Privacy Policy

Last Updated: October 11, 2026

1. Introduction

Equinox Property Investments (“Company,” “we,” “us,” or “our”) operates the website equinoxvoice.com and provides AI voice intake services through the AcreAgent and OfferAgent products (collectively, the “Service”).

This Privacy Policy describes how we collect, use, disclose, store, and protect information from two categories of individuals: Clients, who are the businesses and individuals that subscribe to and use the Service, and Callers, who are the third parties that call phone numbers provisioned through the Service, such as property sellers responding to a Client’s marketing materials.

By using the Service, you consent to the collection and use of information as described in this Privacy Policy. If you do not agree with the practices described here, you should not use the Service.

2. Information We Collect

Information We Collect from Clients (Account Holders):

Account registration information, including your name, email address, business name, and phone number.

Business information, including your property type preferences (land, houses), your CRM type and credentials (such as your CRM tenant ID and API credentials), your business mailing address, and your preferred AI agent configuration.

Billing information, including your payment method details. All payment information is processed and stored by Stripe. We do not store your full credit card number, CVV, or other sensitive payment details on our own servers.

Service configuration data, including your AI agent voice and persona preferences, your agent name selection, your operating hours, and any custom intake instructions or business-specific details you provide during onboarding.

Usage data, including your login activity, dashboard interactions, feature usage patterns, minutes consumed per billing cycle, number of calls received, and support interactions.

Communications, including any emails you send to our support team, feedback you provide, and feature requests you submit.

Information We Collect from Callers (Inbound Callers to Client Numbers):

Voice recordings of the entire telephone conversation between the Caller and the AI Agent.

Transcripts of the call generated from the voice recording using speech-to-text technology.

Information voluntarily disclosed by the Caller during the conversation, which may include the Caller’s first and last name, phone number, email address, property details such as the Assessor’s Parcel Number (APN), property address, county, and state, the Caller’s motivation for selling, their desired timeline for selling, their price expectations, the number of properties they wish to sell, and any other information the Caller chooses to share during the call.

Call metadata, including the Caller’s phone number as provided by caller ID, the date and time of the call, the duration of the call in seconds, and call quality metrics.

Information Collected Automatically from Website Visitors and Dashboard Users:

Your IP address, browser type and version, device type, and operating system.

Pages you visit on our website, the time you spend on those pages, and the referring website or source that led you to our site.

Advertising and measurement events collected through the Meta Pixel in your browser and sent through the Meta Conversions API from our server. These events may include page visits, demo or lead-form actions, referral and campaign information, and limited contact information submitted by you where used for matching, subject to applicable settings and consent requirements. Browser and server events use event deduplication so the same action is not counted twice.

Cookies and similar tracking technologies as described in our Cookie Policy.

3. How We Use Information

We use Client information to provide, operate, maintain, and improve the Service. To process your payments, manage your subscription, and communicate with you about billing matters. To provision and configure your AI agent, phone number, and CRM integration. To send you account-related communications, including usage alerts when you approach your minute allocation, billing confirmations, service updates, and security notices. To provide customer support and respond to your inquiries. To enforce our Terms of Service and other policies. To comply with applicable laws, regulations, and legal obligations. To detect, prevent, and address fraud, abuse, and security issues.

We use Caller information to deliver the core Service, which is conducting the AI voice intake conversation, capturing structured lead data, generating call transcripts, and synchronizing lead data to the Client’s CRM. To improve the AI Agent’s performance, accuracy, conversational quality, and natural language understanding. To monitor call quality and system performance. To comply with applicable laws and legal obligations.

We may use anonymized, aggregated, and de-identified data that does not identify any individual person for product development and improvement, internal analytics and performance benchmarking, and marketing purposes such as publishing aggregate statistics about call volume or lead capture rates.

We use advertising-measurement events with Meta for attribution, campaign measurement, and advertising purposes subject to applicable settings and consent requirements. We do not send call recordings or call transcripts to Meta for advertising measurement.

4. How We Share Information

With Clients. Caller data, including lead data, call recordings, and transcripts, is shared with the Client whose provisioned phone number was called. This is the fundamental purpose of the Service.

With CRM Providers. When configured by the Client, lead data is pushed to the Client’s CRM via the CRM’s API. The data transmitted to the CRM is controlled by the integration configuration and includes structured lead fields such as caller name, contact information, property details, motivation, and timeline.

With Service Providers. We share data with the following categories of third-party providers who assist us in operating the Service:

LiveKit provides current voice-agent orchestration, telephony integration, and real-time audio infrastructure. LiveKit processes voice audio streams, call-routing data, and agent configuration.

Twilio and Vapi process call data only for one grandfathered legacy customer’s active telephony path while that path remains in service. They are not the general current AcreAgent telephony architecture.

OpenAI provides the large language model used by the AI Agent to generate conversational responses. OpenAI processes transcribed text from calls to generate appropriate responses.

Rime provides text-to-speech for live calls. Fish Audio separately provides voice-generation processing for personalized demos created from submitted samples. Provider-specific processing and retention are also governed by those providers’ terms and privacy practices; we do not promise a provider retention period that the provider has not contractually verified for us.

Deepgram provides speech-to-text transcription. Deepgram processes the Caller’s voice audio to generate text transcripts.

Stripe provides payment processing. Stripe processes and stores Client payment information in accordance with PCI-DSS standards.

Supabase provides database hosting and authentication services. Supabase stores Client account data, lead data, and configuration data.

