Privacy Policy

OnboardFlow.ai ("we," "us," or "our") respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains how we collect, use, store, and protect your information when you visit our website, request a free AI Revenue Audit, or use our AI-powered lead generation, voice receptionist, and SMS automation services (the "Services").

By providing your contact information — including your phone number and email address — you consent to the practices described in this policy, including the receipt of SMS messages and phone calls as described below.

1. Information We Collect

We collect information you voluntarily provide when you submit a form, request an audit, or schedule a demo, including:

• Full name and business name
• Mobile phone number (required for SMS messaging and call-back services)
• Email address
• Business website and Google Business Profile information (for audit purposes)
• Service area / location (city, state, ZIP code)
• Any message details you provide when contacting us

We may also collect limited technical data automatically, such as IP address, browser type, and pages visited, through standard cookies and analytics tools.

2. How We Use Your Information

We use your information to:

• Respond to your inquiries and provide the Services you request
• Send you SMS text messages and place phone calls regarding your audit results, appointment reminders, and service updates
• Schedule and confirm demo appointments and consultations
• Deliver our AI Voice Receptionist, missed-call text-back, and lead-capture services
• Send marketing and promotional messages about our Services (only with your consent)
• Improve our website, Services, and customer experience
• Comply with legal obligations and protect our rights

3. SMS Messaging Policy & Consent

By providing your mobile phone number and checking the SMS consent box on our forms, you expressly consent to receive SMS text messages and phone calls from OnboardFlow.ai at the number you provide. These messages may include:

• Audit results and follow-up information
• Appointment reminders and scheduling confirmations
• Missed-call text-back automation (if you are a client using this service)
• Service updates and account-related notifications
• Promotional and marketing offers (with your consent)

Message frequency varies. Standard message and data rates may apply from your mobile carrier. You may receive recurring messages if you are an active client using our text-back or follow-up services.

How to Opt Out

You can opt out of receiving SMS messages at any time by replying "STOP" to any message we send. After opting out, you may receive one final confirmation message. To opt out of phone calls, contact us at the information below or reply "STOP" via SMS. If you opt out, we may still send you non-marketing, transactional messages (such as appointment confirmations) where required.

Help & Support

For help with SMS messaging, reply "HELP" to any message, or contact us at (301) 820-7787 or hello@onboardflow.ai.

4. A2P 10DLC & SMS Compliance

OnboardFlow.ai sends Application-to-Person (A2P) SMS messages in compliance with the U.S. telephone consumer protection laws, including the Telephone Consumer Protection Act (TCPA), and the wireless carriers' 10DLC (10-digit long code) registration requirements. Our messaging campaigns are registered and verified through the A2P 10DLC framework, and we only message individuals who have provided prior express written consent.

We do not sell, rent, or share your mobile number for marketing purposes without your consent, and we do not send SMS messages to numbers on the National Do Not Call Registry unless we have your prior express written consent.

5. How We Handle Contact Data

Your contact data (name, phone number, email, business information) is stored securely in our customer relationship management system and used solely to deliver the Services and communicate with you. We:

• Limit access to your data to authorized personnel who need it to provide Services
• Do not sell your personal information to third parties
• May share data with service providers (e.g., SMS delivery, calendar scheduling) who help us operate, under contractual confidentiality obligations
• Retain your data only as long as necessary to fulfill the purposes described here or as required by law
• Take reasonable technical and organizational measures to protect your data against unauthorized access, loss, or misuse

If you are a client using our missed-call text-back or Voice AI services, your customers' contact data (calls, text messages, lead information) is processed to deliver those Services on your behalf. You remain the owner of your customers' data, and we act as a processor under your instructions.

6. Sharing of Information

We do not sell or rent your personal information. We may share your information with trusted third-party service providers who assist us in operating our website and delivering Services (such as SMS gateways, calendar/booking providers, and analytics platforms), all of whom are bound by confidentiality obligations. We may also disclose information when required by law or to protect our legal rights.

7. Data Retention

We retain your personal information for as long as your account is active or as necessary to provide the Services, comply with legal obligations, resolve disputes, and enforce our agreements. You may request deletion of your data at any time by contacting us.

8. Your Rights

Depending on your location, you may have the right to:

• Access the personal information we hold about you
• Request correction or deletion of your personal information
• Opt out of marketing communications at any time
• Withdraw consent to SMS messaging at any time (reply "STOP")
• Request a copy of your data in a portable format

To exercise any of these rights, contact us at hello@onboardflow.ai.

9. Children's Privacy

Our Services are intended for business owners and professionals. We do not knowingly collect personal information from children under 16. If you believe we have collected information from a minor, please contact us so we can delete it.

10. Security

We implement reasonable administrative, technical, and physical safeguards designed to protect your personal information. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page and updating the "Last updated" date. We encourage you to review this page periodically.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us: