Privacy Policy

Small Desk AI is a product of Fourva Tech. This policy explains what we collect, how we use it, and the choices you have as a business owner or as a customer texting a business through the Service.

Effective date
July 14, 2026
Last updated
July 14, 2026

1. Introduction

Fourva Tech ("Company," "we," "us," or "our") operates Small Desk AI (the "Service"), an AI-powered communication and scheduling platform that helps small businesses manage customer messages, bookings, and follow-ups across SMS, WhatsApp, website chat, email, and voice. This Privacy Policy explains what information we collect, how we use it, how we protect it, and the choices available to you.

This Policy applies to two groups of people: (1) business owners and staff who use Small Desk AI to manage their operations ("Business Users"), and (2) customers of those businesses who communicate with a business through the Service ("End Customers"). Where the two groups have different rights or obligations, this Policy says so directly.

By using the Service, you agree to the terms of this Privacy Policy. If you do not agree, please do not use the Service.

2. Information We Collect

2.1 Information from Business Users

  • Business name, address, industry, and description
  • Contact information (name, email, phone number)
  • Account credentials (email and password, or authentication via a third-party provider)
  • Staff information entered into the platform (names, roles, working hours, availability)
  • Service and pricing information entered for booking and scheduling purposes
  • Payment and billing information, processed through our third-party payment provider (we do not store full payment card numbers)

2.2 Information from End Customers

  • Phone number (for SMS and WhatsApp communication)
  • Name, as provided during a conversation or booking
  • Message content sent to or received from a business using the Service
  • Appointment and booking details (service requested, date, time, staff member)
  • Consent status for SMS communications (opted in or opted out) and the timestamp of that choice

2.3 Information Collected Automatically

  • Device and browser information (type, operating system, IP address)
  • Usage data (pages visited, features used, session duration)
  • Log data generated by our servers and third-party service providers (e.g., Twilio, Supabase)

3. How We Use Information

We use the information described above to:

  • Operate and provide the Service, including receiving and responding to customer messages through AI-assisted automation
  • Schedule, confirm, reschedule, and remind customers of appointments
  • Verify and enforce SMS consent before sending any text message communication
  • Maintain and improve the accuracy and performance of our AI response system
  • Provide customer support to Business Users
  • Send administrative communications related to the Service (billing, account notices, updates to this Policy)
  • Monitor, secure, and troubleshoot the Service, and detect fraudulent or abusive activity
  • Comply with legal obligations, including recordkeeping required under applicable telecommunications and consumer protection laws

We do not sell End Customer phone numbers, message content, or personal information to third parties. We do not use End Customer data to send marketing messages on behalf of anyone other than the specific business the End Customer is communicating with.

5. How We Share Information

We share information only in the following circumstances:

  • With the Business User you’re communicating with — a business using the Service can see the messages, booking details, and consent status of its own customers
  • With service providers who help us operate the Service, including Twilio (SMS/voice delivery), Supabase (database hosting), and Anthropic (AI response generation). These providers are contractually bound to use data only to provide services to us, not for their own purposes
  • For legal reasons — if required by law, subpoena, or legal process, or to protect the rights, property, or safety of Fourva Tech, our users, or the public
  • In a business transfer — if Fourva Tech is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction, subject to this Policy

We do not share SMS opt-in consent or phone numbers with third parties for their own marketing purposes.

6. Data Retention

We retain personal information for as long as necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. Message content and consent records are retained for 24 months from the date of the last customer interaction to meet telecommunications recordkeeping requirements. Business Users may request deletion of their account and associated data, subject to any records we are legally required to retain.

7. Data Security

We use commercially reasonable administrative, technical, and physical safeguards to protect information from unauthorized access, disclosure, alteration, or destruction. This includes encrypted data storage, access controls limiting who can view customer data, and secure connections (HTTPS/TLS) for all data transmission. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. Your Rights and Choices

  • Opt out of SMS at any time by replying STOP
  • Request access to the personal information we hold about you by contacting us at the email below
  • Request correction or deletion of your personal information, subject to legal recordkeeping requirements
  • Residents of certain states (e.g., California, Virginia, Colorado) may have additional rights under applicable state privacy laws, including the right to know, delete, and opt out of the sale of personal information. We do not sell personal information as defined under these laws.

To exercise any of these rights, contact us using the information in Section 11.

9. Children’s Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected personal information from a child without parental consent, we will delete that information promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify Business Users by email or through the Service, and update the "Last Updated" date at the top of this Policy. Continued use of the Service after changes take effect constitutes acceptance of the updated Policy.

11. Contact Us

If you have questions about this Privacy Policy or how your information is handled, contact us at:

  • Fourva Tech
  • Email: admin@fourvatech.com
  • Website: fourvatech.com

This Privacy Policy is a working draft provided for transparency and is not a substitute for legal advice.