Privacy Policy

Last updated: 2026-09-20 |  Developer: Rakhimov Enterprise LLC (Miami, FL, USA)  |  Trade name: NeurLead

This policy covers two apps: NeurLead Dispatch (for home-service business owners) and NeurLead Tech (companion app for field technicians). Both are available at aidispatch.us and on iOS/Android.

We wrote this in plain English on purpose. If something is confusing, email us.

1. Who We Are

• Legal entity: Rakhimov Enterprise LLC, Miami, FL, USA
• Trade name: NeurLead
• Platform: aidispatch.us (primary) & neurlead.com (marketing)
• What NeurLead does: two lines of service under one company.
  • Software. NeurLead Dispatch (a CRM for home-service business owners) and NeurLead Tech (a companion app for field technicians).
  • Advertising services. We plan, build and run advertising campaigns on Meta (Facebook and Instagram) for client businesses, inside the client's own advertising account. Section 5a covers that relationship in detail.
• Contact: kuparan.ru@gmail.com
  Privacy-specific inquiries: privacy@aidispatch.us (this mailbox is being established — use the Gmail above in the meantime)

2. What Data We Collect

We only collect what we actually need to run the service. Here's the complete list:

What we do NOT collect

• Full payment card numbers (handled entirely by Stripe)
• Background location — the Tech app uses location only in the foreground, only when explicitly triggered
• Contacts, calendar, microphone, camera — none of these are accessed unless you initiate a photo upload

2a. Call Recording & Transcription

What we record

• Audio: MP3 recording of the call stored in Cloudflare R2 (dual-channel: both legs)
• Transcript: generated locally via OpenAI Whisper from the audio
• AI score & coaching notes: computed from the transcript to help the business owner improve call quality

Consent notice

When a business owner enables call recording, every inbound and outbound call plays the following spoken disclosure to the customer before connecting:

"This call will be recorded and transcribed by artificial intelligence for quality and dispatch purposes. To continue without recording, press 9 now. By staying on the line, you consent to being recorded."

Pressing 9 skips both recording and transcription for that call. Staying on the line constitutes consent.

Retention

Call recordings and transcripts are retained for 90 days, then permanently deleted.

Deletion requests

To request deletion of a specific recording before the 90-day window, email privacy@aidispatch.us with the approximate date and time of the call. Business owners can also self-delete recordings from the Calls tab in their dashboard.

Business-owner responsibility

Call recording is disabled by default for all new accounts. When a business owner enables recording, they acknowledge responsibility for compliance with call recording laws in their state and in their customers' states. NeurLead provides the consent-disclosure tool but is not a law firm and does not provide legal advice.

3. How We Use Your Data

• Run the platform: deliver job leads, route conversations, display the dispatcher dashboard
• AI processing: customer message excerpts are sent to Anthropic (Claude API) to generate response suggestions. Prompts may contain customer name, phone, and message text — see §5 for details
• Billing: process subscription payments via Stripe, send invoices
• Notifications: push alerts about new leads, tech on-the-way status, replies
• Customer service: respond to your support tickets, diagnose bugs via Sentry
• Improving the service: aggregate, anonymized usage analytics (GA4)
• Legal compliance: retain invoices and billing records as required by law
• Security: detect fraud, abuse, or unauthorized access

4. Who We Share Your Data With

We do not sell your data. We share it only with the sub-processors below, strictly to operate the service:

5. Your Customer Data — You're in Charge

When you use NeurLead to manage your customers' data (names, phones, conversations), you are the data controller and we are your data processor. That means:

• You own your customer data. We process it only on your instructions.
• If your customers ask you to delete their data, you are responsible for honoring that request. You can delete any lead or customer record from the dashboard, or request a full purge via email.
• Field technicians you invite use the Tech app. Their personal data is also subject to your privacy policy as their employer.

5a. Advertising Services — Access to Your Meta Accounts

This section applies only if you have engaged us to run advertising for you. It does not apply to software-only customers.

