Privacy Policy

Merritt AI ("we," "us," or "our") is operated by Troy Merritt, a sole proprietor based in Seattle, WA. This Privacy Policy explains what information we collect, how we use it, and your choices regarding that information when you visit merritt-ai.com or use our services.

1. Information We Collect

Information You Provide

When you fill out our order form or contact us, we collect the following:

• Business name
• Your name
• Email address
• Phone number (if provided)
• Project notes or message content

We do not create user accounts on this website, and we do not store passwords.

SMS and Text Messaging Data

When a customer calls a business using our platform and the call is missed, we send an automated text message to the caller's phone number on behalf of that business. In connection with SMS messaging, we collect and process the following data:

• Phone number
• Message content
• Opt-in and opt-out status
• Message timestamps

We use Twilio as our SMS and voice service provider. Twilio processes phone numbers and message content on our behalf. See Twilio's Privacy Policy.

Phone numbers and SMS data are stored securely and used only for the purpose of delivering automated messaging services on behalf of the businesses using our platform.

Information Collected Automatically

When you visit our site, we use analytics tools that automatically collect:

• Pages viewed, time on site, and navigation patterns
• Browser type, device type, and screen resolution
• Approximate geographic location (city/region level)
• Referring URL

2. Analytics and Tracking

We use the following analytics services:

• Google Analytics 4 (GA4) — Measures site traffic and user behavior. Google may process data on servers outside your country. See Google's Privacy Policy.
• Microsoft Clarity — Records anonymized session replays and heatmaps to help us understand how visitors interact with our site. See Microsoft's Privacy Statement.

We do not use advertising cookies or sell your data to third parties. The only cookies on this site are those set by the analytics tools listed above.

3. Third-Party Services

We use the following third-party services that may process your data:

• Cal.com — For scheduling consultations. When you book a call, Cal.com collects your name and email. See Cal.com's Privacy Policy.
• Discord — Order form submissions are routed to a private Discord channel for internal processing. Your submitted information is only visible to Merritt AI team members.
• Twilio — For SMS and voice services. When an automated text message is sent on behalf of a business, Twilio processes the recipient's phone number and message content. See Twilio's Privacy Policy.

4. How We Use Your Information

• To respond to your inquiries and process orders
• To deliver and support the services you purchase
• To improve our website and user experience
• To send service-related communications (never spam)
• To send automated SMS messages on behalf of businesses using our platform, including missed-call text-back responses, appointment confirmations, and service follow-ups

5. Data Sharing

We do not sell, rent, or trade your personal information. We only share data with the third-party service providers listed above, and only as necessary to operate our business and deliver services to you.

6. Data Retention

We retain your contact information and order details for as long as needed to fulfill our services and maintain our business records. Analytics data is retained according to the default retention policies of Google Analytics and Microsoft Clarity.

7. Your Rights

You can request at any time to:

• Know what personal data we hold about you
• Have your personal data corrected or deleted
• Opt out of analytics tracking (use your browser's "Do Not Track" setting or install the Google Analytics Opt-Out Browser Add-on)

8. SMS Opt-Out and Consent

If you receive an SMS message from a business powered by Merritt AI, you can opt out at any time by replying STOP to any message. Reply HELP to any message for assistance.

By calling a business phone number powered by our platform and receiving an automated text response, you consent to receive further text messages related to your inquiry. Message frequency varies based on your interaction (typically 1–5 messages per conversation). Standard message and data rates may apply.

We comply with the Telephone Consumer Protection Act (TCPA) and all applicable A2P 10DLC regulations. Consent to receive messages is not a condition of purchase. Carriers are not liable for delayed or undelivered messages.

9. SMS / Text Messaging

Mobile phone numbers and SMS opt-in data are not shared or sold to third parties for marketing purposes.

Phone numbers are collected only to deliver service-related texts (appointment confirmations, service updates, and missed-call responses) between homeowners and the home service businesses that use Merritt AI. Messages are sent on behalf of the business the consumer contacted, and are never used for unrelated marketing.

Consumers can opt out at any time by replying STOP to any message, and no further SMS will be sent to that number from the business. Replying HELP returns help information, including how to contact the business for assistance.

10. Children's Privacy

Our services are not directed at individuals under 18. We do not knowingly collect personal information from children.

11. Google API Services User Data

If you connect a Google account to Merritt AI (for example, to enable calendar booking through Google Calendar), Merritt AI's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Data we access

• Google Calendar events (read & write): we read your calendar busy/free state to identify open slots, and write events when the AI books appointments for your business. We do not access any other calendars beyond the one you connect.
• Basic profile (email): only to confirm which Google account is connected and which calendar to operate on.

How we use it

• Show your real availability to the AI assistant during phone & text bookings.
• Create, update, and cancel calendar events when jobs are booked, rescheduled, or cancelled through the AI.
• Surface those same events back to you in your portal calendar view.

How we store it

OAuth refresh tokens are encrypted at rest using Fernet (AES-128) with a key kept outside the application database. Tokens never appear in logs, analytics, or third-party services.

What we will NOT do

• We do not sell, share, or transfer your Google data to advertisers, data brokers, or any third party.
• We do not use your Google data to train any AI or machine-learning model.
• We do not use your Google data for any purpose other than the calendar booking features described above.
• Only authorized Merritt AI personnel access your Google data, and only for support purposes you have explicitly requested.

Revoking access

You can disconnect Merritt AI from your Google account at any time by visiting myaccount.google.com/permissions and revoking access, or by disconnecting the Google Calendar integration in your Merritt AI portal under Integrations. After revocation we delete the stored refresh tokens within 24 hours.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with a revised "Last updated" date. Your continued use of the site after changes constitutes acceptance of the updated policy.

13. Contact

If you have questions about this Privacy Policy or want to exercise your data rights, contact us at:

Troy Merritt / Merritt AI
Email: [email protected]
Seattle, WA