Resend provides transactional email delivery. Resend processes Client email addresses and email content for notifications such as usage alerts, billing confirmations, and weekly reports.

Vercel provides application hosting. Vercel processes web traffic data including IP addresses and request metadata.

Meta provides the Meta Pixel and Conversions API used for advertising attribution and measurement. Meta may receive browser and server event information as described above. Event deduplication is used between the two paths.

Google/Gmail supports a limited read-only integration used to detect verified human replies and pause relevant automated nurture. The integration does not send Gmail messages or enable automatic Gmail AI replies.

For Legal Requirements. We may disclose information if we believe in good faith that disclosure is required by law, subpoena, court order, government request, or legal process. We may also disclose information if we believe it is necessary to protect the rights, property, or safety of the Company, our Clients, or the public.

In Connection with Business Transfers. In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or substantially all of the Company’s assets, Client and Caller data may be transferred as part of the transaction. We will notify affected Clients via email before their data is transferred and becomes subject to a different privacy policy.

With Consent. We may share information with your consent or at your direction.

We do not sell personal information to third parties for advertising, marketing, or any other purpose.

5. Data Retention

Client account data, including registration information, billing history, and service configuration, is retained for the duration of the active subscription plus 30 days after termination to allow for data export requests.

Signup Terms and Privacy acceptance evidence is retained as an immutable legal and transaction record for seven years after account deletion, unless a longer period is required by law.

Call recordings are retained for the duration of the active subscription. Upon cancellation or termination of the subscription, call recordings are retained for an additional 30 days and are then permanently deleted.

Lead data, including caller information, property details, and qualification data stored in the Dashboard, is retained for the duration of the active subscription plus 30 days after termination.

Anonymized and aggregated data that does not identify any individual may be retained indefinitely for analytics and product improvement purposes.

For a personalized voice demo, AcreAgent’s current workflow deletes the uploaded raw sample and the temporary generated voice model before fulfillment email is sent. The generated demo clip is retained in private storage only for its time-limited playback window. Separate provider-side processing remains subject to the provider’s own terms and practices.

You may request deletion of your data at any time by contacting support@equinoxvoice.com. Deletion requests will be processed within 30 days, subject to any legal obligations that require us to retain certain data. Please note that once data has been synchronized to your CRM, deletion of data within your CRM is your responsibility and is outside the Company’s control.

6. Data Security

We implement commercially reasonable administrative, technical, and physical security measures to protect the data we collect and store.

Data in transit is encrypted using TLS/SSL. Data at rest is encrypted using industry-standard encryption provided by our infrastructure providers.

We use Supabase Row Level Security (RLS) to enforce data isolation between Clients, ensuring that each Client can only access their own data through the Dashboard.

Access to production systems, databases, and infrastructure is restricted to authorized personnel and protected by multi-factor authentication.

We do not store full credit card numbers, CVVs, or other sensitive payment card data. All payment processing is handled by Stripe, which is PCI-DSS Level 1 certified.

Despite our efforts, no method of electronic transmission, storage, or processing is 100 percent secure. We cannot guarantee the absolute security of your data. In the event of a data breach that affects your personal information, we will notify you in accordance with applicable law.

7. Caller Privacy Rights

Callers are informed at the beginning of each call that the call may be recorded for quality assurance purposes.

Callers may request information about what data was collected during their call by contacting the Client whose number they called or by contacting the Company directly at support@equinoxvoice.com.

Callers may request deletion of their call data, including recordings, transcripts, and captured lead information, by contacting support@equinoxvoice.com. The Company will process the deletion request within 30 days and will coordinate with the relevant Client as necessary. Please note that once lead data has been synchronized to a Client’s CRM, deletion of CRM-side data is the Client’s responsibility.

If a Caller believes their data has been misused or mishandled, they may contact the Company at support@equinoxvoice.com to file a complaint.

8. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

The right to know what personal information we collect, use, disclose, and sell. The right to request deletion of your personal information, subject to certain exceptions. The right to opt out of the sale or sharing of your personal information. We do not sell personal information. Our use of Meta Pixel and Conversions API for cross-context advertising measurement may constitute “sharing” under California law. You may request an opt-out by contacting support@equinoxvoice.com. The right to correct inaccurate personal information. The right not to be discriminated against for exercising any of these rights.

To exercise any of these rights, contact us at support@equinoxvoice.com. We will verify your identity before processing any request. We will respond to verifiable consumer requests within 45 days as required by law.

9. Children’s Privacy

The Service is not directed at, marketed to, or intended for use by children under the age of 13, or under the age of 16 in jurisdictions where a higher age threshold applies.

We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected personal information from a child, we will take steps to delete that information as promptly as possible.

If you believe that a child has provided personal information to us, please contact us at support@equinoxvoice.com.

10. International Data

The Service is operated from the United States. If you access the Service from outside the United States, please be aware that your data may be transferred to, stored in, and processed in the United States, where data protection laws may differ from those in your jurisdiction.

By using the Service, you consent to the transfer of your data to the United States and the processing of your data in accordance with this Privacy Policy and applicable United States law.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, the Service, or applicable law.

When we make material changes to this Privacy Policy, we will notify Clients via the email address associated with their account and update the “Last Updated” date at the top of this page.

Your continued use of the Service after any changes to this Privacy Policy constitutes your acceptance of the revised policy. If you do not agree with the revised policy, you should stop using the Service and cancel your subscription.

12. Contact

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Equinox Property Investments
Email: support@equinoxvoice.com