Effective date: October 6, 2026 | Last updated: October 12, 2026 | Version: 2.2 (adds call recording/transcription and international processing sections; 2.1 clarified that a website inquiry triggers an internal staff email/SMS alert, separate from marketing communications)
AV Prime Design Corp. ("we," "us," "our") respects your privacy. This Policy explains what we collect, how we use it, and your choices, when you visit https://www.avprimedesign.com, receive a proposal, or use our services.
1. Information We Collect
You provide: - Contact & business details (name, business name, email, phone, address). - Proposal/checkout information (services selected, billing details, agreement acceptance, electronic signature, and the date/time and IP of acceptance). - Communications you send us (email, forms, support requests). - Content and credentials you share so we can perform services.
Collected automatically: - Usage and device data via cookies and analytics (pages viewed, referrer, approximate location, browser/device) — see §6. - Log data for security and troubleshooting.
From third parties: - Payment status and limited card metadata (e.g., card brand, last four) from our processor (we do not receive or store full card numbers).
2. How We Use Information
- Provide, maintain, and improve our services and your projects/accounts.
- Prepare and deliver proposals; process acceptance and payments; manage subscriptions and support.
- Communicate with you (service messages, onboarding, invoices, and — where permitted — marketing you can opt out of).
- When you submit a website inquiry or project request, notify our own internal team (by email and/or SMS to our staff) so we can respond to you promptly. This is an internal, operational notification to our staff, not a marketing message to you, and submitting an inquiry does not automatically opt you into marketing email or SMS — any separate confirmation we send you is handled through our ordinary transactional communications, described above.
- Secure our systems, prevent fraud, and comply with legal obligations.
3. How We Share Information
We do not sell your personal information. We share it with: - Service providers (subprocessors) who help us operate, under contract — see the list in Section 3A. - Professional advisors (legal, accounting) as needed. - Authorities when required by law or to protect rights and safety. - A successor in a merger, acquisition, or asset sale.
3A. Service Providers & Subprocessors
We use third-party providers (subprocessors) to help deliver our services. This list reflects the providers we actually use in production as of this version's effective date — we will update it, rather than leave it stale, as our providers change:
- Payments: Stripe and, where a client connects it, Square — to process payments and, for Smart Tap, to support client-business payment connections (see your Smart Tap Terms §11).
- Messaging: Twilio — to send and receive SMS/text messages, including opt-out/opt-in processing, and to send our own internal staff a text alert when you submit a website inquiry.
- AI providers: Anthropic (Claude) for AI drafting, our AI receptionist, and our website chat assistant; OpenAI and Google (Gemini) for AI-visibility checks within AV AI Growth; and Retell for AI voice interactions where that feature is active. We do not use any other AI provider in production.
- Sign-in: Google OAuth — where you choose to sign in with Google.
- Analytics: Google Analytics 4 — see Section 6.
- Hosting/cloud infrastructure that stores and runs our applications and data.
We do not currently use a named third-party email-delivery vendor for production email; where we do send email, it is sent through our own infrastructure. If that changes, we will update this list. Where this sharing requires access to your information, we share only what is reasonably necessary for the provider to do the work, we require them to keep it confidential and use it only for that purpose, and we do not sell your personal information to any of them.
We have not represented, and do not represent here, that any Data Processing Addendum we may enter into with you is automatically regulation-complete for your specific jurisdiction; see Section 10.
3B. Sensitive Data & Regulated Information
3B.1 Health information. We do not represent that our services are HIPAA-compliant, and we do not act as a HIPAA business associate, unless we have signed a business associate agreement with you specifically confirming that. If your business is a healthcare provider or otherwise handles protected health information, please discuss your compliance needs with us before routing that information through any AV Prime service, including Smart Tap.
3B.2 Payment card data. We do not store full card numbers or security codes; those are handled directly by our payment processors in their own tokenized systems. We do not represent that our own systems independently hold any particular PCI compliance level beyond what our use of a compliant processor provides.
