Privacy Policy

Last updated: July 21, 2026

Center (“Center,” “we,” “us”) operates trycenter.com and the Center AI front desk — a service that answers phone calls and text messages for independent service businesses, books appointments, sends booking-related messages, responds once after genuinely missed calls, and can invite clients to review completed work. This policy explains what information we collect, how we use it, and the choices you have.

It covers three groups of people: visitors to our website, the business owners and staff who use Center (“operators”), and the people who call or message a Center-powered business (“callers and clients”).

Information we collect

From operators. Account and contact details (your name, business name, email address, phone number), the business information you provide to run your front desk (services, prices, hours, staff, booking rules), and any client lists you choose to import.

From callers and clients. When you call or message a business that uses Center, we collect: call status, caller number, transcripts and summaries; call recordings, but only when that business has turned recording on (you will hear a notice at the start of the call — see below); the text messages you exchange with the assistant, including a one-time missed-call response; review-invitation and delivery status; and booking details such as your name, phone number, requested service, appointment time, and notes.

Business listing information from public sources. To set up and enrich a business’s profile, we gather publicly available information about that business — for example public business listings, the business’s own website, and its public social profiles.

Payment information. Booking deposits and payments are processed by Stripe. Payment happens on a secure Stripe-hosted checkout page linked by text message. The assistant never asks for, and never accepts, card numbers over the phone, and Center does not store card numbers. We keep records of payment status (for example, that a deposit was paid), not card details.

Technical data. Standard server logs — IP address, browser type, and pages visited — used for security, abuse prevention, and troubleshooting.

How the AI assistant identifies itself

Every call the assistant answers opens with a disclosure that the caller is speaking with an AI assistant. If the business has enabled call recording or transcription, the greeting also includes a notice that the call may be recorded or transcribed. Recording is off unless the business turns it on.

How we use information

• To run the front desk: answer calls and messages, book appointments, send booking-related texts, respond once after a genuinely missed call, and send a transactional review invitation after completed work.
• To process deposits and payments through Stripe.
• Quality assurance: call transcripts are automatically scored against a quality and safety rubric — for example, whether the assistant disclosed that it is an AI, whether it invented a price or service, and whether it handled a possible emergency correctly. Calls flagged by this review may be examined so problems get fixed.
• Compliance record-keeping: we maintain a ledger of messaging consent and opt-outs (see “Text messaging” below).
• To secure, maintain, and improve the service.

Text messaging, consent, and opt-out

Center sends service texts tied to a person’s interaction with a business. These may include a one-time response after a genuinely missed inbound call, booking confirmations, reminders, deposit links, and one review invitation after completed work. Promotional texts are sent only with that person’s prior express written consent.

• Opting out. Reply STOP (or STOPALL, UNSUBSCRIBE, CANCEL, END, or QUIT) to any message. A STOP halts all further texts to you from that sender — both promotional messages and service messages such as booking confirmations and deposit links. The only exception is a security or verification code that you yourself request (for example, a login code). Your opt-out is applied across the text channels connected to your phone number, not just SMS.
• Help. Reply HELP to any message for assistance, or email [email protected].
• Opting back in. Reply START (or UNSTOP) to resume service messages. Promotional messages do not resume automatically — they require a fresh written opt-in.
• Opt-outs survive deletion. When you opt out, we store a one-way cryptographic hash of your phone number in a suppression list. If you later ask us to delete your personal information, that hashed record is retained so your opt-out continues to be honored.
• Quiet hours. Promotional messages are not sent between 9pm and 8am in the business’s local time.

Mobile information — carrier-required disclosure

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All other categories of use and sharing described in this policy exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

When we share information

• With the business you contacted. Your calls, messages, and bookings go to the business whose front desk you reached — Center answers on their behalf.
• Service providers. Vendors that process data on our behalf to deliver the service: telephony carriers (such as Twilio), voice and speech infrastructure (such as Vapi and Deepgram), AI model providers (such as Anthropic), payment processing (Stripe), and cloud hosting. They may use the data only to provide the service to us.
• Legal. When required by law, legal process, or to protect the rights and safety of Center, our users, or others.

We do not sell personal information.

Google user data — API Services Limited Use

When you connect a Google account, Center requests only the narrowest access that makes the connected feature work, and you can disconnect at any time from your Center dashboard or from your Google Account permissions page. What each connection is for:

• Google Business Profile. With your permission, Center reads your business listing and — only when you ask it to — updates your listing’s website address and phone number so customers reach the line that answers. We never change anything else on your listing.
• Google Calendar. Center reads your availability and writes the bookings it takes for you, so nothing is double-booked. Event titles you did not create through Center are never shown to anyone else.
• Gmail (read-only). Used for one purpose: when a service you asked Center to handle sends a one-time verification code to your inbox, Center reads that code so the task can finish. Center searches a window of minutes around that moment, uses only the code, and stores no part of any message — not the code, not the subject, not the body. Center never reads your mail for any other reason, and never sends mail as you.

Center’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Concretely, and for restricted scopes in particular: we do not transfer or sell this data to third parties except as necessary to provide or improve the feature you connected it for, to comply with applicable law, or as part of a merger or acquisition; we do not use it for advertising, and we do not serve ads; we do not allow humans to read it, except with your explicit permission for specific messages, where necessary for security purposes such as investigating abuse, to comply with applicable law, or where the data has been aggregated and anonymized; and we do not use it to train generalized artificial intelligence or machine-learning models.

Google account data is never used to build advertising or marketing profiles, is never shared with another Center customer, and is deleted when you disconnect the account or close your Center account.

Your data and your choices

• Export. An owner-only in-product control downloads a machine-readable copy of that business’s profile and settings, services and staff, client records and notes, bookings, calls and transcripts, recording URLs (not media bytes), communications, reviews and invitation records, consent records, and available billing and usage metadata. The export is tenant-scoped and excludes credentials, connector tokens, webhook secrets, and card or bank data.
• Access and deletion. To request access to or deletion of your personal information, email [email protected]. Note that if you previously opted out of texts, we retain the hashed opt-out record described above, and we may retain records we need for legal and compliance purposes (such as consent records).
• Recording. Call recording is controlled by each business. If you have questions about a specific business’s recording practices, contact that business, or reach us at the address below.

Data retention

We keep business, client, booking, call, communication, and review-invitation records while the relevant account is active and afterwards as needed for legitimate business and legal purposes. Recording links may remain in call records, but the owner export includes the link rather than copying the audio. Consent records and hashed opt-out suppression entries are retained as compliance records so STOP requests continue to be honored.

Children

Center is a business tool and is not directed to children under 13. We do not knowingly collect personal information from children under 13.

Changes to this policy

If we change this policy, we will post the updated version here and revise the “Last updated” date above.

Contact us

Questions about privacy? Email [email protected].