Privacy Policy

LeadUp is operated by Auvelos LLC ("LeadUp," "we," "us"). This Privacy Policy explains how we handle personal data for visitors to our website and for our business customers. You can reach us at info@auvelos.com or 3323 Pine Needle Cir, Round Rock, TX 78681, USA.

LeadUpprovides an AI phone-answering service to businesses ("customers"). When a person calls a customer's phone line, we process that call on behalf of the customer. For that call data, the customer is the data controller and LeadUpacts as a processor / service provider under our customer agreement (and, for healthcare customers, under a Business Associate Agreement). Callers should refer to the relevant business's own privacy notice.

LeadUp is the controller for the data described below: information about website visitors and about the customers who sign up for and administer an account.

• Account & business details — name, email, password (hashed), business name, and the configuration you create (agents, phone numbers, prompts).
• Call data (as processor, on behalf of customers) — inbound call audio, transcripts, and captured details such as caller name, callback number, and booking details.
• Payment information — handled by our payment processor (Stripe). We do not store full card numbers; we keep limited billing status and identifiers.
• Usage & technical data — log data, device/browser information, and actions taken in the dashboard, used to operate and secure the service.
• Cookies & similar technologies — see our Cookie Policy.

We use personal data to provide, secure, support, and improve the service. Under the GDPR, our legal bases are:

• Performance of a contract — to deliver the service to our customers.
• Legitimate interests — to secure, maintain, and improve the service and prevent abuse.
• Consent — for optional cookies and any marketing communications.
• Legal obligation — to comply with applicable law.

To answer and transcribe calls and respond in a natural voice, audio and text are processed by speech-to-text, a large language model, and text-to-speech running on our cloud infrastructure (AWS, including Amazon Bedrock and Amazon Polly). This processing is performed to provide the service to our customer.

We share data with vetted service providers under contract, only as needed to run the service:

• Amazon Web Services (AWS) — hosting, storage, AI processing (Bedrock, Polly, DynamoDB).
• Twilio — telephony (call connectivity and SMS).
• Stripe — payment processing.

We do not sell personal data. We may disclose data if required by law or to protect rights, safety, and the integrity of the service. A current list of sub-processors is available on request at info@auvelos.com.

Where a customer is a HIPAA-covered entity, LeadUp acts as a Business Associate and will enter into a Business Associate Agreement (BAA) governing the handling of protected health information (PHI). For those customers, call data is handled under that BAA and our security controls.

We are based in the United States and process data on US-based infrastructure. Where data is transferred from the EEA/UK, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

We retain personal data for as long as needed to provide the service and for legitimate or legal purposes, then delete or de-identify it. Call data processed on behalf of a customer is retained per our agreement with that customer and their instructions.

Depending on your location (e.g. GDPR in the EEA/UK, CCPA/CPRA in California), you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your data
• Port your data to another provider
• Object to or restrict certain processing
• Withdraw consent at any time
• Lodge a complaint with your data protection authority

To exercise these rights, contact info@auvelos.com. If your request concerns data we process on behalf of a business customer, we will direct you to, or coordinate with, that customer.

We use technical and organizational measures to protect personal data, including encryption in transit and at rest and access controls. See our Data Security Policy for details.

Our website and dashboard are intended for businesses, not children. Where a customer (for example, a pediatric practice) provides information about minors as part of a call, we process it as a processor on that customer's behalf and under our agreement with them.

We may update this policy from time to time. We will post the updated version here and revise the "Last updated" date above.

Questions about this policy or your data: info@auvelos.com · Auvelos LLC, 3323 Pine Needle Cir, Round Rock, TX 78681, USA.