Privacy Policy

Effective date: April 29, 2026

This Privacy Policy is provided for general information. It is not legal advice. You should consult a qualified lawyer before relying on it for your business.

This Privacy Policy explains how Hoshi Brands ("VroomCalls", "we", "us", or "our") collects, uses, shares, and protects personal information when you visit our website, create an account, subscribe to our services, or interact with our AI voice receptionist platform (collectively, the "Service").

By using the Service, you acknowledge this Privacy Policy. Where we process personal information on behalf of a Shop, we do so as described below and in accordance with our Terms of Service.

1. Who We Are and Our Roles

Hoshi Brands operates VroomCalls and serves auto glass and windshield repair shops, primarily in the United States, and the callers who contact those shops through the Service.

Depending on the context, we act in different roles under applicable data protection law:

  • Controller for personal information relating to Shop accounts, website visitors, billing contacts, marketing communications, and our own business operations.
  • Processor (service provider acting on the Shop's instructions) for Caller Data collected, recorded, transcribed, or processed through the Service on a Shop's behalf, such as call recordings, transcripts, summaries, and caller phone numbers.

When you are a Caller, the relevant Shop is generally the controller of your personal information. You should contact that Shop directly to exercise privacy rights relating to a specific call or lead. We will assist Shops as required by applicable law and our agreements with them.

2. Information We Collect

We may collect the following categories of personal information:

2.1 Shop account and contact information

  • Business or company name
  • Contact name
  • Email address
  • Phone number
  • State or region
  • Account credentials and login activity (including magic-link authentication events)

2.2 Service configuration information

  • AI receptionist settings, including voice selection, welcome messages, prompts, and data-collection rules
  • Business-hour and routing preferences
  • Human escalation phone numbers and related call-flow settings
  • Dashboard activity related to configuration changes

2.3 Call and lead information

  • Call recordings, transcripts, summaries, and conversation metadata
  • Caller phone numbers and captured lead details (for example, vehicle information, insurance details, glass type, location, and callback notes)
  • Call timestamps, duration, routing outcomes, and operational logs
  • Lead delivery records (for example, SMS or email notifications sent to the Shop)

2.4 Billing and subscription information

  • Subscription plan, billing status, and usage metrics such as included minutes and minutes used
  • Payment-related metadata processed by our payment provider (we do not generally store full payment card numbers on our servers)
  • Invoices, receipts, and billing correspondence

2.5 Technical and usage information

  • IP address, browser type, device information, and operating system
  • Pages viewed, referral URLs, and interaction events on our website
  • Cookies, pixels, and similar technologies
  • Anti-abuse and security signals (for example, reCAPTCHA or fraud-prevention data)
  • Support communications and error logs

3. How We Use Information

We use personal information to:

  • Provide, operate, maintain, and improve the Service
  • Configure, provision, and support AI receptionists, telephony routing, and lead delivery for Shops
  • Record, transcribe, summarize, and display calls and leads in customer dashboards
  • Process subscriptions, payments, usage tracking, and account administration
  • Authenticate users and secure Accounts
  • Communicate with you about the Service, including support, billing, and important updates
  • Monitor performance, troubleshoot issues, and prevent fraud or abuse
  • Comply with legal obligations and enforce our Terms of Service
  • Analyze usage trends and improve our website and product experience, where permitted by law

4. Legal Bases for Processing (GDPR)

Where the General Data Protection Regulation (GDPR) or similar laws apply, we rely on one or more of the following legal bases:

  • Performance of a contract: to provide the Service, process subscriptions, and fulfill our agreement with Shops.
  • Legitimate interests: to secure and improve the Service, prevent abuse, understand product usage, and communicate about the Service, balanced against your rights and interests.
  • Consent: where required for certain cookies, marketing communications, or other processing for which consent is the appropriate basis. You may withdraw consent at any time where applicable.
  • Legal obligation: to comply with applicable laws, regulations, court orders, or regulatory requests.

For Caller Data processed on a Shop's behalf, the Shop is generally responsible for determining the appropriate legal basis and for providing any required notices and obtaining any required consents from Callers.

