TermsLead TermsPrivacyPrivacy RightsCookiesSMS TermsDo-Not-CallRefund

Privacy Policy

Effective date: April 28, 2026 · Last updated: April 28, 2026

This Privacy Policy explains how QVANTUS CAPITAL LLC, a Delaware limited liability company doing business as CallerSync ("CallerSync," "we," "us"), collects, uses, discloses, and protects personal information when you use our website at callersync.com, the contractor portal, our APIs, our homeowner-facing properties (including hirecontractorstexas.com), and any related services (collectively, the "Service").

1. Who we are

Controller of record: QVANTUS CAPITAL LLC, 8 The Green Ste B, Dover, DE 19901, USA.
Privacy contact: privacy@callersync.com.

2. Information we collect

From contractors (B2B users)

  • Identifiers: name, business name, email, phone, postal address, IP address.
  • Account & commercial information: hashed password, ZIP coverage, services offered, business hours, wallet balance, transaction history, Stripe customer ID.
  • Communications: calls placed, calls received, call recordings, AI-assistant transcripts, support emails, in-app messages.
  • Device & usage: browser type, operating system, pages visited, timestamps, error logs.

From homeowners (consumer leads)

  • Name, phone number, ZIP code, requested service category, free-text notes.
  • TCPA consent record (timestamp, page URL, IP address, checkbox state).
  • Audio recording and transcript of any call placed through the Service.

From cookies and similar technologies

We use only strictly necessary first-party cookies (an HTTP-only session token named access_token) to keep you signed in. We do not currently set analytics, advertising, or social-media cookies. See our Cookie Notice for details.

3. How we use the information

  • To operate the Service: routing calls and leads, charging the wallet, displaying analytics, sending transactional email and SMS, provisioning AI assistants.
  • To bill, prevent fraud, and resolve disputes (including reviewing call recordings).
  • To comply with legal obligations, respond to lawful requests, and enforce our Terms.
  • To improve the Service, including training and tuning the AI agent on de-identified or aggregated call data.
  • To send service announcements; with your separate consent, marketing emails (you can unsubscribe at any time).

4. Legal bases (for users in jurisdictions where this applies)

We process personal information to perform our contract with you, to comply with legal obligations, with your consent (for marketing and call-recording disclosures where opt-in is required), and for our legitimate interests in operating, securing, and improving the Service.

5. How we share information

We share personal information only with the following categories of recipients:

  • Matched contractors. When a homeowner submits a lead, we share the homeowner's name, phone, ZIP, requested service, and notes with the matched contractor so they can perform the service. After the match, the contractor acts as an independent controller of that information.
  • Service providers (sub-processors) acting under written agreement:
    • Twilio, Inc. — voice telephony, SMS, A2P 10DLC.
    • Vapi — AI voice-agent inference and transcription.
    • Stripe, Inc. — payment processing for wallet top-ups.
    • SendGrid (Twilio) — transactional email.
    • Hetzner Online GmbH — hosting and infrastructure (Germany / EU).
  • Legal & safety. To comply with law, lawful process, or court order; to enforce our Terms; to protect the rights, property, or safety of CallerSync, our users, or the public.
  • Business transfers. In connection with a merger, acquisition, financing, or sale of assets, with successors bound to honor this Policy.

We do not sell personal information for monetary consideration. Sharing a homeowner's contact details with the matched contractor may be considered a "share" for cross-context behavioral advertising under the California CPRA only if used for that purpose; we do not use it for that purpose. See Section 8 for California rights including the right to opt out of any sale or share.

5b. Tracking technologies and advertising

On marketing pages we may use a small number of tracking technologies, gated by Google Consent Mode v2 with a default-deny posture and an in-page consent banner. We honor the Global Privacy Control (GPC) signal automatically.

  • Essential — first-party cookies for authentication, security, anti-fraud, and remembering your consent choice. Always on. No tracking purpose.
  • Analytics — Google Analytics 4. Pageviews, traffic sources, aggregate behavior. IP anonymized. Loaded only after analytics consent.
  • Advertising — Google Ads, Meta (Facebook) Pixel. Conversion measurement and remarketing on marketing pages only (not inside the authenticated contractor portal). Loaded only after advertising consent. Disabled when GPC is present.

We do not use fingerprinting, session replay, or cross-site identity graphs. You can change your choice anytime by emailing privacy@callersync.com with the subject "Do Not Sell or Share My Personal Information", or by clearing this site's cookies.

