Your privacy matters.

Hello247 is operated by DREAMHOUSE TECHNOLOGIES LTD., British Columbia, Canada ("Hello247", "we", "us").

This policy covers two groups of people. We use these two words throughout:

• "Businesses": the businesses that subscribe to Hello247, and their team members.
• "Visitors": the patients, clients and customers of those businesses who use a business's website chat, booking form or message form, or who text with the business.

When a visitor contacts a business through Hello247, that business decides how the visitor's information is used. We store and handle it on the business's behalf, only to provide the Hello247 service to that business.

Visitors who want to see, correct or delete their information should contact the business directly. We'll help the business respond.

From businesses:

• Account info: name, email, password (hashed), profile photo and role.
• Business info: business name, logo, address, phone, website, services, opening hours and the information added to the knowledge base.
• Texting registration details: legal business name, address, Business Number or EIN, and an authorized contact person. Phone carriers require these to register a business's texting number.
• Payment info: billing contact and plan. Card details are collected and stored by Stripe, never by Hello247.
• Waiting list: if someone joins our "Launching soon" waiting list, we keep their email address only to tell them when Hello247 launches. They can ask us to remove it at any time.

From visitors:

• Name, phone number and email address.
• Messages, chat conversations, appointment requests, and texts (including photos) sent to or from the business.
• The visitor's choices, such as whether they agreed to follow-up messages or replied STOP.

From everyone:

• Technical data: IP address, browser, device type and basic logs needed to keep the service running and secure.

• To run each business's website chat, forms, lead list and text messaging.
• To write chat replies and suggested messages using AI (see "AI assistant" below).
• To send texts and emails to visitors on a business's behalf, as described in "Text messages" below.
• To send account emails to businesses (sign-up, password reset, alerts, billing).
• To process business subscription payments through Stripe.
• To investigate problems, prevent abuse and protect accounts.

We do not sell anyone's information. We do not use it for advertising. We do not use it to train AI models.

• Each business texts from its own dedicated phone number, registered with the phone carriers in that business's name.
• Replies about a visitor's request: when a visitor sends a form or message through a business's website, the visitor agrees that the business may text them about that request.
• Automatic follow-up texts: only sent to visitors who tick the follow-up box on the form. Ticking it is optional and is never required to contact the business.
• Message frequency varies. Message and data rates may apply.
• Visitors can reply STOP at any time to stop receiving texts, or HELP for help.
• Mobile phone numbers and text-message consent are never shared with or sold to third parties or affiliates for their own marketing or promotional purposes.

A business's website chat may be answered by an AI assistant on that business's behalf. The visitor's messages, and the business's own information, are sent to our AI service providers so they can write a reply. AI replies can sometimes be wrong, and they are not medical, legal or professional advice.

Hello247 is for contacting a business, not for medical records or confidential case details. Our forms remind visitors not to share medical, confidential or sensitive personal details there. Visitors should share those directly with the business through its usual secure channels.

We only share information with the service providers that Hello247 needs to work. Each one receives only what it needs for its role:

• Stripe: payments and subscription billing.
• Twilio: phone numbers, text messages and carrier registration.
• AI service providers (currently Anthropic): writing chat replies and suggested messages, and reading a business's website to build its knowledge base.
• Website-reading service: scanning the pages of a business's own website when the business asks.
• Cloud hosting and database provider: storing all Hello247 data.
• Email delivery provider: sending account emails and follow-up emails.
• Font provider: loading the fonts our pages use, which shares the viewer's IP address.

We may also share information if the law requires it.

Information may be stored and processed in the United States by Dreamhouse and its service providers, and may be subject to the laws of that country.

• Information is encrypted while being sent and while stored.
• Each business's data is kept separate, so one business can never see another's.
• Passwords are hashed, so we can't see them.
• Access to stored data is limited to authorized Dreamhouse staff.

We use a small number of strictly necessary cookies and similar storage to keep people signed in and remember settings. We don't run advertising or cross-site tracking.

• Businesses can access, correct or delete their account and data by contacting us.
• Visitors should contact the business first. Visitors can also email us, and we'll pass the request to the right business.

Canadian privacy laws (PIPEDA and BC's PIPA) give everyone these rights. We honour them for every business and visitor, wherever they live.

• We keep a business's data while its subscription is active.
• 30 days after a business's access to Hello247 ends, we permanently delete its Hello247 data, including its visitors' details, conversations and messages. We keep billing records, the record of its agreement to our terms, and phone numbers that asked not to be texted, so they are never texted again.
• Backups are deleted within 30 days.
• We keep a record of STOP requests for as long as needed to make sure texts to that visitor don't start again.
• Billing records may be kept longer where tax or accounting law requires it.

Businesses must be run by adults to sign up for Hello247. Hello247 isn't meant for children: visitors under 16 should ask a parent or guardian to contact the business for them.

If we make important changes, we'll email business account admins and update the "Last updated" date above. Continued use of Hello247 after a change means the updated policy applies.

Questions about privacy or personal information? Email support@hello247.ca and we'll respond within 5 business days.