MacGIVR Privacy Policy

MacGIVR is a product of ServiceMob, Inc., a Delaware corporation ("ServiceMob", "we", "us"). MacGIVR is an AI assistant that phones a company for you, works through its phone menu, waits on hold, can ask you for a one-time passcode by text message and enter it, and then calls you and connects you when a person answers. You use it through our website at https://macgivr.servicemob.com and our iPhone app. MacGIVR is available only in the United States.

This Privacy Policy applies together with our Terms of Use. It says what personal information we collect, where it comes from, what we do with it, who else handles it, how long we keep it, and how you can see it, change it, or delete it. If you have a question, write to privacy@servicemob.com. For help with the product, write to support@servicemob.com.

Account. When you sign up you give us your name, email address and password (we store only a hash of the password), and you can add a phone number. We use them to create and secure your account and to contact you.

Callback number and text consent. When you start a call you give us the number we call you back on. We use it to call you, bring you onto the call, and text you about the call. When you agree to texts, at the start of a call or in Settings, we record the number, the time, the version of the consent wording, and your IP address and browser user agent, to prove you agreed.

Saved businesses. You can save the businesses you want MacGIVR to call: name, website, support phone numbers, your notes for MacGIVR, login username, account label and PIN hint. If you choose, you can also save an account number or support PIN for a business. We encrypt the account number and PIN with AES-256-GCM before storing them. We use these details to place calls to the businesses you pick.

Call details you type. For each call you type an issue description and the outcome you want, and you may answer questions during the call. If you also type an account number, PIN, authorization phrase or the last four digits of your date of birth on the call form, we store them only inside an encrypted envelope on the call record, so the AI can use them if the call has to be placed again. They tell the AI what the call is about and help it answer the company's identity questions.

One-time passcodes. When a company texts you a code during a call, you can send it to us by text reply or in the app, and the AI enters it into the company's phone system.

Call audio, transcripts and call events. During a call we process the audio of the call between our AI and the company and of the call between us and you. Our systems produce a transcript and call events: what was said, the menu steps taken, status changes and timestamps. We use them to run the call, detect when a person picks up, show you what happened, fix problems, and learn how a company's phone menu works so later calls to that company go faster. Before some calls, our intake assistant talks with you for about a minute to collect what the call is about; that conversation is processed the same way.

Phone number verification. If you verify a phone number to use as your caller ID, we keep the number (encrypted), a log of each code we send and check (phone number, time, result, IP address and browser), your consent to use the number, and the caller ID attestation grade our carrier gives each call. We use them to prove you control the number, spot fraud and stop abuse.

Agreement records. We record which versions of the Terms of Use, this Privacy Policy and the MacGIVR authorization you accepted, when, the IP address and browser you used, and when you revoked them. We use them to prove what you agreed to.

Plan renewal consent records. When you buy a plan we record the renewal statement and checkbox text you saw at checkout, the Terms of Use version, the plan, the price, the time, and the IP address and browser user agent of the request that started the checkout. We hold that IP address and user agent in a separate record until your plan starts and they are copied onto the renewal consent. We do not send them to Stripe.

Billing records. From you and Stripe we keep your Stripe customer ID, the IDs of your subscription and saved payment method, your plan, its status and renewal dates, the amount and status of each payment, card hold, refund and dispute, and your minute balance and ledger. We use them to bill you, show your usage, apply and expire minutes, handle refunds and disputes, prevent fraud, and keep the tax and accounting records the law requires.

Text messages. The texts you send us and the texts we send you: call updates, passcode requests and relays, and STOP, HELP and HANGUP replies.

Sign-in logs and technical logs. Our sign-in system logs each sign-in, sign-up, sign-out and change to your email address or password, with your email address and IP address, for security and fraud prevention. Our servers log requests and errors, including IP addresses, to keep the service running and find bugs.

Device data. We keep you signed in with a login session. The iPhone app stores its login session in the iOS Keychain on your device.

We do not collect your precise location. We do not use advertising or analytics trackers, and the iPhone app has no advertising or tracking software in it.

