Privacy Policy

Our privacy policy and how we use your data

Last updated: 10/26/2025

1. Introduction

Langstroth ("we," "our," or "us") operates Ellis AI, an artificial intelligence-powered voice agent platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. Please read this Privacy Policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access the Service.

2. Information We Collect

We collect information you provide directly to us, such as when you create an account, use our Service, or contact us for support:

  • Account Information: Name, email address, phone number, billing address, and payment information
  • Profile Information: Company name, job title, and other professional information you choose to provide
  • Communication Data: Messages, support requests, and other communications you send to us
  • Voice Data: Voice recordings, transcripts, and call metadata from your use of our voice agent services
  • Lead Information: Contact details, qualification scores, and conversation data collected during voice calls

We also automatically collect certain information when you use our Service:

  • Usage Data: Information about how you use our Service, including features accessed and time spent
  • Device Information: IP address, browser type, operating system, and device identifiers
  • Log Data: Server logs, error reports, and performance metrics
  • Cookies and Tracking: We use cookies and similar technologies to enhance your experience and analyze usage

3. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our Service
  • Process transactions and send related information, including confirmations and invoices
  • Send technical notices, updates, security alerts, and support messages
  • Respond to your comments, questions, and provide customer service
  • Develop and provide personalized features and content
  • Monitor and analyze trends, usage, and activities in connection with our Service
  • Detect, investigate, and prevent fraudulent transactions and other illegal activities
  • Comply with legal obligations and enforce our Terms of Service

4. Voice Data and AI Processing

Ellis AI processes voice data to provide emotional intelligence analysis and lead qualification services:

  • Voice Recordings: We temporarily store voice recordings to process emotional analysis and generate transcripts
  • Emotional Analysis: We use AI to analyze emotional states, behavioral patterns, and conversation dynamics
  • Lead Scoring: We generate qualification scores based on conversation content and emotional indicators
  • Data Retention: Voice recordings are typically retained for 30 days unless you request longer retention

You can control voice data processing through your account settings and may request deletion of specific recordings at any time.

5. Information Sharing and Disclosure

We may share your information in the following circumstances:

  • Service Providers: With third-party vendors who perform services on our behalf, such as payment processing, cloud storage, and analytics
  • Business Transfers: In connection with any merger, sale of assets, or acquisition of all or part of our business
  • Legal Requirements: When required by law or to protect our rights, property, or safety
  • Consent: With your explicit consent for specific purposes
  • Aggregated Data: We may share anonymized, aggregated data that cannot identify you

We do not sell, rent, or trade your personal information to third parties for their commercial purposes.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information:

  • Encryption: Data is encrypted in transit and at rest using industry-standard protocols
  • Access Controls: Strict access controls and authentication mechanisms
  • Regular Audits: Security assessments and penetration testing
  • Employee Training: Regular security awareness training for all staff
  • Incident Response: Comprehensive incident response procedures

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.

7. Data Retention

We retain your information for as long as necessary to provide our Service and fulfill the purposes outlined in this Privacy Policy:

  • Account Data: Retained while your account is active and for a reasonable period thereafter
  • Voice Recordings: Typically retained for 30 days, with options for longer retention
  • Usage Data: Retained for up to 2 years for analytics and service improvement
  • Legal Requirements: Some data may be retained longer to comply with legal obligations

You may request deletion of your personal information at any time, subject to certain legal and operational requirements.

8. Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information:

  • Access: Request access to your personal information
  • Correction: Request correction of inaccurate or incomplete information
  • Deletion: Request deletion of your personal information
  • Portability: Request a copy of your data in a portable format
  • Restriction: Request restriction of processing in certain circumstances
  • Objection: Object to processing based on legitimate interests

To exercise these rights, please contact us using the information provided in the Contact section below.

9. Third-Party Services

Our Service integrates with third-party services that may collect information about you:

  • Twilio: For telephony services and call management
  • Hume AI: For emotional intelligence and voice processing
  • Payment Processors: Stripe and Lemon Squeezy for payment processing
  • Analytics Services: Google Analytics and other analytics providers
  • CRM Systems: Salesforce, HubSpot, and other CRM platforms you choose to integrate

These third-party services have their own privacy policies. We encourage you to review their privacy practices before using their services.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for international transfers, including standard contractual clauses and adequacy decisions. By using our Service, you consent to the transfer of your information to countries that may have different data protection laws than your country of residence.

11. Children's Privacy

Our Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us. If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We will also notify you via email or through our Service if the changes are material. Your continued use of the Service after any changes constitutes acceptance of the updated Privacy Policy.

13. Contact Information

If you have any questions about this Privacy Policy or our privacy practices, please contact us at:

  • Email: privacy@langstrothstrategic.com
  • Address: [Business Address]
  • Phone: [Business Phone]

For EU residents, you also have the right to lodge a complaint with your local data protection authority if you believe we have not complied with applicable data protection laws.