How we handle your information.

Effective May 30, 2026 · Prime Circa, Inc. · Cypress, Texas

Who we are

Prime Circa, Inc. (“Prime Circa,” “we,” “us”) is a California corporation with its principal place of business in Cypress, Texas. We build AI agents that work for small businesses — including Vera (reputation), Vanessa (front desk), and the other services listed at primecirca.com. This policy explains what information we collect when you use our website, services, or speak with our AI agents.

Information we collect

From our website (primecirca.com)

Server logs: IP address, browser type, pages visited, referrer.
Audit submissions (when you use vera.primecirca.com): business name, city, optional website URL — to perform the audit.
Contact form / email submissions: name, email, message content.

When Vera calls a business

The phone number we dialed (publicly listed on Google Business Profile).
Audio recording of the call.
Transcript of the call.
Any mobile number provided verbally during the call (with explicit consent for SMS follow-up).
The substance of any consent given.

Vera identifies herself as an AI assistant in the first sentence of every call. The call is recorded for compliance and training. You may decline to engage and ask to be removed from our list at any time.

SMS / text messages

If you give us your mobile number — by checking the consent box on our website (e.g. primecirca.com/get-app) or by providing it on a recorded phone call — we may text you about your account, setup, and product updates. We collect:

Mobile numbers you provide with explicit consent (a web consent checkbox or a recorded call).
Messages we send and replies you send back.
Delivery receipts and message timestamps.

We do not sell or share your mobile number, and we do not share it with third parties or affiliates for their own marketing. Message frequency varies (typically a few messages per setup). Message and data rates may apply. Reply STOP at any time to opt out, or HELP for help.

Vanessa mobile app (Android & iOS)

Vanessa is our AI receptionist for small businesses. The mobile app is used by the business owner to set Vanessa up and manage her. It collects:

Account information: email, phone number, and password handled by our authentication provider (Clerk).
Payment information: card details collected and stored by Stripe, our payment processor. Prime Circa never sees or stores your card number.
Microphone audio (RECORD_AUDIO): during the three setup questions, the app records your spoken answers about your business so Vanessa can be trained on what to say. Audio is processed on-device for speech recognition and sent to our backend only as a text transcript unless you opt in to share the recording for support. The microphone is not used after setup.
Business profile: what you tell Vanessa during setup — business name, hours, services, pricing, never-say-this rules, when to reach you.
Phone number assignment: the dedicated phone number Vanessa answers on (provisioned through our voice infrastructure provider) and your existing business number (so we can forward to Vanessa).

When Vanessa answers your business calls

After setup, Vanessa runs on our infrastructure (not on your phone). When she answers a call from one of your customers we receive:

Caller phone number (from the telecom carrier).
Audio recording and text transcript of the call.
Any details the caller voluntarily provides — name, callback number, the reason for the call, address, appointment time.

Vanessa identifies herself as an AI assistant at the start of every call. Recordings are made available to you (the business owner) in the app and used to improve transcription quality. We treat caller information as confidential to your business and do not use it for our own marketing.

How we use information

To provide the services you requested (review-response drafts, audits, SMS follow-up).
To verify and document consent for SMS messaging.
To improve the quality of our AI agents (with personally identifiable information removed where reasonable).
To respond to inquiries and provide customer support.
To comply with legal obligations (TCPA, FCC, state telecom laws).

We do not sell your personal information to third parties. We do not share it for third-party marketing.

Google Business Profile connection

When you connect your Google Business Profile to Prime Circa, we access only the information needed to read your business listing details and reviews, and to post owner replies that you have personally approved.

What we read: your reviews (so Vera can draft replies), your listing fields — name, address, phone, hours, categories, description (so Vera can monitor for drift across platforms).
What we write: owner replies to your reviews, only after you have approved each individual reply (by clicking the “Approve & post” link in the email Vera sends, or by editing and posting from your dashboard). Vera never posts a reply without your per-reply consent.
Where we store tokens: your Google OAuth access and refresh tokens are stored encrypted at rest using AES-256-GCM, with the encryption key held outside the database.
Data sharing: we do not share your Google Business Profile data with third parties beyond the processors listed below. We do not use review content for any purpose other than drafting and posting your own owner replies.
How to revoke: disconnect from your Prime Circa dashboard at any time, or revoke directly from your Google account permissions page. Revocation takes effect immediately.

Service providers we use

We share data with the following processors strictly to operate the service:

Vapi — voice agent infrastructure for Vera and Vanessa.
ElevenLabs — text-to-speech voice for Vanessa.
Clerk — user authentication and account management for the Vanessa mobile app.
Stripe — payment processing for the Vanessa subscription.
Twilio — SMS delivery and phone-number verification.
Google — Places API (business lookup), Gemini (LLM for drafting and classification).
Vercel — website and backend hosting.
Cloudflare — DNS and basic security.

Each is bound by their own privacy commitments and a data processing agreement with us. We use them only for the purposes described above.

How long we keep information

Call recordings + transcripts: minimum 90 days as a consent record, deleted on request after that.
SMS history: retained as long as required by Twilio and applicable law (typically 12 months).
Audit submissions: retained for analytics and improvement; you may request deletion at any time.
Server logs: rotated within 30 days.

Your rights and choices

Stop SMS: reply STOP to any message we send.
Stop calls: tell Vera to remove your number, or email us at info@primecirca.com. We add the number to a permanent internal do-not-call list across all channels.
Access or delete data: email info@primecirca.com with your business name and the channel you contacted us on. We respond within 30 days.
California residents: you have rights under the California Consumer Privacy Act (CCPA) including the right to know, delete, and not be discriminated against. Submit requests to the email above.
Texas residents: you have rights under the Texas Data Privacy and Security Act (TDPSA), effective July 1, 2024, including the right to know, delete, correct, and opt out of certain processing. Submit requests to the email above.

Children's privacy

Our services are not directed at children under 13. We do not knowingly collect personal information from anyone under 13.

Security

We use industry-standard practices to protect data: TLS for data in transit, encryption at rest where applicable, and access controls limited to people who need them. No system is perfect; we will notify affected parties promptly in the unlikely event of a material breach.

Changes to this policy

We may update this policy. The “Effective” date at the top reflects the last revision. Material changes will be announced on primecirca.com.

Contact

Questions, requests, or concerns: info@primecirca.com.