Privacy Policy
Last updated: May 22, 2026 — v2.0 (substantially revised; pending attorney review)
This Policy explains what Built by Jarvis collects, how we use it, who we share it with, and how we protect it — across Jarvis Answers (AI phone receptionist), Jarvis Ranks (SEO + site rebuilds), and the Built by Jarvis client portal. We try to keep things plain. Where defined terms appear (Customer, Caller, Site Visitor, Customer Data, etc.), they have the meanings in our Terms & Conditions.
1. Who we are
Built by Jarvis is the trade name under which RH Private Capital operates its AI services portfolio. References to “we,” “us,” or “Built by Jarvis” throughout this Policy refer to that operating entity. We are based in Texas, United States.
2. Information we collect
From callers to Jarvis Answers
When you call a business that uses Jarvis Answers, we process your phone number, the audio of your conversation, the transcription of that audio, call duration, call metadata (start time, direction, end reason), and any information you voluntarily provide during the call — for example your name, appointment preferences, or a message you ask us to pass along.
From callers receiving text messages
If our AI receptionist sends you a text message at your request during a call, we retain your phone number and the content of the message that was sent for delivery, audit, and compliance purposes.
From Site Visitors to jarvisranks.com
When you submit a URL for a free SEO scan, we record the URL, the resulting Lighthouse and on-page scores, and any name, email, or phone number you provide to receive a copy of your report. When you complete the questionnaire to request a preview, we additionally collect your business name, services, location, contact information, and any optional brand preferences you choose to share.
From Site Visitors to any of our websites
When you visit any of our websites we may collect standard web analytics including IP address, browser type, pages visited, referring URL, and approximate geographic region via Cloudflare Web Analytics, which is privacy-friendly and does not set cookies for tracking.
From business Customers
For businesses that sign up for a paid subscription we collect account information including business name, contact name, email, phone number, business address, billing address, and tokenized payment information through our payment processor (Stripe). We never store raw card numbers or CVCs.
3. How we use it
We use the information we collect to:
- Provide and operate the Services — answer calls, book appointments, send requested SMS, transfer calls, generate site previews, deliver report cards, run monthly SEO maintenance.
- Deliver transactional emails (report card delivery, preview readiness, build status, payment receipts, monthly report cards).
- Communicate with business Customers about their accounts, including service updates and support.
- Process payments and prevent fraud, via Stripe.
- Detect, prevent, and investigate abuse of our platforms.
- Comply with legal obligations.
- Improve, monitor, and benchmark our Services — using de-identified aggregate analytics only (see Section 5 on AI).
4. Call recordings
Calls handled by Jarvis Answers are recorded and transcribed for service operation, quality assurance, dispute resolution, and the analytics described in Section 5. Recordings are stored securely on Twilio infrastructure (see Subprocessor list, Section 9) and accessed only by the business Customer that received the call and by Built by Jarvis personnel on a need-to-know basis for operating the Service.
Our standard AI agent greeting discloses that the call may be recorded. Call-recording law varies by U.S. state and by country; some jurisdictions require all parties to consent to recording. Business Customers are responsible for ensuring their use of Jarvis Answers complies with applicable recording, wiretapping, and privacy laws in every jurisdiction where their callers may be located, including adding any additional disclosure language required by their jurisdiction.
5. AI processing & training
The Services use AI models supplied by Anthropic (currently the Claude family) to power our AI receptionists, generate site copy and blog posts, and grade websites. By using the Services you acknowledge:
- We do not train AI models on identifiable Customer Data. We do not use call recordings, transcripts, knowledge-base contents, or caller-identifying information to train, fine-tune, or otherwise modify the underlying AI models. Our AI provider (Anthropic) operates under its own commitments to similar effect for API customers.
- We reserve the right to derive de-identified aggregate metrics from our operation of the Services — for example, call counts, average call durations, categorized question patterns with no identifying details, and error rates. These metrics cannot identify any individual or business and are used solely to improve and benchmark the platform.
- AI output is best-effort and may be wrong. Customers are responsible for reviewing AI-generated content (knowledge-base behaviors, website copy, blog posts) before relying on it for any compliance-sensitive purpose.
6. Text messaging
Our Jarvis Answers AI receptionists may send text messages to callers only when the caller explicitly requests one during a phone call (for example, “text me the address” or “text me a payment link”). Business owners using our platform may separately opt in to receive SMS notifications when their AI receptionist completes a call, takes a message, books an appointment, or captures a lead, and can disable that at any time from their portal.
We do not send unsolicited marketing text messages. Recipients can opt out by replying STOP to any message. Reply HELP for help or contact jarvis@builtbyjarvis.com. Message and data rates may apply.
7. Email communications
If you provide an email address through a free scan, questionnaire, contact form, or paid sign-up, we may send you transactional emails (report card delivery, preview URLs, build status, payment receipts, monthly reports) and occasional product updates. You can unsubscribe from non-transactional emails at any time using the link in any email we send or by emailing jarvis@builtbyjarvis.com. Email delivery is handled by Resend (see Subprocessor list).