We use the companies below to run MacGIVR. Each of them may use your data only to provide its service to us, and its agreement with us requires it to keep your data confidential and secure, so your data gets the same or equal protection as this policy describes. ElevenLabs, Telnyx, Supabase, Twilio, Amazon Web Services and Stripe handle your data under data processing terms that are part of our agreement with each of them. Deepgram works under a HIPAA business associate agreement and a mutual nondisclosure agreement we signed with it. We do not sell your personal information, and we do not share it for advertising.

ElevenLabs (third-party AI voice agent). ElevenLabs runs the AI voice agent that talks on the call and records it. It receives the call audio in both directions, the words spoken, the company name and number, and your callback number. The details you type on the call form (the issue description and desired outcome, and when you provide them, the account number and verification details) and the details you saved for the business you are calling (its account number and PIN, login username, account label, PIN hint, and notes for MacGIVR) are shared with ElevenLabs, our third-party AI service provider, to run the call.

Anthropic and Google (third-party AI language models). ElevenLabs runs the language models that decide what the AI says. The main model is Anthropic's Claude. If Claude does not answer in time, ElevenLabs switches to a backup model for that turn. For the AI that calls the company, the backups are Anthropic's Claude Sonnet 4.5 and then Google's Gemini 2.5 Flash. These models receive the text of the conversation and the call details and instructions ElevenLabs passes to them. They run on Google Cloud Vertex AI, which is one of ElevenLabs' sub-processors, so ElevenLabs' data processing terms cover them.

Deepgram (third-party AI speech-to-text). Deepgram converts the audio of the company's side of the call to text so our system can tell when a real person has answered. Model improvement is turned off for our account, so Deepgram keeps no audio or transcripts to train its models. We do not create voiceprints or identify anyone by voice.

Telnyx (phone carrier). Telnyx places and connects the calls and sends and receives our text messages. It receives phone numbers (yours, the company's and our caller ID numbers), call timing, message content and call audio in transit.

Twilio Verify. If you verify a phone number to use as your caller ID, Twilio Verify sends and checks the SMS code. It receives your phone number and the code. You sign up with your email address; we do not text you a code at registration. Telnyx delivers every other text message we send.

Supabase (database and sign-in). Supabase hosts our database and sign-in system on Amazon Web Services in us-east-1. It holds the account, call and billing records described in this policy.

Amazon Web Services (hosting). Our web server and call server run on Amazon Web Services in us-west-2 (Oregon), which also holds our server logs and keys.

Stripe (payments). Stripe takes payments and holds your card. It receives your name, email address and card details (entered on Stripe's pages), and your plan and charge amounts. We give Stripe the email address on your account so it can send your receipts and other emails about your plan for us. Stripe also uses payment information to prevent fraud and meet its own legal obligations, and for those purposes it acts on its own account under its privacy policy at https://stripe.com/privacy.

Apple distributes the iPhone app and collects data under its own privacy policy. We do not send Apple your MacGIVR data.

Other people we share with. The company you ask us to call receives what the AI says on the call: your name or account details when they are needed to help you, your issue, and a callback or bridge to you. We disclose data if the law requires it or to protect people from fraud or harm. If ServiceMob is sold or merged, your data goes with the business and this policy continues to apply until we tell you otherwise.

Third-party AI and your permission. Before each call, the call form asks you to agree that MacGIVR can place the call for you using AI, that your call audio and the details you enter are shared with third-party AI service providers to run the call, and that the call is recorded. Those providers are ElevenLabs, the language models it runs (Anthropic's Claude and Google's Gemini), and Deepgram, as described above. Nothing is sent to them for a call until you agree. If you do not agree, you cannot start the call.

We do not use your call data to train AI models. We do use the steps we learn about how a company's phone menu works to make future calls to that company work better.

The AI agent calls the company from a MacGIVR phone number or, if you set one up and verified it, from your verified number. Calls are recorded by ElevenLabs as part of its voice agent. We do not ask our phone carrier, Telnyx, to record calls. The recording holds the audio of the AI and the company's menu or representative, the words spoken, and anything you say if you are on the line or join the call.

