Privacy Policy

ServiceAi · tap.serviceaihq.com · last updated 6 August 2026

ServiceAi provides digital business cards, NFC tap cards, lead capture, scheduling, and business phone lines (calls and SMS). This policy describes what we collect, why, and what we never do with it.

Information you give us

Account holders sign in with an email address and build a public profile they control. Visitors who choose to submit a contact form or share their details provide a name, email address, and optionally a phone number and a message. That information is delivered to the specific business or person whose card they submitted it on, and to no one else.

SMS / text messaging

Consent. We send text messages only to people who have opted in — by submitting a form that carries explicit SMS consent language, or by texting one of our numbers first. Consent is collected at the point of submission and is never a condition of purchase.

No third-party marketing — ever. Phone numbers and SMS opt-in consent are not shared with, sold to, or disclosed to any third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent are not shared with any third parties.

Opting out. Reply STOP to any message to unsubscribe immediately, or HELP for help. Message frequency varies by conversation; message and data rates may apply.

Phone calls

Calls to our business numbers may be answered by an automated AI assistant when a human is unavailable. Voicemails and messages left with the assistant are transcribed and delivered to the business the caller dialed. We do not record calls without notice.

What the service records when a card is tapped

Each tap of a card is logged so the cardholder can see their own card activity: date and time, a browser user-agent string (to show a device type), coarse country from the network edge, which card was tapped, and a repeat-visit cookie. We do not record precise location, IP addresses, advertising identifiers, or device fingerprints from card taps. Tap records are deleted automatically after 180 days.

The iOS app

Your session token is stored in the iOS Keychain, restricted to the device and excluded from iCloud and encrypted backups. It is sent only to tap.serviceaihq.com, over HTTPS.

Address book. If you choose to import contacts, the app asks for permission at that moment and sends only the names and numbers you pick, so those people can reach you directly instead of the receptionist. We never read your address book in the background.

Business-card scanner. Text is recognised on your phone. Only the recognised text is sent to our server to sort it into a name, company, email and phone; the photo never leaves your device.

Crash reports. The app sends crash and error reports to Sentry. They contain the device model, OS version and app version, and the code path that failed. They do not contain your contacts, messages or profile.

Your voice

If you choose to have the receptionist answer in your own voice, you record about a minute of speech in the app after reading a consent sentence aloud. That recording is sent to ElevenLabs to build a voice model used only for your receptionist. It is never used for anyone else, never sold, and you can delete the voice from the receptionist settings at any time, which removes it from ElevenLabs as well.

AI processing

Two features use a language model. The AI phone assistant answers calls you miss; the caller hears a disclosure that they are speaking with an automated assistant, and the transcript is stored on your account. The contact read is an optional, on-demand briefing about one of your contacts, written from the texts, calls and card activity already stored on your account plus notes you typed; it runs on Cloudflare Workers AI, is generated only when you ask, is labelled as AI in the app, and is never used to train models. Neither feature shares data with any other customer. If you set up a public-web look-up, the contact's name and company are sent to a search provider to find public pages about them.

Third parties as processors

We use a small number of infrastructure providers to operate the service: Cloudflare (hosting, delivery and Workers AI), Twilio (phone calls and SMS carriage), ElevenLabs (the AI phone assistant's voice and conversation), Stripe (payments), Sentry (crash reports), Google Workspace and Postmark (email we send you), and Vercel (hosting for some destination pages). If you connect a CRM (HubSpot, Jobber or Housecall Pro), leads and call summaries are sent to that CRM at your instruction. Each processes data solely to provide the service. We use no advertising networks and no cross-site tracking.

Your choices

Reply STOP to end texts. Email us to access or delete information we hold about you. Account holders can edit or delete their profile content at any time, and can delete the whole account from inside the app (Menu → Delete account): the profile, contacts, messages, call log, analytics, cards and phone number are removed, the number is released and any subscription is cancelled. Deletion is immediate and cannot be undone.

Contact

ServiceAi · Santa Monica, California · brandon@serviceaihq.com

Questions: brandon@serviceaihq.com · serviceaihq.com