8. Data ownership & sharing
We do not sell your personal information to third parties. Business Customers retain ownership of Customer Data; we retain ownership of the platform and de-identified aggregate analytics (see our Terms, Section 5).
We may share information with:
- The business you called. When you call a number routed through Jarvis Answers, the call (and any information you shared) is shared with the business that the call was placed to — that business is our Customer and the call was directed to them.
- Service providers (“Subprocessors”) who help us operate the platform; see Section 9 for the full list.
- Law enforcement or government agencies when required by valid legal process (subpoena, court order, warrant) or to protect our rights, property, or safety, or that of our Customers or the public.
- Successor entities in connection with a merger, acquisition, financing, or sale of all or substantially all of our assets. Affected users will be notified.
9. Subprocessors
The list below is current as of the “Last updated” date above and matches the Subprocessor list in our Terms, Section 11. We notify active business Customers at least 30 days before any material change.
| Subprocessor | What they do | Where |
|---|---|---|
| Cloudflare | Hosting, edge compute (Cloudflare Workers / Pages), DNS, KV storage, R2 object storage, web analytics, email routing. | US / global |
| Anthropic | AI inference (Claude models) for the AI receptionist, copy generation, and content classification. | US |
| Twilio | Inbound telephony (call answering), call recording storage, SMS delivery. | US |
| Stripe | Payment processing, tokenized payment storage, invoicing, customer portal for billing self-service. | US |
| Resend | Transactional and notification email delivery. | US |
| Google — PageSpeed Insights | Lighthouse audits used to generate SEO report cards. | US |
| Google — Calendar (optional, opt-in) | Appointment booking integration where the Customer connects their calendar. | US |
10. Security
We implement reasonable technical and organizational measures designed to protect your information against unauthorized access, alteration, disclosure, or destruction. These include TLS encryption in transit; encryption at rest where supported by our Subprocessors; tokenized payment storage through Stripe; access controls that limit internal access to Customer Data on a need-to-know basis; and ongoing monitoring for unusual activity.
Financial-services Customers (GLBA Safeguards Rule). Where a Customer is a "financial institution" under the Gramm-Leach-Bliley Act, we operate as a service provider supporting that Customer’s compliance with the FTC Safeguards Rule (16 CFR Part 314). We maintain a written information security program and will provide reasonable cooperation with Customer’s vendor-oversight obligations on request. A separate Security Addendum is available for Customers who require formal attestation language.
No method of transmission or storage over the internet is 100% secure. We will notify affected Customers without undue delay of any actual or reasonably suspected breach of Customer Data in accordance with applicable law.
11. Data retention
We retain different categories of data for different periods:
- Active subscription data (call recordings, transcripts, agent configurations, build records, knowledge-base documents) is retained for the duration of the Customer’s subscription.
- Free scan and questionnaire submissions from prospects are retained for up to 24 months for service operations and analytics, after which they are automatically purged or anonymized.
- Cancelled accounts. Upon cancellation, account data is retained for 60 days during which Customer may request an export of Customer Data. Exportable data is limited to information about Customer’s business and Customer’s callers (call recordings, transcripts, message and appointment logs, knowledge-base contents, scan history, customer-facing agent fields) and excludes Built by Jarvis Background IP — see our Terms, Section 19 for the full scope. After the 60-day window, data is deleted from our active systems within an additional 30 days. Some data may persist in routine backup media for our standard backup retention period, after which it is overwritten.
- Billing and tax records are retained as required by applicable law (typically 7 years).
You may request deletion of your data at any time by emailing jarvis@builtbyjarvis.com, subject to our legal record-keeping obligations.
12. Cookies and tracking
Our websites use minimal tracking. We rely on Cloudflare Web Analytics, which does not use cookies or fingerprinting and respects Do Not Track. We may use a single first-party cookie or session-storage entry to remember your email and lead identifier across pages of jarvisranks.com so the checkout flow works smoothly. We do not run third-party advertising or remarketing pixels.
13. Children’s privacy
Our services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If we learn we have collected information from a child under 13, we will delete it promptly.
14. Your rights
Depending on your jurisdiction, you may have the right to:
- Access, correct, or delete personal information we hold about you.
- Opt out of text messages by replying STOP; reply HELP for assistance.
- Unsubscribe from non-transactional emails using the link in any message.
- Request a copy of the data we hold about you.
- Object to or restrict certain processing of your data.
- Lodge a complaint with a data-protection authority.
To exercise any of these rights, contact us at jarvis@builtbyjarvis.com. We will respond within 30 days.
15. International users
Our Services are hosted and operated from the United States. If you access our Services from outside the United States, your information will be transferred to and processed in the United States. By using the Services you consent to this transfer.
16. Changes to this Policy
We may update this Privacy Policy from time to time. We will notify active business Customers of any material changes by email and post the updated Policy on this page with a revised “Last updated” date.
17. Contact us
For questions about this Privacy Policy, to request access or deletion, or to exercise your rights, contact us at jarvis@builtbyjarvis.com.
This Policy is a draft prepared in good faith to reflect the operational realities of Built by Jarvis as of the “Last updated” date above. It has not been reviewed by an attorney as of publication. We recommend independent legal counsel for any party signing or relying on these terms.