Calls made since October 24, 2026 are deleted from ElevenLabs after 30 days: the call audio and ElevenLabs' copy of the transcript. Intake conversations are deleted from ElevenLabs after 30 days too. Recordings and transcripts of earlier calls stay at ElevenLabs until we delete that call's record 12 months after the call, until you delete your account, or until you ask us to delete them, whichever comes first. Each of those steps deletes the call from ElevenLabs. If the ElevenLabs delete fails, we try again on later nights, up to 10 times; if it still fails, our admins are alerted and delete it by hand.

We keep our own copy of the transcript, with the rest of the call record, for 12 months after the call, and then it is deleted. The call record itself stays, without your name, phone number, issue or company, so the call's billing details still add up.

If you ask MacGIVR to call a person rather than a business, the same recording, transcript and AI processing apply to that person's side of the call.

When a person answers, MacGIVR tells them it is an AI assistant calling on behalf of a customer.

When you provide a mobile number at registration or when you start a session, you consent to receive conversational, transactional text messages from MacGIVR about the support sessions you request: hold and wait-time status updates, notice when a live agent is reached, and relay of one-time verification codes the company you are contacting sends to you. MacGIVR does not send marketing or promotional text messages.

Message frequency varies and depends on the support sessions you initiate. Message and data rates may apply.

Reply STOP to any message to unsubscribe at any time; reply HELP for help, or contact privacy@servicemob.com. Mobile carriers are not liable for delayed or undelivered messages.

We do not sell or share your mobile opt-in information or phone number with third parties for their own marketing or promotional purposes. Text messages are delivered through our telecommunications carrier, Telnyx, under data processing terms that are part of our agreement with Telnyx.

Payments for plans and minutes are processed by Stripe. You enter your card on Stripe's pages. Stripe collects your card number, expiry date and security code, and may collect your name, email address and billing address. We do not receive or store your card number or security code. The billing records we keep are listed under "What we collect and how". When you subscribe, we also keep a record of your agreement to the automatic renewal.

If you delete your account we cancel your subscription and remove your saved card from Stripe. Stripe and we keep payment and tax records as the law requires.

Change your details. Edit your name, email address and callback number in Settings, and edit or remove your saved businesses in the app or on the website. Removing a saved business also deletes any account number or PIN saved for it.

Revoke your consent. Each call needs your agreement on the call form; if you do not give it, the call does not start, and you can end a call at any time by replying HANGUP. On the website, Settings lets you revoke your agreement to the MacGIVR authorization, the Terms of Use and this Privacy Policy; new calls and saved-business changes stop until you accept again. Reply STOP to any text to stop text messages. You can also email privacy@servicemob.com to revoke a consent.

Delete your account. On the website, go to Settings and choose "Delete account". In the iPhone app, go to the Account tab and choose "Delete account". When you confirm, we cancel your subscription and remove your saved card from Stripe, and right away delete your profile, saved businesses, saved account numbers and PINs, call transcripts, typed call details, call events (except billing events), passcodes, verified phone numbers, and your calls at ElevenLabs (audio and transcript). Call records stay without your name, phone number, issue text or company, so billing totals still add up. If a call is still in progress or a paid call is still being settled, we ask you to try again in a few minutes.

If we hold no SMS consent records, SMS code logs or caller ID attestation records for you, your account is deleted completely. If we do, we anonymize your account instead: we replace your email address with a placeholder, clear your name and the other details stored with your sign-in, remove your phone number, password, sign-in sessions, multi-factor factors and app authorizations, and block sign-in for good. Those records are write-once: they stay unchanged until their periods end (5 years for consent and attestation records, 3 years for SMS code logs), and then a nightly job deletes your account completely. Your email address is free right away, so you can sign up with it again as a new account.

What we keep after deletion: the consent records, SMS code logs and attestation records above, including the phone number you consented with and the IP address and browser user agent recorded with them; plan renewal consent records; your agreement records, without your account ID; billing and tax records; de-identified call records with their billing details; and the fixed-text menu steps for companies' phone systems. Server logs and database backups age out as described under "Retention".

Ask us. You can email privacy@servicemob.com to get a copy of your data (in a machine-readable format if you ask), correct it, or have it deleted. You can also ask us to keep your data for a shorter time than this policy says. We answer within 45 days (we can extend once by 45 days and will tell you). We may need to verify it is you. If we deny a request you can appeal by replying to us, and then contact your state attorney general.

