End-User Privacy Notice (Template)

If you operate a business that uses BOS, you are the controller of personal information collected from your customers (homeowners, callers, message senders). You are responsible for posting a privacy notice that describes how you handle that information.

This template is a starting point that reflects how BOS works on a Dino appliance. It is not a substitute for your own privacy review. You must:

1. Replace [BUSINESS NAME], [BUSINESS ADDRESS], [BUSINESS PHONE], [CONTACT EMAIL], [STATE], and any bracketed items with your actual information.
2. Confirm that the practices described match what you actually do (for example, only mention call recording if you actually record calls).
3. Review with your own counsel before publishing.
4. Post the notice on your website (typically /privacy or /privacy-notice) and link to it from your website footer, intake forms, and any pages that collect personal information.
5. Reference this notice in your AI-receptionist greeting where applicable.

[BUSINESS NAME] is a [DESCRIPTION — e.g., “licensed plumbing company serving the [REGION] area”]. Our contact information is at the end of this Notice.

We use technology developed by Dino RD&C LLC to operate our phone, message, dispatch, and customer-management systems. The technology runs on equipment located at our place of business. Most information about you stays on our local equipment and is not transmitted to Dino RD&C or other third parties.

When you call us, your call may be answered by an AI receptionist. We disclose this at the start of the call and identify ourselves.

We may record calls to and from our business for quality, training, dispatch, and customer-service purposes. By continuing the call after the recording disclosure, you consent to the recording. If you do not consent, please tell the AI receptionist or any human who joins the call, and we will end or do not record the call.

If you live in or are calling from a state that requires all-party consent to recording (currently California, Florida, Illinois, Maryland, Massachusetts, Montana, New Hampshire, Pennsylvania, and Washington — your state may also have a law), the disclosure constitutes our notice. We will stop recording if you ask.

If you message us through SMS, Instagram, Facebook, or WhatsApp, we receive and store your messages on our local equipment. We may respond automatically or with human review.

By messaging us, you consent to receive responses by the same channel. Standard message and data rates may apply. You may opt out of further messages by replying STOP, or by telling us in any other reasonable way.

Depending on how you contact us, we may collect:

• Your name, phone number, email, and address;
• Information about the property you contact us about (address, access notes, equipment details);
• The contents of calls, voicemails, SMS, and messages you send;
• Photographs and notes our technicians create during a service visit;
• Payment information (processed by our payment processor; we do not store full card numbers);
• Calendar and scheduling preferences;
• Information you provide when filling out forms on our website.

We use your information to:

• Schedule, dispatch, perform, and follow up on services you request;
• Send quotes, invoices, receipts, and confirmations;
• Communicate with you about your service;
• Comply with legal obligations (tax records, regulatory recordkeeping);
• Improve our service quality through internal review.

We share information only as needed to operate our business:

• With our service technicians and dispatchers;
• With our payment processor to process payments;
• With our SMS and voice carrier to deliver communications;
• With professional advisors (lawyers, accountants);
• When required by law or to protect rights and safety;
• In connection with a sale of our business.

We do not sell your personal information.

The AI features we use are operated locally on our equipment. The AI improves over time using information about how it has been used in our business. Your information is not used to train AI models for any other business.

We keep your information for as long as needed to provide service and to satisfy legal recordkeeping requirements (typically up to seven years for business and tax records). Voice recordings and transcripts are kept for [12 MONTHS / SHORTER PERIOD]. After the retention period, your information is deleted or de-identified.

Depending on where you live, you may have rights to:

• Know what personal information we have about you;
• Request a copy in a portable format;
• Correct inaccurate information;
• Request deletion;
• Limit our use of sensitive personal information;
• Opt out of certain marketing communications.

To exercise a right, email us at [CONTACT EMAIL] with the subject line “Privacy Request” and a description of what you want. We will verify your identity and respond within the timeframe required by law.

You may also have the right to appeal a denial. To appeal, reply to our response with the word “Appeal” in the subject line.

Our services are intended for adults. We do not knowingly collect information from children under 13.

We will update this Notice as our practices change. The effective date above will reflect the most recent change.

[BUSINESS NAME]

[BUSINESS ADDRESS]

[BUSINESS PHONE]

[CONTACT EMAIL]

This template is provided by Dino RD&C LLC as a courtesy and is not legal advice. The business operating this notice is responsible for its accuracy and for compliance with applicable law.