Legal

Privacy Policy

Effective Date: April 25, 2026 · Last Updated: April 25, 2026
Blaze24 — Post Falls, Idaho · ashley@blaze24.ai

1. Overview

Blaze24 ("Blaze24," "I," or "Ashley") is a custom AI consulting company operated by Ashley Enyeart in Post Falls, Idaho. This Privacy Policy explains how Blaze24 collects, uses, stores, shares, and protects information about clients, prospective clients, and end users of systems built and managed by Blaze24.

By engaging Blaze24 — whether through the website, a consultation, a service agreement, or any system built and managed by Blaze24 on your behalf — you acknowledge and agree to the practices described in this policy.

2. Who This Policy Covers

This policy applies to two categories of people:

Clients: Business owners and organizations that hire Blaze24 to design, build, and manage AI systems. This includes anyone who submits a lead form, books a consultation, signs a service agreement, or pays for any Blaze24 service.
End Users: Third-party individuals — such as customers, patients, leads, or callers — whose information passes through systems that Blaze24 has built and manages on behalf of a client. Blaze24 acts as a data processor for end-user data; the client is the data controller.

3. Information Collected from Clients

When you interact with Blaze24 directly, the following information may be collected:

Identity and contact information: Name, business name, email address, phone number, and physical address.
Business information: Industry, business size, operational details, pain points, and revenue information provided during consultations or onboarding.
Voice samples: If you choose to have a voice clone created for your AI receptionist, audio recordings of your voice are collected solely to build a custom voice model for your system. See Section 7 for voice-specific disclosures.
Payment information: Billing details are processed through third-party payment processors. Blaze24 does not store full payment card numbers.
Communications: Emails, text messages, and meeting notes exchanged between you and Blaze24 in the course of the engagement.

4. Information Collected from End Users

When Blaze24 builds and manages AI systems on behalf of clients — such as AI phone receptionists, lead qualification agents, or automated follow-up systems — those systems may collect information from end users including:

Name and phone number (provided voluntarily during calls or interactions)
Call recordings and transcripts
Appointment details, addresses, and job information
Urgency level and service needs
Any other information an end user voluntarily provides during an AI-assisted interaction

      Blaze24 processes end-user data strictly on behalf of the client and under the client's direction. Clients are responsible for ensuring their own privacy disclosures to end users comply with applicable law, including TCPA, HIPAA (if applicable), and any state-specific consumer privacy requirements.
    

5. How Information Is Used

Client data is used to:

Deliver, configure, and manage the services described in the service agreement
Communicate about the engagement (project updates, invoices, support)
Improve Blaze24's service design and operational processes
Comply with legal obligations

End-user data is used to:

Operate AI systems on behalf of the client as directed
Log calls and interactions to client-specific databases (Airtable or equivalent)
Generate summaries and reports delivered to the client
Trigger automated workflows specified by the client (e.g., SMS alerts, booking confirmations)

Blaze24 does not sell, rent, or trade any client or end-user data to third parties for marketing purposes. Data is never used to train AI models beyond what is required for a client's specific system.

6. Third-Party Service Providers (Subprocessors)

Blaze24 builds systems using the following third-party platforms. Each subprocessor may have access to data as required to operate their service. Clients should review each provider's privacy policy for their own compliance evaluation.

Retell AI — AI voice agent platform. Hosts and runs the AI phone agents. Call audio, transcripts, and call metadata pass through Retell's infrastructure. Privacy: retellai.com/privacy

ElevenLabs — Voice synthesis and cloning. Voice samples provided by clients are uploaded to ElevenLabs to generate custom voice models. Models are associated with each client's account or Blaze24's managed account depending on the engagement. Privacy: elevenlabs.io/privacy

Twilio — Phone number provisioning and SMS. Call routing and text message delivery pass through Twilio's infrastructure. Privacy: twilio.com/legal/privacy

Airtable — Client CRM and call log database. Call records, lead information, and client business data are stored in Airtable bases managed by Blaze24. Privacy: airtable.com/privacy

n8n (Railway) — Automation platform. Webhook triggers, data routing, and workflow automation run through n8n hosted on Railway. Data passed through automation workflows may temporarily reside in these systems. Privacy: n8n.io/legal/privacy · railway.app/legal/privacy

Resend — Transactional email delivery. Automated emails triggered by Blaze24 systems (e.g., lead notifications) pass through Resend. Privacy: resend.com/privacy

Cal.com — Appointment scheduling. If Cal.com is used for booking, appointment details (name, email, phone, time) are stored in Cal.com's systems. Privacy: cal.com/privacy

Google Analytics 4 — Website analytics. The blaze24.ai website uses GA4 to collect anonymized usage data including page views, session duration, and interaction events. No PII is intentionally transmitted to Google Analytics. Privacy: policies.google.com/privacy

Cloudinary — Media hosting. Images and media assets used on the Blaze24 website are hosted via Cloudinary. Privacy: cloudinary.com/privacy

Blaze24 will update this list as new subprocessors are added. Clients who require advance notice of subprocessor changes may request this in writing.

7. Voice Cloning — Special Disclosure

Voice cloning is an optional feature available to clients who want their AI receptionist to speak in a voice that resembles their own or a designated employee's voice. The following applies when voice cloning is used:

Voice samples are collected with explicit written consent from the person whose voice is being cloned.
Voice models are built exclusively for the client's use within the Blaze24-managed system. The voice model is never licensed, shared, or made available to any other client or third party.
Voice samples and the resulting model are stored on ElevenLabs' infrastructure under the terms of Blaze24's service agreement with ElevenLabs.
Upon cancellation of services, Blaze24 will delete the voice model from ElevenLabs within 30 days. Clients may request earlier deletion.
Voice cloning of any individual without their explicit written consent is prohibited and constitutes grounds for immediate termination of services.