6. Call and SMS recording

Inbound and outbound calls placed through the Service may be recorded and transcribed for billing, quality, fraud prevention, dispute resolution, and AI improvement. Where a state or jurisdiction requires two-party (all-party) consent — including California, Florida, Illinois, Maryland, Massachusetts, Montana, New Hampshire, Pennsylvania, and Washington — we play a recording disclosure at the start of the call. By staying on the line you consent to recording. SMS sent through the Service is logged for delivery, opt-out compliance, and audit purposes.

7. Data retention

  • Account records: for the life of the account plus seven (7) years for tax and audit.
  • Call recordings and transcripts: up to twenty-four (24) months, then deleted or anonymized for AI training.
  • Stripe transaction metadata: as required by Stripe and applicable financial law.
  • TCPA consent records: at least four (4) years from the last consented contact.

8. Your rights — California (CCPA/CPRA)

California residents have the right to:

  • Know what personal information we have collected, the sources, the purposes, and the categories of recipients.
  • Access a copy of personal information collected in the prior 12 months (or longer on request).
  • Delete personal information, subject to legal exceptions (billing, fraud, compliance).
  • Correct inaccurate personal information.
  • Opt out of sale or sharing of personal information. Use the link below — we treat the request as a global opt-out.
  • Limit the use of sensitive personal information to that necessary to provide the Service.
  • Non-discrimination — we will not deny service, raise prices, or lower quality because you exercised a right.

To exercise these rights, email privacy@callersync.comwith the subject "CCPA Request" and the request type. We will verify your identity (we may request enough information to match you to an account) and respond within 45 days. Authorized agents may submit requests with written permission.

→ Do Not Sell or Share My Personal Information

9. Texas residents — SB 140 telemarketing protections

Texas treats most outbound calls and text messages from a business to a consumer as regulated telemarketing under Texas Business & Commerce Code §305 and the 2025 amendments commonly referred to as SB 140. CallerSync operates an inbound, consent-based model: we contact you only after you submit a service request, and we gate every outbound attempt on a multi-layer compliance check.

  • Calling-window enforcement. Texas calls and SMS are placed only Monday–Saturday 09:00–21:00 and Sunday 12:00–21:00 local time. Federal default (08:00–21:00) applies in non-Texas states. The window is enforced in code, not policy.
  • Multi-layer Do-Not-Call scrubbing. Before any call or SMS, we check the recipient against (a) our internal STOP list, (b) the federal DNC registry, and (c) the Texas state DNC list. A match in any list blocks the attempt. State-DNC scrubs are refreshed on a weekly schedule; federal daily.
  • Reassigned-number protection. When a consent record is older than a typical service window, we query Twilio Lookup's reassigned-number package before contacting the number, and fall back to a 6-month/90-day inactivity heuristic if the API is unavailable.
  • Opt-out (STOP). Replying STOP to any CallerSync SMS revokes every active consent record for the number, suppresses the number from all future contact, and is confirmed by a single reply. No marketing add-ons.
  • Recording disclosure. Inbound and outbound calls placed through CallerSync include an audible recording disclosure on the caller leg before any conversation, satisfying two-party-consent state laws.

To exercise Texas-specific rights — including a copy of the consent we hold for your number — email privacy@callersync.com with subject "Texas Privacy Request."

10. Your rights — other US states

Residents of states with comparable privacy laws (including Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and Delaware) have similar rights of access, deletion, correction, portability, and opt-out of targeted advertising. The same email address above is the point of contact.

11. Children

The Service is not directed to children under 16. We do not knowingly collect information from children. If you believe a child has provided us information, contact privacy@callersync.com and we will delete it.

12. Security

We use industry-standard safeguards: TLS in transit, encrypted database storage at rest at the host level, hashed passwords, HTTP-only authentication cookies, role-based access control, principle-of-least-privilege for staff, and a hardened ingress (Caddy) with Let's Encrypt certificates. No system is 100% secure; you use the Service at your own risk and should keep your credentials confidential.

13. International transfers

Our infrastructure is hosted in Germany (Hetzner). If you access the Service from outside the EU/EEA, your information will be transferred to and processed in the EU and the United States. Where required, we rely on Standard Contractual Clauses or equivalent safeguards.

14. Third-party links

The Service may link to third-party sites (Stripe checkout, etc.). We are not responsible for the privacy practices of those sites; review their policies separately.

15. Changes

We may update this Policy from time to time. We will post the revised version with a new effective date and, for material changes, notify you by email or in-app banner.

16. Contact

QVANTUS CAPITAL LLC
8 The Green Ste B, Dover, DE 19901, USA
Privacy: privacy@callersync.com
Legal: legal@callersync.com