Privacy
This page explains what Oak Labs LLC ("Oak Labs", "we") collects for Acorn, our missed-call text-back service, why we collect it, who helps us run it, and how long we keep it. We do not sell your information, and we do not use it for unrelated marketing lists.
If you sign up or ask about Acorn
From our signup form we collect your name, email, town, phone, business type, and any question you add. We also keep basic browser information, your SMS consent choice, and a scrambled (keyed hash) version of your IP address so we can spot abuse. We do not keep your plain IP address.
If you run a shop on Acorn
We keep your shop and owner details, your settings, a hashed portal PIN (never the PIN itself), your consent records, and the status of emails we send you.
Payments are handled by Stripe. We keep Stripe customer and subscription IDs. Your card number never reaches us.
If you call or text a shop that uses Acorn
To reply to you and alert the shop, we store:
- Your phone number and the texts sent to and from the shop's Acorn number
- Photos you text (stored at Twilio)
- Voicemail recordings and the shop's greeting (stored at Twilio)
- Voicemail transcripts and short AI summaries
- A spam tag, so the shop can spot sales calls and robocalls
- Lead details the shop adds, such as your name, message, notes, whether the job was won or lost, and the job amount
This information belongs to the shop you contacted. We use it only to run Acorn for that shop.
Logs
Our system logs show only the last 4 digits of phone numbers.
Who helps us run Acorn
These service providers process data only to provide their service to us:
- Twilio: calls, texts, photos, voicemail, transcription, number lookup, spam scoring (Nomorobo), and carrier registration
- Vercel: hosting
- Vercel AI Gateway: sends voicemail audio to OpenAI and Microsoft for transcription, and transcripts to Google for summaries and spam tags
- Neon: database
- Stripe: payments
- Google Workspace: email
- Google Sheets: only if a shop turns on lead export
AI and your data
We use AI providers only to transcribe voicemails, write short summaries, and tag likely spam. They are instructed not to train on customer data. They may keep data briefly for abuse monitoring, for up to 30 days. We delete a shop's caller data within 30 days after the shop cancels, or sooner if asked.
How long we keep it
We keep data while a shop's account is active. We delete it within 30 days after a shop cancels, or sooner if asked.
When we delete data, it is removed from our systems and our providers' active records within 30 days. That includes our phone provider's copies of texts, calls, and recordings. Providers may keep backups for up to 30 to 40 more days, or longer where needed for fraud prevention or legal reasons.
We keep opt-out (STOP) records and a basic billing record.
Twilio, our phone provider, also keeps some records we can't delete, such as call quality data for 30 days and billing and usage records, under its own privacy policy. We keep carrier registration details for as long as carriers and the law require.
To ask for a copy of your data or to have it deleted, email info@theoaklabs.com. If you contacted a shop, you can also ask the shop.
Text messaging (SMS)
Program: Acorn by Oak Labs.
We collect phone numbers when someone calls a shop's line or submits a shop's web form, and we use them only to reply about that inquiry and to alert the shop owner.
No mobile information will be shared with third parties or affiliates for marketing or promotional purposes.
Text messaging originator opt-in data and consent will not be shared with any third parties.
Service providers such as our SMS carrier (Twilio) process messages only to deliver them.
Reply STOP to opt out. Reply HELP for help. See our SMS Terms and Terms of Service.
Questions? Email info@theoaklabs.com.