8. Call Recordings and Transcripts

AI phone systems built by Blaze24 record and transcribe calls as a core function of the service. The following practices apply:

Call recordings and transcripts are stored in the client's designated Airtable base and/or within Retell AI's platform for the duration of the engagement.
Clients are responsible for complying with applicable call recording consent laws in their state and for the states of their callers. Many states require one-party or two-party consent to record calls. Blaze24 can configure AI agents to announce recording disclosure at the start of calls upon request.
Call data is used only to provide the services specified — generating summaries, populating logs, triggering alerts, and producing reports for the client.
Upon cancellation, all call recordings and transcripts within Blaze24-managed databases are deleted within 30 days. Call data stored within Retell AI's own systems is subject to Retell's data retention policies.

9. Sensitive Categories — Healthcare and Real Estate

Clients in healthcare and real estate may handle categories of data with additional legal obligations:

Healthcare clients: Blaze24 may handle Protected Health Information (PHI) as defined under HIPAA if the system is used to interact with patients, schedule medical appointments, or process health-related information. Clients in this category must inform Blaze24 in writing before deployment. Blaze24 will execute a Business Associate Agreement (BAA) with healthcare clients as required under HIPAA. Systems involving PHI are architected to minimize data collection and avoid storing PHI in platforms that lack BAA coverage.

Real estate clients: Lead data collected through AI systems may include sensitive financial information. This data is stored in the client's designated CRM and is not used by Blaze24 for any purpose beyond operating the agreed system.

      If your business operates in a regulated industry, notify Blaze24 during onboarding. Compliance architecture depends on knowing your industry's requirements before systems are built.
    

10. Data Retention

Blaze24 retains data for as long as necessary to provide services and meet legal obligations:

Active client data: Retained for the duration of the engagement plus 12 months, to allow for dispute resolution and audit purposes.
Call recordings and transcripts: Retained within client-specific databases for the duration of the engagement. Deleted within 30 days of cancellation.
Voice models: Deleted within 30 days of cancellation per Section 7.
AI agent configurations: Deleted within 30 days of cancellation (Retell agents, LLM configurations, phone number provisioning).
Billing and financial records: Retained for 7 years as required under Idaho law for tax and accounting purposes.
Website analytics (GA4): Governed by Google's retention settings, typically 14 months for event data.

11. Data Security

Blaze24 implements reasonable technical and organizational measures to protect client and end-user data, including:

API keys and credentials stored in encrypted environment variables — never in source code
Access to client systems limited to Blaze24 and any explicitly authorized personnel
Third-party platforms selected based on their own security certifications and compliance programs
No client data shared with any party not listed in this policy without explicit written consent

No system is perfectly secure. Blaze24 will notify affected clients in writing within 72 hours of discovering any unauthorized access to client or end-user data.

12. Data Deletion on Cancellation

When a client cancels services, Blaze24 will permanently delete the following within 30 days of the cancellation effective date:

All AI agent configurations and LLM prompts built for the client
Call recordings and transcripts within Blaze24-managed databases
Voice models and source voice recordings
Client business data stored in Airtable or equivalent CRM systems managed by Blaze24
Any automation workflows and webhook configurations

Data retained for legal and financial recordkeeping (invoices, contracts, communications) is governed by the retention periods in Section 10 and is not subject to deletion requests for those categories.

Clients may request a written confirmation of deletion upon completion.

13. Your Rights

Regardless of your state of residence, Blaze24 will honor the following data rights upon written request:

Access: Request a copy of the personal data Blaze24 holds about you or your business.
Correction: Request correction of inaccurate information.
Deletion: Request deletion of your data, subject to the retention requirements in Section 10.
Portability: Request an export of your data in a common format (CSV or equivalent).
Objection: Object to specific uses of your data and request a review.

To exercise any of these rights, contact ashley@blaze24.ai or text (208) 551-5525. Blaze24 will respond within 30 days.

14. Cookies and Website Tracking

The blaze24.ai website uses Google Analytics 4 for anonymized traffic analysis. GA4 uses cookies to track sessions and page interactions. No personally identifiable information is intentionally transmitted through GA4.

The website does not use advertising cookies, retargeting pixels, or any third-party tracking technology beyond GA4. You may disable cookies in your browser settings without affecting core website functionality.

15. Children's Privacy

Blaze24's services are not directed at individuals under the age of 18. Blaze24 does not knowingly collect data from minors. If you believe Blaze24 has received data from a minor, contact ashley@blaze24.ai immediately and the data will be deleted.

16. Changes to This Policy

Blaze24 may update this Privacy Policy from time to time. When material changes are made, active clients will be notified by email at least 14 days before the changes take effect. The current version of this policy will always be available at blaze24.ai/privacy.html. Continued use of services after the effective date constitutes acceptance of the updated policy.

17. Contact

For any questions, requests, or concerns related to this Privacy Policy, contact:

      Ashley Enyeart — Blaze24

      Post Falls, Idaho

      Email: ashley@blaze24.ai

      Text: (208) 551-5525

      Blaze24 will respond to all privacy-related inquiries within 30 days.