Privacy Policy

1. Introduction

Welcome to Layer7 Consulting ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. If you have any questions or concerns about this privacy notice, or our practices with regards to your personal information, please contact us.

2. Information We Collect

We collect personal information that you voluntarily provide to us when you express an interest in obtaining information about us or our products and Services, when you participate in activities on the Website, or otherwise when you contact us.

• Personal Information Provided by You: We collect names; email addresses; phone numbers; and other similar information necessary to provide our automation and consulting services.
• Project and Workflow Information: If you request an audit or book a call, you may choose to share information about your business processes, tools, systems, and automation goals.
• Information Automatically Collected: We automatically collect certain technical information when you visit, use, or navigate the Website. This may include your IP address, browser and device characteristics, operating system, language preferences, referring URLs, approximate location, and information about how and when you use our Website.

3. How We Use Your Information

We use personal information collected via our Website for a variety of business purposes described below. We process your personal information for these purposes in reliance on our legitimate business interests, in order to enter into or perform a contract with you, with your consent, and/or for compliance with our legal obligations.

• To fulfill and manage your orders and projects.
• To respond to audit requests and communicate with you about your project.
• To respond to user inquiries and offer support.
• To send administrative information to you.
• To schedule calls, review audit requests, and prepare project recommendations.

4. Third-Party Processors and Embeds

Our website uses trusted third-party services to operate contact, scheduling, hosting, and display features. These services may process limited technical or submitted information according to their own privacy terms.

• Google Calendar: Used to provide appointment scheduling and booking availability.
• Google Fonts: Used to load website typography.
• Cloudflare and hosting providers: Used for DNS, CDN, security, caching, and website delivery.

5. AI Voice Receptionist — Calls, Recording and Where the Data Goes

This section applies to our AI voice receptionist service. It matters to two different people: the business that hires us to answer its phone, and the customer who calls that business. Where the two differ, we say so.

Callers are told before anything is recorded

Every call opens with a spoken notice that the caller has reached an AI assistant and that the call is recorded. It is the first thing said, on every call, before any details are taken. A caller who does not want to be recorded can say so — the receptionist stops, takes only a name and a number, and a person from the business calls them back.

What is collected on a call

• An audio recording of the call and a written transcript of it.
• The caller's name and phone number.
• What the caller said they need, in their own words, and any appointment booked.
• The time, duration and outcome of the call.

We do not ask for and do not want payment card numbers, health information, or government identifiers. Callers should not read them out.

Why it is collected

To answer the call, book the appointment into the business's calendar, pass a message or an emergency to the business, and give the business a record of what was arranged. Nothing from a call is used to advertise to the caller, and nothing is sold.

Processing happens in the United States

The voice platform we build on runs in the United States, and there is no Canadian region available for it. Call audio, transcripts and the details above are therefore processed and stored on servers in the United States, where they may be accessible to United States authorities under United States law. We disclose this rather than imply the data stays in Canada, because it does not. The processors involved are:

• Retell AI: the voice platform. Carries the call, records it, and produces the transcript.
• OpenAI: the language model that understands the caller and decides what to say.
• ElevenLabs: converts the receptionist's replies into speech.
• Twilio and carrier partners: the telephone connection, and text alerts where a business has enabled them.
• Google Calendar: where a confirmed appointment is written.

Who the record belongs to, and how long we keep it

Call recordings, transcripts and booking records belong to the business whose phone was answered, not to us. We hold them to run the service and to support billing, which is measured in answered minutes. A business can ask us to delete its call data at any time, and we delete it on request when the service ends. A caller who wants their own details removed should contact the business they called; we act on that business's instruction. Where a recording is needed to resolve a billing or safety question it may be retained until that is settled.

Emergencies

If a caller describes a gas smell, carbon monoxide, fire, flooding or anyone in danger, the receptionist stops taking details and transfers the call to the business's on-call number. The transferred call is a normal phone call between the caller and that person.

6. Will Your Information Be Shared With Anyone?

We only share information with your consent, to comply with laws, to provide services, to protect rights, or to fulfill business obligations. We do not sell your personal information to third parties.

7. Data Security and Retention

We use reasonable administrative and technical safeguards to protect information submitted to us. We keep project and contact information only as long as needed for business, legal, security, and record-keeping purposes.

8. Contact Us

If you have questions or comments about this notice, you may contact us at [email protected] or through the contact form on our website.