How we handle your data.
Effective May 18, 2026 · Last updated May 18, 2026
We collect only the information you give us when you ask for a demo, book a call, chat with our AI Concierge, or sign up as a client. We use it to deliver the services you're paying for. We don't sell it. We don't share it with advertisers. We use trusted third-party tools (GoHighLevel, Twilio, Stripe, OpenAI) to run those services, and we hold them to the same standard. You can ask us to delete your data anytime.
1. Who we are
a26 Local Lead Co ("a26," "we," "us") is a marketing services company operated by a26 Companies LLC. We provide AI-powered receptionist, chat, review, content, and booking services to local service businesses in the United States.
Business address: 4659 N Ravenswood Ave, Chicago, IL 60640
Contact: team@a26locallead.co
2. What we collect
Information you give us directly
- Demo request form: name, business name, email, phone (optional), and what's costing you the most right now.
- Calendar bookings: name, email, phone, and any details you add when you book a call with us.
- AI Concierge chat: the messages you send, your name and contact info if you provide them, and anything else you share in the conversation.
- Client onboarding intake: business details (services, pricing, hours, area, voice preferences), team contact info, integration credentials you provide to connect your existing tools.
- Payment info: handled by Stripe — we receive your name, email, billing address, and the last four digits of your card. We never see or store your full card number.
Information collected automatically
- Basic browser data: IP address, browser type, device type, pages visited, referring URL, and time on site. Used for security and analytics.
- Cookies and similar tech: see Section 6 below.
Information from your customers (if you're a paying client)
If you're a paying client, our AI tools answer calls, texts, and chats from your customers on your behalf. This means we process information about your customers — names, phone numbers, what they asked about, what they booked. This information belongs to you. We process it to run the service. We don't use it for any other purpose. When you cancel, you can take it with you.
3. How we use your data
We use what we collect for the following purposes — and only these:
- Deliver the AI staff service you're paying for (or considering)
- Respond to your inquiries and questions
- Send you account-related emails and SMS (receipts, onboarding, support)
- Send marketing emails or SMS only if you've explicitly opted in — and you can unsubscribe anytime by replying STOP or clicking the link in the email
- Improve our services by analyzing aggregate, anonymized usage patterns
- Comply with legal obligations and protect against fraud or abuse
We will never sell your data, share it with advertisers, or use it to target you with ads on other platforms.
4. Third parties we trust to run the service
We use established service providers to power parts of what we do. Each is contractually required to protect your data:
- GoHighLevel — CRM, workflow automation, calendar, SMS gateway, chat widget. Their privacy policy
- Twilio — SMS and voice phone-call infrastructure. Their privacy policy
- Stripe — payment processing, subscription billing. Their privacy policy
- OpenAI — the language model behind our AI Receptionist and AI Concierge. Per our agreement, OpenAI does not train on data we send through their API. Their privacy policy
- ElevenLabs — voice synthesis for AI Receptionist. Their privacy policy
- Vercel — website hosting. Their privacy policy
- Google — calendar integration, Business Profile management, web analytics (if enabled). Their privacy policy
- Google Workspace — email infrastructure for our @a26locallead.co mailbox.
We do not share your data with anyone else unless required by law or with your explicit consent.
5. How we secure your data
We use industry-standard practices:
- HTTPS encryption for all data in transit between you and our site
- Encrypted storage at rest via our service providers
- Access controls — only Duncan and authorized team members can access client data, and access is logged
- Two-factor authentication on all internal accounts
- Regular review of access permissions when team composition changes
No system is 100% secure. If a breach affects your data, we will notify you and the relevant authorities as required by law.
6. Cookies and tracking
Our website uses cookies and similar tech for the following purposes only:
- Strictly necessary: remember your session state (e.g., the dismiss button on our scroll-banner)
- Analytics: if we enable Google Analytics or similar in the future, we'll use it to understand which pages people visit and what's working. This data is anonymized and never used to identify individuals.
We do not use advertising cookies, retargeting pixels, or third-party trackers that share your behavior with ad networks.
You can disable cookies in your browser settings. The site will still function without them, though some convenience features may not work.
7. Your rights
Regardless of where you live, you have these rights:
- Access: ask us what data we have about you and we'll send you a copy
- Correction: ask us to update incorrect data
- Deletion: ask us to delete your data (subject to legal retention obligations)
- Export: get your data in a portable format (CSV, JSON) so you can take it elsewhere
- Opt-out of marketing: reply STOP to any SMS or click the unsubscribe link in any email
California residents (CCPA/CPRA)
You have the right to know what personal information we collect, the right to delete it, the right to correct inaccuracies, and the right to opt out of any sale or sharing of personal information. We do not sell personal information. To exercise these rights, email team@a26locallead.co with "CCPA Request" in the subject line.
EU/UK residents (GDPR/UK-GDPR)
You have additional rights including restriction of processing, objection to processing, and the right to lodge a complaint with your local data protection authority. Our lawful basis for processing is generally contract (delivering the service you signed up for) or legitimate interest (responding to your inquiry). Email team@a26locallead.co with "GDPR Request" to exercise these rights.
8. Data retention
We keep your data only as long as we need it:
- Active clients: for the duration of your subscription, plus 90 days after cancellation to allow for reactivation
- Demo requesters who don't sign up: 18 months from your last interaction, then deleted
- Financial records: 7 years, as required by US tax law
- Communications with us: 3 years for support purposes
When you ask us to delete your data, we honor the request within 30 days unless we're required by law to keep it longer.
9. Children's privacy
Our services are not intended for anyone under 18 years old. We do not knowingly collect data from children. If you believe a child has provided us with information, contact us immediately and we'll delete it.
10. International transfers
We're a US-based business and our service providers operate primarily in the US. If you contact us from outside the US, your information will be transferred to and processed in the US. By using our services, you consent to this transfer.
11. Changes to this policy
We may update this policy from time to time. When we do, we'll change the "Last updated" date at the top and, for significant changes, send you an email or post a notice on this page. Continuing to use our services after a change means you accept the updated policy.
12. Contact us
Questions about this policy or your data? Email team@a26locallead.co. We answer every one personally, usually within 24 hours.