Privacy policy
What we collect, why, and who sees it.
Last updated 10/8/2026. This policy is a draft for review by counsel before it is relied on.
1. What we collect
From customers: name, business, contact details and the data in the tools you connect (calendar events, customer lists, orders, invoices, ad spend, messages). From the people your business talks to: the content of conversations Foreman handles on your behalf and the phone number or email they used. From visitors to this site: nothing beyond standard server logs. The contact form saves a draft in your own browser only.
2. Why
To answer leads, follow up, run the workflows you set, report to you weekly and, where you choose Growth, manage ads. We do not use your data to train models that serve other customers.
3. Who sees it
Our staff, under access controls, when needed to deliver or support the service. Our processors: hosting, telephony and messaging carriers, email delivery, the AI model providers we use to generate replies, and the platforms you connect. We do not sell data and do not share it with advertisers beyond the ad accounts you own.
4. Messaging
Opt-out requests (STOP, unsubscribe, do not call) are honoured immediately and recorded. Message content is retained to run the conversation and for your records.
5. Retention and deletion
Data is kept for the life of your account plus 30 days, then deleted. You can request export or deletion at any time through the contact page.
6. Health information
We are not a HIPAA covered entity or business associate and do not accept protected health information. Practices receive appointment-only messaging.
7. Security
Credentials for connected tools are stored encrypted and scoped to the minimum access needed. We will notify you without undue delay of any breach affecting your data.
8. Your rights
Access, correction, export and deletion on request. California residents may also ask what we hold and that we do not sell it; we do not.
9. Contact
Privacy questions: contact page.