California, Texas and other state residents. Depending on where you live you can ask to know what we collect, get a copy, correct it, delete it, and opt out of sale, targeted advertising or profiling. We do not sell personal information or share it for cross-context behavioral advertising, and we have not done so in the past 12 months. We do not use your data for targeted advertising. We do not discriminate against you for using these rights.

What we collect, in the categories the California Consumer Privacy Act uses: identifiers (phone numbers, email address, account ID, Stripe customer ID); customer records and commercial information (plan and subscription status, call history, purchases of plans and minutes, minute balances); internet or other electronic network activity (passcode and verification logs, sign-in logs); audio and electronic information (call recordings and transcripts); and inferences (how a company's phone menu is laid out, learned from calls). "What we collect and how" gives the source and purpose of each, and "Retention" says how long we keep it. We share them only with the companies in "Who else handles your data", as our service providers. Some records stay after a delete request, as described above: consent and caller ID attestation records for 5 years, verification code logs for 3 years to prevent fraud, plan renewal consents, agreement records, and billing records for tax and accounting.

Account details and saved businesses: until you delete them or your account. Saved account numbers and PINs: until you remove them, remove the business, or delete your account.

Call transcripts, call events, typed call details (including the encrypted envelope) and text messages: 12 months after the call ends (or after it started, if it never ended), then deleted. The call record stays, without your name, phone number, issue or company, and keeps its billing details.

Call audio and the transcript copy at ElevenLabs: 30 days for calls made since October 24, 2026 and for intake conversations. Earlier calls: until the 12-month deletion, account deletion or your request, whichever comes first.

Menu steps that hold what was said or keyed in, and the call summaries built from them: 12 months after the call, then deleted. Steps with fixed text (for example, a person was reached or a menu prompt was detected) and the call outcome are kept, and are deleted with the saved business.

One-time passcodes: deleted 24 hours after we ask for them.

Verified phone numbers: deleted once the last verification is more than 12 months old and the number can no longer be used to dial, and at once if you delete your account.

SMS code logs: 3 years after each attempt. Consent records (SMS, call recording and caller ID), with the IP address and browser user agent: 5 years after each record is made. Caller ID attestation records: 5 years after each call. These records are write-once until then, and a delete request does not change them.

Agreement records: kept as proof of what you agreed to. When you delete your account they stay without your account ID.

Plan renewal consent records: 5 years after you agreed, and at least 1 year after the plan ends, whichever is later; 5 years if there is no plan on record at Stripe. The checkout IP address and browser user agent: until they are copied onto the renewal consent, and no more than 48 hours.

Sign-in logs: 12 months after each entry. Server logs: deleted within 90 days.

Billing and tax records: as long as tax and accounting laws require.

Backups: deleted data can remain in our database backups for up to 30 days, until those backups are replaced.

Your login uses Supabase authentication. Data is encrypted in transit (HTTPS). Saved account numbers and support PINs, and the account details you type on the call form, are encrypted with AES-256-GCM before they are written to the database, and they are not shown in lists or in call event logs. The encryption key is kept on our servers, separate from the database. Database access rules (row-level security) limit each user to their own records. Our server secrets are held in AWS. The iPhone app keeps your login session in the iOS Keychain on the device.

Only people on our admin list can open our internal admin console. It shows account details (email address, plan, minutes, last call, account status) and live calls, so we can support you, stop abuse and handle delete requests. Admin actions such as suspending or deleting an account are logged. Support staff and engineers see call records only when needed to fix a problem.

No system is perfectly secure. If a breach affects your data we will tell you and regulators as the law requires.

MacGIVR is only for people who are at least 18 years old, as the Terms of Use say. We do not knowingly collect data from anyone under 18. If you think a child has given us data, write to privacy@servicemob.com and we will delete it.

We may update this policy. When we change it materially we will post the new version at https://macgivr.servicemob.com/legal/privacy, change the version and effective date at the top, and ask you to accept the new version before your next call or saved-business change. The iPhone app also asks you to accept the current version. Earlier versions are available on request.

ServiceMob, Inc., a Delaware corporation. Privacy questions and requests: privacy@servicemob.com. Product help and billing: support@servicemob.com. Website: https://macgivr.servicemob.com.