Legal
Privacy Policy
This policy describes the data MacGIVR collects, how it is used, how long it is kept, and the rights you have over your information. Effective: May 16, 2026.
Data Collection and Retention -- California Residents and All Users
Effective May 16, 2026 | ServiceMob Inc., a Delaware corporation ("we," "ServiceMob") operates MacGIVR.
We collect and process the following categories of personal information to provide the MacGIVR AI-assisted IVR-navigation service (Cal. Civ. Code 1798.110(c)).
- Identifiers (1798.140(v)(1)(A)): Phone numbers (E.164), email address, account ID. Purpose: Authenticating identity for STIR/SHAKEN Verified ANI calls, account management.
- Customer Records / Commercial Information (1798.140(v)(1)(B), (D)): Service tier, call history. Purpose: Providing and billing for service; improving IVR navigation.
- Internet / Electronic Network Activity (1798.140(v)(1)(F)): OTP logs, login metadata. Purpose: Security incident detection and fraud prevention (1798.105(d)(2)).
- Audio / Electronic Data (1798.140(v)(1)(H)): Call recordings and voice transcripts. Purpose: IVR navigation replay, quality assurance, and -- with your opt-in -- model improvement.
- Inferences (1798.140(v)(1)(K)): IVR routing patterns. Purpose: Personalizing navigation suggestions.
Retention Periods (UOAS Personal Information): We keep phone numbers you verify by SMS code for 12 months. This lets us fix call routing errors and match records with our carrier (Cal. Civ. Code 1798.140(e)(5)). We keep logs of each SMS code we send and check for 3 years. These logs hold the phone number, time, result, IP address, and browser, and they help us spot fraud and stop abuse (Cal. Civ. Code 1798.105(d)(2)). We keep your written consent records and the call attestation grade for each call for 5 years, since federal law makes us hold them that long (Cal. Civ. Code 1798.105(d)(8)). After the 12 month and 3 year periods end, we hard delete those rows. Consent and call attestation rows stay in a locked audit log, and a delete request flags them as deleted but does not erase them.
We share this data with: Telnyx, Twilio / Twilio Verify, Deepgram, ElevenLabs, and Supabase acting as processors under DPAs. We do not sell or share your personal information for cross-context behavioral advertising.
Your Rights (Cal. Civ. Code 1798.100 et seq.): Know, delete (subject to legal-obligation exceptions), correct, opt out of data sale (we do not sell data), and non-discrimination. Submit requests at this page or email privacy@servicemob.com. Response within 45 calendar days (extendable 45 days with notice per 1798.130(a)(2)).
Right to Delete -- Exceptions: If you ask us to delete your data, we will still keep your consent records and call attestation rows as audit records, and we will not erase them (Cal. Civ. Code 1798.105(d)(8)). We may also keep SMS verification logs for the full 3 years to spot fraud and stop abuse, even if you ask us to delete them (Cal. Civ. Code 1798.105(d)(2)). For these records, a delete request flags the row as deleted but does not wipe it.
Additional Rights for IL / VA / CO / TX / CT / UT / WA Residents
Illinois (815 ILCS 530 (PIPA))
Illinois PIPA is a breach-notification law. We maintain reasonable security measures. If a breach affects Illinois residents, we notify you and the Illinois AG within 45 days. BIPA (740 ILCS 14) may apply if voice-print features are added; we will update this notice if that occurs.
Virginia (VCDPA, Va. Code 59.1-575 et seq.)
Virginia residents may appeal a denied deletion request to privacy@servicemob.com, and then to the Virginia AG at oag.state.va.us. We obtain explicit consent before using voice recordings for purposes other than IVR navigation service delivery.
Colorado (CPA, CO Rev. Stat. 6-1-1301 et seq.)
Colorado law requires annual review of whether voice recordings are still necessary. We conduct this review each January and auto-reset extended retention flags if no affirmative confirmation is received within 30 days. Colorado residents may opt out of targeted advertising via our Privacy Preference Center or a universal opt-out browser signal.