What we get access to, and how. You add our verified business portfolio, Rakhimov Enterprise LLC, as a partner on your own advertising account, Facebook Page and, where relevant, Instagram account. Partner access works like giving an accountant access to your books:

• You remain the owner of the advertising account, the Page and the Instagram account. We never become the owner of any of them.
• We never receive your password and never ask for one. Access is granted by a button inside Meta, and it is granted to our company, not to a person.
• Your payment card stays attached to your own account. Meta charges you directly; we never hold, touch or see your card.
• You can remove our access at any time, in one click, without telling us first. See Deleting your data for the exact steps.

What we receive as a result. Campaign settings and performance figures, and the enquiries your advertising produces — the name, phone number, email and answers a person gives in your ad form, or the message they send to your Page or Instagram.

Whose data that is. Those people are your prospective customers, not ours. For them you are the data controller and we are your data processor, on the same terms as section 5. Concretely:

• We deliver each enquiry to the destination you chose — your phone, your inbox, your own system — and keep a record of it so that both of us can see what was delivered and when, and so that the free enquiries in your agreement can be counted.
• We do not contact those people on our own behalf, and we do not add them to any list of ours.
• We never use one client's data, audiences or results to advertise for another client. What we learn while working for you stays with you.
• We do not sell, rent or trade enquiry data to anyone, and we never have.

Access credentials. The access tokens that let our system reach your advertising account are held on our own servers, are limited to the specific tasks you granted, and are destroyed when you remove our access or when the engagement ends.

Where the commercial terms live. Money, notice periods and what we do and do not promise are set out in the separate advertising services agreement you sign. This policy covers only data.

5b. YouTube — Publishing to Your Own Channel

This section applies only if you have connected a YouTube channel. It does not apply to anyone who has not.

We use YouTube API Services. By connecting a channel you also agree to the YouTube Terms of Service. Google's own handling of your data is described in the Google Privacy Policy.

What we get access to, and how. You sign in with your own Google account and approve the access on Google's own screen. As with Meta above:

• You remain the owner of the channel. We never become the owner of it.
• We never receive your Google password and never ask for one.
• We only ever touch the one channel you connected. We do not read, store or analyse anyone else's channel.
• You can remove our access at any time, in one click, without telling us first — at myaccount.google.com/permissions.

What we do with it. Two things, and nothing else:

• We upload your own video. You film a clip and publish it on your own Instagram; we upload that same clip to your own channel, with a title and description written from your own caption. The source is always your own footage. We never take a video from YouTube and republish it anywhere.
• We answer comments under your own videos. We read the comments left on videos we uploaded, draft a reply, and post it from your own account. We do not touch comments on anyone else's videos.

What we store, and for how long. The access token, your channel id and title, and the video id of each clip we uploaded — enough to know what we published and to answer its comments. We do not copy your videos, your subscriber list, your watch history or your analytics into our systems. Video files we mirrored in order to upload them are deleted from our servers within one day.

Deleting it. Removing our access at the Google link above stops everything immediately. To have what we already stored erased as well, ask us — see Deleting your data — and we delete the token, the channel record and the video ids. Videos already published on your channel belong to you and stay on your channel; delete them yourself in YouTube Studio if you want them gone.

5c. Facebook Messenger & Instagram Direct — Answering Your Customers

This section applies only if you have connected a Facebook Page or an Instagram professional account so that messages sent to it are answered through our software. It does not apply to anyone who has not.

What we get access to, and how. You connect your own Page or Instagram account on Meta's own screen, the same way as in section 5a. We never receive your password, we only ever touch the accounts you connected, and you can remove our access at any time in your Meta settings without telling us first.

What we receive. When someone sends a message to your Page or your Instagram account, Meta delivers that conversation to us:

• The text of the message, and any photo or file the person attached.
• The identifier Meta gives that person for your business. It is specific to your business and cannot be used to find them anywhere else.
• Their public profile name and, on Instagram, their public username, follower count and whether they follow your account — the same things you see yourself when you open the conversation.
• Whether they arrived from one of your ads, and which one, when Meta tells us so.

