LobbyStack

Last updated: May 11, 2026

Privacy Policy

This Privacy Policy explains how Lobbystack Inc. ("Lobbystack," "LobbyStack," "we," "our," or "us") collects, uses, discloses, and protects personal information when you visit our website, use LobbyStack Cloud, communicate through LobbyStack-powered calls or SMS, contact support, or interact with our services.

This Policy is intended to support transparency for business customers, callers, message recipients, website visitors, and open-source/self-hosted users. If your business uses LobbyStack to communicate with its customers, you are responsible for providing any additional notices required for your own use of the service.

1. Scope and our role

LobbyStack provides a business AI receptionist platform for calls, SMS, appointment booking, routing, summaries, customer intake, knowledge-based answers, and related workflows. We may process personal information as a business/controller for our own website, accounts, billing, security, support, and marketing operations. We may also process personal information on behalf of business customers that use LobbyStack to communicate with their callers, customers, leads, patients, clients, or other end users.

When a business uses LobbyStack to communicate with you, that business is responsible for deciding how and why your information is used. Please contact that business directly for questions about its own privacy practices.

2. Information we collect

Account and business information

We collect information such as names, email addresses, phone numbers, business names, business addresses, roles, login details, account settings, authorized users, support preferences, compliance information, and billing contacts.

Call, SMS, and contact information

LobbyStack may process phone numbers, caller IDs, call metadata, call recordings, transcripts, summaries, voicemails, SMS message content, message metadata, opt-in and opt-out status, consent records, contact profiles, notes, conversation history, appointment details, requested services, routing decisions, escalation outcomes, and related operational records.

Business content and knowledge data

Customers may upload or connect business information, FAQs, service descriptions, prices, hours, locations, policies, calendars, documents, website content, scripts, rules, and other materials used to configure the AI receptionist.

Billing, payment, and tax information

We and our payment processor, currently Polar, may collect billing details, payment method information, transaction history, plan details, metered usage, invoices, tax information, and payment status. We do not store full payment card numbers unless a payment processor provides that service on our behalf.

Website, device, analytics, and support information

We may collect IP addresses, device and browser information, pages viewed, referring pages, interactions, approximate location, cookies or similar identifiers, product telemetry, logs, diagnostic information, crash reports, support tickets, emails, and other communications with us.

3. SMS consent and messaging privacy

LobbyStack supports non-marketing operational and conversational SMS messages, such as customer inquiry replies, appointment confirmations, missed-call follow-up, service updates, support messages, reminders, routing, intake, and related business workflows. Message frequency varies. Message and data rates may apply. Message recipients can reply STOP to opt out and HELP for help where supported, or contact support@lobbystack.com.

We may process SMS consent records, opt-in sources, opt-out status, message content, timestamps, phone numbers, carrier metadata, and delivery information to provide and operate messaging features, comply with carrier and A2P/10DLC requirements, prevent abuse, and honor opt-out requests.

We do not sell, rent, or share SMS opt-in data or consent information with third parties or affiliates for their marketing or promotional purposes.

4. How we use information

We use personal information to:

  • Provide, operate, secure, maintain, and improve LobbyStack.
  • Answer calls, process SMS, generate summaries, route requests, and support appointment workflows.
  • Configure AI responses using customer-provided business information and instructions.
  • Manage accounts, authentication, billing, taxes, plans, usage, and support.
  • Process opt-ins, opt-outs, consent records, and telecommunications compliance requirements.
  • Detect, prevent, and investigate spam, abuse, fraud, security incidents, and misuse.
  • Communicate about service updates, security, billing, support, and administrative matters.
  • Analyze service performance, reliability, errors, and feature usage.
  • Comply with legal, regulatory, contractual, provider, carrier, and accounting obligations.

We may use de-identified, aggregated, or statistical information to analyze and improve the service where it does not identify a person, business customer, or end user.

5. AI and automated processing

LobbyStack may send prompts, business context, call audio, transcripts, SMS content, customer instructions, and related workflow data to AI model providers or AI infrastructure providers to generate responses, summaries, classifications, routing decisions, or other automated outputs. AI outputs can be inaccurate or incomplete, and business customers are responsible for configuring appropriate human review and fallback procedures.

6. How we disclose information

We disclose information only as needed for the purposes described in this Policy, including to:

  • Telephony, SMS, carrier, and number providers.
  • AI model and speech processing providers.
  • Hosting, database, storage, infrastructure, monitoring, and security providers.
  • Polar or other payment processors, billing systems, tax tools, and accounting providers.
  • Email, support, customer communication, and notification providers.
  • Analytics and product telemetry providers.
  • Calendar, document, website import, and other integration providers you connect.
  • Professional advisers, auditors, insurers, and legal or regulatory authorities where required.
  • Successors or participants in a merger, financing, acquisition, reorganization, or sale of assets.

We do not sell personal information in the ordinary sense of that word. We do not share SMS opt-in data or consent information with third parties or affiliates for their marketing or promotional purposes.

7. Cookies and analytics

We may use cookies, local storage, pixels, analytics tools, and similar technologies to operate the website and app, remember preferences, understand product usage, improve performance, detect abuse, and measure marketing effectiveness. You can control some cookies through your browser settings, but disabling cookies may affect service functionality.

8. Retention

We retain personal information for as long as needed to provide the service, maintain accounts, support billing and tax records, comply with legal and provider obligations, resolve disputes, enforce agreements, prevent abuse, and maintain security. Retention periods may vary based on the type of data, account settings, customer configuration, backup cycles, legal obligations, and operational needs.

Business customers may be able to delete or export certain account data from the service. Some records may remain in backups, logs, compliance records, invoices, or audit trails for a limited period or where retention is legally required.

9. Security

We use administrative, technical, and organizational safeguards designed to protect personal information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for protecting your credentials, managing authorized users, configuring access controls, and using the service appropriately.

10. Cross-border processing

LobbyStack is operated from Canada, and personal information may be processed in Canada, the United States, and other jurisdictions where we or our service providers operate. Those jurisdictions may have privacy laws different from the laws where you live. Where required, we use contractual, technical, and organizational measures intended to protect personal information transferred across borders.

11. Privacy rights and requests

Depending on where you live and your relationship with LobbyStack, you may have rights to access, correct, delete, export, restrict, or object to certain processing of your personal information. You may also have rights to withdraw consent where processing is based on consent, subject to legal or contractual limits.

To make a privacy request, contact support@lobbystack.com. We may need to verify your identity and, if your information is controlled by a business customer, refer your request to that customer or process it according to that customer's instructions.

12. Children

LobbyStack is a business service and is not directed to children. We do not knowingly collect personal information from children through our own website or hosted account signup. If you believe a child has provided personal information to us, contact us so we can review the request.

13. Changes to this Policy

We may update this Privacy Policy from time to time. If changes are material, we will provide reasonable notice, such as by posting an updated Policy, updating the date above, emailing account contacts, or notifying users in the service.

14. Terms of Service

Your use of LobbyStack is also governed by our Terms of Service.

15. Contact

Questions or requests about this Privacy Policy can be sent to Lobbystack Inc. at support@lobbystack.com.