5. Cookies and Tracking Technologies

We and our service providers use cookies, pixels, local storage, and similar technologies on our website and Service for purposes such as:

  • Essential functionality: maintaining sessions, security, and core site features
  • Analytics: understanding how visitors and customers use our website and product
  • Advertising and measurement: measuring marketing performance and campaign effectiveness
  • Anti-abuse: detecting bots, spam, and fraudulent activity

You can control cookies through your browser settings. Disabling certain cookies may affect site functionality. Where required by law, we will request consent before placing non-essential cookies or similar technologies.

6. How We Share Information

We do not sell personal information. We may share personal information with:

  • Service providers and subprocessors that help us operate the Service, including providers of payment processing, telephony and call routing, AI voice and transcription, email and SMS delivery, cloud hosting, customer support tools, analytics, advertising measurement, and anti-abuse protection.
  • Shops and authorized users where Caller Data or lead information is delivered to the relevant Shop through dashboards, SMS, email, or other configured channels.
  • Professional advisers such as lawyers, accountants, or insurers, where necessary and subject to confidentiality obligations.
  • Legal and regulatory recipients when required by law, legal process, or to protect the rights, safety, and security of VroomCalls, our customers, Callers, or others.
  • Business transferees in connection with a merger, acquisition, financing, reorganization, or sale of assets, subject to appropriate safeguards.

Service providers are authorized to use personal information only as necessary to provide services to us and in accordance with contractual data-protection obligations.

7. International Data Transfers

The Service is used by Shops and Callers in the United States and potentially other countries. This means personal information may be processed in the United States and other locations where we and our service providers operate.

Where personal information is transferred from the European Economic Area, the United Kingdom, or other jurisdictions with data-transfer restrictions to countries that have not been recognized as providing an adequate level of protection, we implement appropriate safeguards such as Standard Contractual Clauses or other mechanisms recognized under applicable law.

8. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to:

  • Provide the Service and maintain your Account
  • Meet legal, tax, accounting, and regulatory requirements
  • Resolve disputes and enforce our agreements
  • Maintain business records and security logs

Retention periods may vary depending on the type of information and the context in which it was collected. For example, call recordings, transcripts, and lead records may be retained for the duration of a Shop's subscription and for a reasonable period afterward unless deletion is requested earlier and permitted by law. We may retain anonymized or aggregated information that no longer identifies individuals.

9. Data Security

We implement reasonable technical and organizational measures designed to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure. These measures may include access controls, encryption in transit where appropriate, monitoring, and internal policies limiting access to personal information on a need-to-know basis.

No method of transmission or storage is completely secure. We cannot guarantee absolute security of personal information. You are responsible for maintaining the security of your email account and any devices used to access the Service.

10. Your Rights

Depending on your location and the role in which we process your information, you may have rights under applicable data protection law, including the GDPR. These may include the right to:

  • Request access to personal information we hold about you
  • Request correction of inaccurate or incomplete information
  • Request deletion of personal information, subject to legal exceptions
  • Request restriction of processing in certain circumstances
  • Request portability of information you provided to us in a structured, commonly used format
  • Object to processing based on legitimate interests, including direct marketing where applicable
  • Withdraw consent where processing is based on consent

To exercise these rights, contact us at support@vroomcalls.com. We may need to verify your identity before responding. We will respond within the timeframes required by applicable law.

If you are located in the European Economic Area or United Kingdom, you also have the right to lodge a complaint with your local supervisory authority.

11. Caller Privacy

If you are a Caller whose information was collected during a call handled for a Shop, that Shop is generally the controller of your personal information. Please contact the Shop directly to ask about how your information is used, to request access or deletion, or to raise concerns about a specific call.

If you contact us directly, we will take reasonable steps to forward your request to the relevant Shop or respond as permitted by law and our role as processor.

12. Marketing Communications

We may send service-related communications that are necessary for your Account or subscription. Where permitted by law, we may also send product updates or marketing messages. You can opt out of non-essential marketing emails by using the unsubscribe link in those messages or by contacting us.

13. Children's Privacy

The Service is intended for business use and is not directed to children under 16 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided personal information to us, contact us and we will take appropriate steps to delete it.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will revise the effective date above and, where appropriate, provide additional notice. Your continued use of the Service after changes become effective constitutes acceptance of the updated Privacy Policy.

15. Contact

For privacy-related questions or requests, contact us at support@vroomcalls.com.

Hoshi Brands