

6. Caller Data & Contractor Responsibility

Your customers (callers) provide personal information to the AI receptionist during calls. This data is stored on your Porchlight account and is accessible only to you and your authorized team members. As the contractor, you are the data controller for your callers' information. You are responsible for handling that data in compliance with applicable privacy laws, including CCPA, TCPA, and any state or local regulations that apply to your business.

7. Data Retention

We retain your account data for as long as your subscription is active. After your subscription ends, leads and call records are retained for 12 months, then permanently deleted. You may request earlier deletion by contacting us. Stripe retains billing records independently per their own retention policy.

8. Security

We use industry-standard security practices including encrypted connections (TLS/HTTPS), hashed passwords, and access controls scoped to each account. No system is 100% secure — if you suspect unauthorized access to your account, contact us immediately at [email protected].

9. Your Rights

You may request access to, correction of, or deletion of your personal data at any time by contacting us. California residents have additional rights under the CCPA, including the right to know what personal information we collect and the right to request deletion. EU/EEA residents may have rights under GDPR — please contact us for more information or to submit a request.

10. Children's Privacy

Porchlight is intended for use by businesses and adults only. We do not knowingly collect personal information from anyone under the age of 13. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

11. Cookies

We use a single session cookie to keep you logged in to the dashboard. We do not use advertising, tracking, or third-party analytics cookies.

12. Changes to This Policy

We may update this policy periodically. We will notify you by email at least 14 days before any material changes take effect. Continued use of the Service after that date constitutes acceptance of the updated policy.

13. Contact

Privacy questions, data requests, or concerns: [email protected]