This Privacy Policy describes how Ghst Particle, LLC, a Montana limited liability company ("Claridad", "we", "us", "our"), collects, uses, and protects information when you use the Claridad platform ("Service"). The Service helps Spanish-speaking residential contractors in the United States generate professional English-language quotes and invoices and deliver them to homeowners by SMS, email, or shareable link. By using the Service, you agree to the practices described in this policy.
Two distinct populations interact with Claridad:
For homeowner data, Claridad acts as a data processor on the contractor's behalf. The contractor (operator) is the data controller for any communication with their customer. For contractor account data (business profile, payment handles, license info, billing), Claridad is the controller.
Contractor account information. Email address, business name, license number (if provided), business address, phone number, payment handles (Venmo username, Zelle email, PayPal.me link, Cash App $cashtag, or free-text method). We do not store full payment card or bank account details — Stripe processes contractor subscription billing; the contractor's card never touches Claridad infrastructure.
Voice recordings. When a contractor sends a Spanish-language voice note via WhatsApp, we receive that audio file from Meta's WhatsApp Cloud API and store it temporarily for transcription.
Transcripts. The text transcription of each contractor voice note, produced by our automatic speech recognition pipeline.
Generated artifacts. The English-language quotes and invoices produced from each transcript. These are stored as hosted pages, accessible only via signed URLs containing per-artifact secrets.
Homeowner contact information. Phone numbers and email addresses entered by the contractor for the purpose of delivery. We collect attestation metadata: a record that the contractor confirmed verbal consent before each send, including timestamp and (rounded) geolocation hash.
Bot conversation history. The back-and-forth WhatsApp messages between contractors and the Claridad bot, retained for support and debugging.
Technical data. IP addresses, request logs, error logs, webhook receipts (with cryptographic signatures), and usage metrics necessary to operate and secure the Service.
We use collected information to:
The Service runs on Cloudflare's edge platform, with data stored across the following Cloudflare services:
The following third-party sub-processors receive specific scoped data necessary to provide the Service:
All Claridad processing occurs in the United States.
Voice recordings: 30 days from receipt, then permanently deleted from R2.
Transcripts: 90 days from receipt, then permanently deleted.
Bot conversation history: 180 days from the last message in a conversation, then permanently deleted.
Generated quote/invoice artifacts: retained for the lifetime of the contractor's account. Each artifact is immutable after the first send (we capture a send-time snapshot to prevent post-send modification).
Attestation records and opt-out registry: retained for the lifetime of the contractor's account, plus up to 4 years after termination, to satisfy TCPA recordkeeping expectations.
Account data: retained for the duration of your account and for a reasonable period after termination to fulfill legal and operational obligations.
Upon account termination, contractors have a 30-day grace period to export their account data via the API. After the grace period, voice recordings, transcripts, and bot conversation history are permanently deleted on their original retention schedule. Artifacts and attestation records are retained as described above.
Where the General Data Protection Regulation applies, our legal bases for processing are:
If you are a contractor or homeowner located in a jurisdiction that grants data protection rights (such as the EEA, UK, or California), you may have the right to access, correct, delete, port, or restrict processing of your personal data. Because Claridad acts as a data processor for homeowner data, requests relating to homeowner data should be directed to the contractor (data controller) who manages the relevant interaction. For requests relating to contractor account data, contact us at hola@usaclaridad.com.
The Claridad website does not use cookies, third-party analytics, tracking pixels, or advertising technologies. Authentication for contractors uses signed session tokens; the public marketing landing and consent pages run no client-side telemetry.
We do not use voice notes, transcripts, message content, payment handles, or any other customer data to train machine learning models or AI systems. Sub-processor LLM and ASR calls are configured against training opt-out where the provider supports it. Voice and text data is processed solely to provide the Service.
We do not sell personal data. We do not share, rent, or transfer phone numbers (contractor or homeowner) to third parties or affiliates for marketing purposes. We share data only with the sub-processors listed in Section 4 as necessary to provide the Service. We may disclose data when required by law, legal process, or governmental request, or when necessary to protect the rights, property, or safety of Claridad, our users, or the public.
We implement industry-standard security measures, including TLS encryption for all transit, encrypted storage at rest, signed and timestamp-windowed webhook verification, signed and noindexed hosted artifact URLs, constant-time comparison on token surfaces, and access controls. Worker secrets are managed via Cloudflare's secret store and never logged. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
A Data Processing Agreement (DPA) is available on request for contractors who require one under GDPR or similar regulations. Contact hola@usaclaridad.com to request a DPA.
All Claridad data is processed in the United States. If you are located outside the United States, your data will be transferred to and processed in the United States. By using the Service, you consent to this transfer. For EEA/UK users, transfers are conducted under Standard Contractual Clauses where required.
The Service is not directed to individuals under 18 years of age. We do not knowingly collect personal information from children.
We may update this Privacy Policy as the Service evolves. Material changes take effect 30 days after notification to active contractor accounts. We will notify contractors via WhatsApp and email before changes take effect.
For privacy-related questions or requests, contact us at hola@usaclaridad.com.
Ghst Particle, LLC
Montana, United States