3B.3 Children. See Section 11. We do not knowingly collect personal information from children, and we do not represent that our services are COPPA-verified for any client's particular use case; a client whose own customers may include children is responsible for its own compliance with COPPA and similar laws for that use.
3B.4 Discouraging unnecessary sensitive data. We encourage clients configuring Smart Tap, forms, or AI features not to collect government-issued identifiers, health information, or other sensitive categories of data unless the specific feature genuinely requires it.
4. Payment Data
Payments are processed by Stripe. Card details are entered into Stripe's secure, tokenized fields; we never receive your full card number or CVV. Stripe's handling of your data is governed by Stripe's privacy policy.
5. Data Retention
We retain personal information for as long as needed to provide services, comply with legal, tax, and accounting obligations, resolve disputes, and enforce agreements. Signed agreements and transaction records are retained per our record-keeping and legal requirements, which currently set these as the minimum retention floors for an archived or former client's records — not as a fixed or maximum period, and not as an automatic deletion deadline:
- Signed agreements: at least 6 years from execution.
- Invoices & payment records: at least 3 years from the transaction.
Records are kept at least that long because applicable record-keeping law requires it, and may be kept longer where a dispute, audit, or other legal obligation requires it. We delete or anonymize other personal information within a reasonable period after it is no longer needed for the purpose it was collected for. See Section 8 and your Terms of Use for how account closure and data deletion actually work.
6. Cookies & Analytics
Our website uses cookies and similar technologies for functionality, performance, and analytics. We use Google Analytics 4 to understand site usage; GA4 may set cookies and process data as described by Google. This site uses a cookie-consent banner: you can accept, decline, or change your choice at any time via "Cookie preferences" in the footer, in addition to controlling cookies through your browser.
6A. Smart Tap Session & Location Data
6A.1 When someone taps or scans an AV Prime Smart Tap device, we record session information — the date and time, which device was used, and basic technical details about the browser or app that opened the destination — so the feature works and so the business using that device can see activity in its dashboard.
6A.2 We do not collect precise device geolocation (GPS coordinates) through Smart Tap. Where a Smart Tap dashboard or feature refers to a "location" — including a staff time-clock entry in Smart Tap Workforce — it means a business location (an address or site record) selected or configured by the business, never coordinates read from a device.
7. AI Features & Automated Processing
7.1 AI tools we use in our work. We may use artificial-intelligence tools to help produce work for clients (for example, drafting text, generating images, or writing code). Where we do, we avoid submitting your confidential business information or personal information to those tools unless it is necessary for the work and you have agreed to it. We do not knowingly submit protected health information, payment card data, or government-issued identifiers to AI tools.
7.2 AI features we build or install for clients. If we deploy an AI feature for a client (such as a chatbot, AI receptionist, or automated intake), that feature may process information provided by the people who interact with it — for example, names, contact details, and the contents of messages or calls. In that arrangement, our client is responsible for what their AI feature collects and how it is used; we act on the client's instructions in configuring it. If you interacted with an AI assistant on another business's website or phone line, direct privacy requests to that business.
7.3 Third-party AI providers. AI features rely on third-party AI platforms. Information submitted to an AI feature is transmitted to and processed by those providers under their own terms and privacy policies. Providers may impose their own retention periods.
7.4 Automated decisions. We do not use AI to make decisions that produce legal or similarly significant effects about you (such as credit, employment, housing, or insurance decisions) without human review.
7.5 Disclosure of automation. Where required, businesses using our AI features are responsible for disclosing to their customers that they are interacting with an automated system.
7.6 Our own website chat assistant. This website includes a chat feature that answers questions about our services. Messages you send it are transmitted to a third-party AI provider (currently Anthropic) to generate a response. We do not store your chat messages in our own systems — your conversation exists only in your browser for that visit and is not saved when you close or reload the page. Please do not share sensitive personal information (such as payment details, government ID numbers, or health information) in the chat; use our contact form or call us directly for anything sensitive.