Texas (TDPSA, Tex. Bus. & Com. Code 541.001 et seq.)
Texas residents have rights to know, delete, correct, and opt out of the sale of sensitive personal data (including voice recordings). We do not sell personal data. If we process voice recordings for model training beyond service delivery, we will obtain prior consent from Texas residents.
Connecticut (CTDPA, Conn. Gen. Stat. 42-515 et seq.)
Connecticut residents may opt out of profiling used for automated decision-making with legal or significant effects. Residents may appeal a denied request to privacy@servicemob.com; if denied, contact the Connecticut AG.
Utah (UCPA, Utah Code 13-61-101 et seq.)
Utah residents may opt out of processing of sensitive personal data (including voice recordings) for targeted advertising. We do not conduct targeted advertising. We will update this notice if MacGIVR exceeds UCPA threshold criteria.
Washington (My Health My Data Act, RCW 19.373)
The Washington MHMD Act may apply if call content reveals health-related information (e.g., calls to a medical provider IVR). If health data is detected, we obtain explicit consent before collecting or sharing it and retain signed authorization for six years. Contact privacy@servicemob.com if you believe your health data has been collected.
Data We Collect
- Account information: name, email address, and callback phone number you provide during registration.
- Call recordings and transcripts: audio recordings and text transcripts generated during support sessions.
- Session metadata: call state events, IVR navigation logs, bridge outcome records, timestamps, and session identifiers.
- Company records: support phone numbers, operator notes, login identity hints, and optional account identifiers or verification PINs.
- Usage signals: request logs and error traces collected for product reliability and debugging.
How We Use Your Data
- AI and voice processing: call audio is transmitted to ElevenLabs, Deepgram, and OpenAI solely to operate the support session you requested.
- Call routing: Telnyx receives the destination phone number, callback number, and session identifiers to place and bridge calls.
- Product operation: session records, transcripts, and event logs are stored in our Supabase-hosted database.
- Support and debugging: we may access session metadata and error logs to diagnose product defects.
Retention
- Default retention: 90 days from session close for call recordings, transcripts, and session event logs. Account and company records retained for account life.
- Shorter retention periods can be set by contacting privacy@servicemob.com.
- Secure company values are purged immediately upon deletion of the associated company record.
Data Subject Rights
- Access: request a copy of your personal data by emailing privacy@servicemob.com. We respond within 45 days.
- Deletion: request deletion of your account and session records. Processed within 45 calendar days (extendable 45 days with notice), subject to legal-hold and legal-obligation exceptions.
- Export: request a machine-readable export of your session transcripts and account data by emailing privacy@servicemob.com.
- Correction: update your account profile directly in product settings at any time.
- Objection to training use: opt out of product-improvement training data use at any time from profile settings.
SMS / Text Messaging Program
- When you provide a mobile number at registration or when you start a session, you consent to receive conversational, transactional text messages from MacGIVR about the support sessions you request: hold and wait-time status updates, notice when a live agent is reached, and relay of one-time verification codes the company you are contacting sends to you. MacGIVR does not send marketing or promotional text messages.
- Message frequency varies and depends on the support sessions you initiate. Message and data rates may apply.
- Reply STOP to any message to unsubscribe at any time; reply HELP for help, or contact privacy@servicemob.com. Mobile carriers are not liable for delayed or undelivered messages.
- We do not sell or share your mobile opt-in information or phone number with third parties for their own marketing or promotional purposes. Text messages are delivered through our telecommunications carrier, Telnyx, acting as a data processor under a DPA.
Third-Party Sub-Processors
- ElevenLabs (voice AI), Deepgram (transcription), OpenAI (language model), and Telnyx (PSTN call routing and SMS/text message delivery) act as data processors under DPAs restricting use to service delivery.
- Twilio / Twilio Verify processes phone numbers for OTP verification at registration. Supabase provides hosted database and authentication infrastructure (AWS us-east-1).
Contact
- Privacy requests, questions, or data subject rights inquiries: privacy@servicemob.com.
- ServiceMob, Inc. -- Delaware, USA.