We do not receive, ask for or store their email address, their phone number, their friends, their other conversations or anything else on their profile. If a person types their own phone number into the conversation, it is stored because they sent it to you, exactly like the rest of what they wrote.

What we do with it. Three things, and nothing else:

• We put the conversation in front of you. Each conversation becomes a customer record in your dashboard so that you and your dispatchers can see who wrote, what they asked for and what was answered.
• We draft and send replies. Replies are written by an AI assistant configured with your own business details, prices and scripts, and sent from your own account. A human on your team can take over or write the reply themselves at any point. Photos a customer sends are described by the AI so the reply can refer to the job.
• We follow up. If a conversation goes quiet we may send a reminder in the same conversation, on the schedule you set, until the person replies or you switch it off.

Whose data that is. The people who message you are your prospective customers, not ours, on exactly the terms in section 5: you are the data controller, we are your processor. We never contact them on our own behalf, never add them to a list of ours, never use one business's conversations to serve another, and never sell, rent or trade any of it.

What we never do with messages. We do not use the contents of your customers' messages to build advertising audiences, to target ads, or to train a general-purpose AI model. Messages are sent to our AI provider only to write the reply to that same conversation, under a contract that forbids the provider from training on them.

How long we keep it. For as long as the customer record exists in your account, because the conversation is the customer record — the same retention as section 7. Access tokens are destroyed when you disconnect the account.

Deleting it. Disconnecting the Page or Instagram account in your Meta settings stops everything immediately. A person who messaged your business can ask us to erase what we hold about them, themselves and without going through you — see Deleting your data. Messages already sitting in Meta's own inbox belong to Meta's service and are deleted there, not here.

6. Geographic Scope

Our software is offered to businesses in the United States. Our advertising services may be engaged by a business outside the United States, and in that case the campaigns we run for that business may reach people in that country. Where that happens, the client is the data controller for the enquiries those campaigns produce, and the law of the client's own country applies to them alongside this policy. We do not knowingly process personal data of EU residents; if that changes, this policy will be updated before it does.

7. How Long We Keep Your Data

• Active accounts: data is kept for as long as your account is open
• After you delete your account: 30-day grace period (so you can recover), then permanent deletion
• Invoices & billing records: 7 years (required by US tax law)
• Crash logs (Sentry): 90 days, then auto-deleted by Sentry
• Analytics (GA4): 14-month event retention (Google's default)

8. Your Rights

You can exercise any of these rights by emailing kuparan.ru@gmail.com:

• Access: ask us what data we hold about you
• Correction: ask us to fix inaccurate data
• Deletion: ask us to delete your account and associated data
• Portability: request an export of your leads, messages, and settings in JSON or CSV
• Opt out of analytics: email us and we will exclude your account from GA4 tracking
• Revoke AI processing: you can turn off the AI auto-responder from your dashboard settings at any time

We respond to all requests within 30 days.

9. Children

NeurLead is a business tool for adults. We do not knowingly collect data from anyone under 13. The app is rated 18+ on both the App Store and Google Play. If you believe a minor has created an account, contact us immediately and we will delete it.

10. Cookies & Local Storage

We use minimal storage:

• Session token — keeps you logged in (stored in localStorage, expires after 7 days)
• Preferences — dark mode, language, UI settings (localStorage)
• Analytics cookies — Google Analytics 4 sets first-party cookies (_ga, _ga_*) to measure usage

We do not use advertising cookies or third-party tracking pixels.

11. Changes to This Policy

If we make material changes (new data types, new sharing partners), we will:

• Email you at least 30 days before the change takes effect
• Update the "Last updated" date at the top

Continued use of the app after the effective date means you accept the updated policy.

12. Contact Us

• Email: kuparan.ru@gmail.com
• Privacy inbox (being established): privacy@aidispatch.us
• Company: Rakhimov Enterprise LLC, Miami, FL, USA
• Platform: aidispatch.us  |  neurlead.com