Privacy

Help travels. Private context stays.

Spillway processes only the contractor, homeowner, call, message, provider, confirmation, and billing information needed to operate the service.

Version spillway-direct-install-privacy-2026-08-v6. This is the current privacy notice for Spillway's certified $299 activation and recovery-anchored recurring billing flow. Attorney review is recommended.

Information processed

Spillway may process contractor account and business information; user and authorization records; homeowner or customer names and phone numbers; authorized call recordings and transcripts; conversation content; office-provided time options; inspection-confirmation records; provider identifiers; billing-provider references; and operational telemetry needed to run and secure the service.

Payment-card details are collected by Stripe-hosted surfaces. Spillway stores provider references and billing state, not raw card numbers or security codes.

Purposes and service providers

Information is used to activate, operate, secure, support, measure, and bill Spillway Calls; verify tenant-specific provider capabilities; recover eligible inspection decisions; reconcile message delivery and inspection confirmation; prevent abuse; and comply with applicable obligations.

Authorized providers may include cloud hosting and database services, Stripe, Pipedream Connect, contractor-authorized phone or messaging providers, transcription providers, and other subprocessors required for the contractor's configured service. Each receives only the information needed for its bounded role.

Private context and public surfaces

Help travels. Private context stays. Homeowner Customer Situation content, transcripts, phone numbers, provider credentials, prompts, and internal identifiers are not published through public product pages or analytics payloads.

Contractor-facing and operator surfaces use tenant-bound access and allowlisted projections. Public marketing pages do not receive homeowner call or conversation content.

Retention, controls, and requests

Records are retained for operational continuity, security, dispute handling, financial recordkeeping, delivery and confirmation integrity, and applicable legal obligations. Cancellation does not automatically delete required recovery or financial records. Provider connections can be revoked, and product-level pause and offboarding controls prevent new consequential activity.

Contractors may contact payton@spillwaycalls.com about access, correction, deletion, disconnection, or privacy questions. A request may be limited where retention is necessary for security, contractual, financial, or legal reasons.

Security and legal disclosures

Spillway uses tenant isolation, credential references, signed webhook verification, replay protection, idempotency, explicit capability evidence, and bounded kill switches. This statement describes implemented safeguards and does not claim an external certification.

Information may be disclosed when required by law, to protect rights and safety, to investigate abuse, or in connection with a business transaction subject to appropriate protections. This is the current privacy notice for the certified $299 activation and recovery-anchored recurring service.