7.7 AV AI Growth. If you use AV AI Growth or a similarly named search-visibility or growth-intelligence service, we process information about your business (such as services offered, locations, and website content) and publicly available information about your market and competitors to identify opportunities and generate recommendations. This processing may involve access to accounts you choose to connect (for example, Google Search Console or Google Analytics) and queries to third-party search engines and AI platforms. Publicly available information about a competing business is not personal information about an individual. We do not sell this information, and we share it only with the service providers necessary to perform the analysis, as described in Section 3A.
7.8 Smart Tap AI receptionist & voice features. Where a business's Smart Tap plan includes an AI receptionist or voice-based intake, that feature is built on the AI providers named in Section 3A (currently Anthropic for text/drafting and Retell for voice). The information callers or chatters provide is processed by those providers to generate a response, under the same principles described above in this Section 7.
7A. Call Recording, Transcription & Call Analysis
7A.1 If a client enables an AI receptionist or call-analysis feature, calls to that client's business number may be recorded, transcribed, and summarized by automated systems. The client (the business you called) is responsible for telling callers that the call may be recorded and, where the law requires, for obtaining consent before recording starts; some U.S. states require the consent of all parties. If you do not want a call recorded or analyzed, tell the business at the start of the call or contact it by another channel.
7A.2 Transcripts and call summaries are treated as the client's data, are not used by AV Prime Design to train AI models, and are retained only for the period the client configures and then deleted. AI-generated follow-ups are drafts reviewed by the client before anything is sent.
7B. International Processing
AV Prime Design is based in the United States and our service providers (see Section 3A) may process data in the United States and other countries. Where required, we rely on appropriate safeguards such as standard contractual clauses offered by those providers. Contact us (Section 13) for details.
8. Your Choices & Rights
- Marketing opt-out: unsubscribe links in emails, SMS STOP-family keywords for text messages (see your Smart Tap Terms §14), or contact info@avprimedesign.com.
- Access/correction/deletion: you may request access to, correction of, or deletion of your personal information, subject to legal limits. Contact info@avprimedesign.com. Our Terms of Use describes how account closure and the underlying deletion process actually work.
- Export: where we have built a data-export capability for a specific feature, you may request an export of your data through that feature or by contacting us; we describe only export capability we have actually built, not a general promise to produce every record in every format.
- Do Not Track: we currently do not respond to browser DNT signals.
9. Security
We use administrative, technical, and physical safeguards appropriate to the risk (including encryption in transit, access controls, and use of reputable processors). No method of transmission or storage is 100% secure, and we do not claim our systems are "unhackable" or guaranteed secure; you use our services at your own risk.
9A. Security Incidents
If we become aware of a security incident affecting your personal information, we will follow our internal incident-response process and notify you consistent with applicable law. We do not promise a specific notification timeline beyond what the law requires, and our internal response targets are operational goals for us, not a contractual service-level commitment to you unless we have agreed to one in writing.
10. State/Region-Specific Rights
Depending on where you live, you may have additional rights. We do not assume every state privacy law applies to every visitor; which rights apply to you depends on your state of residence and our actual footprint, and we build our access/correction/deletion/export/opt-out tools based on that, reviewed with counsel as our footprint changes. - State privacy rights: If you are a resident of a state with a consumer-privacy law (e.g., California/CCPA-CPRA, and others), you may have rights to know, access, correct, delete, export, and opt out of "sale"/"sharing" for targeted advertising. We do not sell personal information. - New York: We are a New York corporation and these Terms and this Policy are governed by New York law, consistent with your Service Agreement; this does not by itself determine which state's substantive privacy-rights law applies to you as a resident of a different state. - EEA / UK (GDPR): If you or your end users are in the EEA/UK, additional terms and a Data Processing Addendum may apply.
11. Children
Our services are for businesses and are not directed to minors under 18 (or the applicable age). We do not knowingly collect information from children.
12. Changes
We may update this Policy; material changes will be posted at https://www.avprimedesign.com with a new effective date.
13. Contact
Privacy questions: info@avprimedesign.com · AV Prime Design Corp.