Privacy Policy

IntakeAnchor is operated by Sawyer Krebs, sole proprietor, trading as IntakeAnchor.com, based in Alberta, Canada. For privacy questions, access requests or complaints, email work.sawyerkrebs@gmail.com. We act as the service provider (processor) for the local service businesses who use IntakeAnchor, and those companies remain responsible (controller) for the customer information collected through their own websites.

From website visitors chatting with the widget: first and last name, phone number, service address or location, postal or ZIP code where applicable, the service requested, preferred timing, any photos they choose to attach, conversation details, and the date and time. We do not ask for visitor email addresses, payment details, health records or government identifiers, and we instruct the assistant never to request them.

From local service businesses: business name, contact name, email, phone, website, chosen plan, branding settings and login credentials (passwords are stored only as salted hashes by our authentication provider).

From people requesting access to IntakeAnchor: the details submitted in the request form on our home page.

We do not use advertising or analytics cookies. The only browser storage we use is the cookie and local storage needed to keep you signed in to the admin or client portal.

Chat information is collected for one purpose: so the team from the company whose website you used can respond to the service request you described. The widget tells visitors this before information is submitted, and consent is limited to that service request. We do not sell personal information, and we do not use it for marketing or to train AI models.

Company account information is used to provide, secure, support and bill for the service.

Under Canadian privacy law (PIPEDA and Alberta's PIPA) and United States state privacy laws (including the CCPA/CPRA in California), you may ask us to confirm what personal information we hold about you, provide a copy, correct it, or delete it. You may also withdraw consent to being contacted at any time. Email work.sawyerkrebs@gmail.com and we will respond within 30 days. We never discriminate against anyone for exercising these rights.

If a request concerns a lead captured on a specific company's website, we will coordinate with that company, since they hold the relationship with you.

Team callbacks, texts and emails happen because you asked to be contacted about your request. We do not send automated marketing messages to leads. Every message a company sends through the details we pass on must identify the sender and honour an opt-out, and companies are contractually required to stop contacting anyone who asks them to. Message and data rates from your carrier may apply.

The front desk conversation is handled by a large language model accessed through our hosting provider's AI gateway. Conversation content is sent to that model only to produce the reply and extract the lead details; storage of the conversation at the model provider is turned off, and the content is not used to train models. The assistant is not a licensed professional: it never provides chemical, pricing, hazardous DIY or medical advice, and does not confirm appointments. The company's team confirms pricing and scheduling.

Data is stored in managed cloud infrastructure (database, authentication and application hosting) which may process and store data in Canada, the United States or the European Union. Our sub-processors are limited to: our application and database hosting provider, the AI gateway described above, and — where a company enables them — the email or webhook service the company chooses for instant lead alerts. Transfers are protected by contract and encryption in transit and at rest.

Leads stay in a company's active inbox for 90 days, after which they are automatically filed into a separate archived "History" view in the same portal. Leads stay in a company's portal until the company or we delete them, and are deleted within 30 days of that company's account closing. Access requests are kept for up to 24 months. Account records are kept while the account is active and for up to 7 years afterwards where tax or accounting law requires it.

Access to lead data is restricted per company: an owner login can only ever read the leads belonging to that company. Database access rules block direct browser access, admin functions require a separate password, connections are encrypted, and passwords are hashed. No system is perfect; if a breach creates a real risk of significant harm, we will notify affected people and the relevant privacy regulator as required by law.

IntakeAnchor is intended for businesses and adult customers. We do not knowingly collect information from children under 13, and we delete it if we learn we have.

If we change this policy we will update the date above and, for material changes, notify account holders by email.