Privacy Policy

DropHammer™ Technologies LLC (“DropHammer,” “we,” “us,” or “our”) operates the DropHammer mobile application. This Privacy Policy explains how we collect, use, and protect your information.

Information We Collect

How We Use Your Data

• Provide and improve DropHammer’s AI assistant features
• Process voice commands and deliver responses
• Track mileage, schedule jobs, and manage your business operations
• Connect with your existing tools (Jobber, QuickBooks, HouseCall Pro)
• Send notifications about appointments, invoices, and business activity
• Answer your phone calls when you can’t and summarize them for you

SMS Text Message Communications

DropHammer Technologies LLC and businesses using the DropHammer platform may send text messages to users and their clients. You will only receive text messages if you have provided your phone number and explicitly consented to receive them through one of the following methods: checking a consent checkbox on our website, client portal, or opt-in page; verbal consent recorded by your service provider; or texting a keyword to our messaging number.

Transactional / Informational Messages

With your consent, you may receive the following types of informational text messages:

• Appointment confirmations and reminders
• Job status updates (crew en route, work started, job completed)
• Estimate and quote notifications
• Invoice and payment notifications (including overdue reminders)
• Payment confirmations and balance updates
• Responses to your inquiries
• Account and service notifications

Promotional / Marketing Messages

With your separate, explicit consent, you may also receive the following types of marketing text messages:

• Review requests after completed work
• Promotions, special offers, and seasonal reminders
• Product launch announcements and founding member invitations

Consent to marketing messages is not a condition of purchasing any goods or services.

Message frequency: Message frequency varies based on your service activity and account settings. We will not send more than 10 marketing messages per month. Transactional messages are sent as needed based on your service activity.

Opt-out: You may opt out of text messages at any time by replying STOP to any message you receive from us (also accepts: UNSUBSCRIBE, CANCEL, END, QUIT, STOPALL). You may also update your preferences in the client portal profile page, or contact us directly. After opting out, you will receive a one-time confirmation message and no further text messages will be sent unless you re-subscribe.

Help: Reply HELP to any message for assistance, or contact support@drophammer.ai or call 877-318-5081.

Msg & data rates may apply. Your mobile carrier’s standard messaging and data rates apply to any text messages you send to or receive from us. DropHammer is not responsible for messaging or data charges imposed by your carrier.

We will not sell, rent, or share your phone number with third parties for their marketing purposes. Your phone number is used solely for the communication purposes described above and for account verification. For questions about our SMS practices, contact support@drophammer.ai.

Carriers are not liable for delayed or undelivered messages.

For full details about our SMS opt-in procedures, visit legal.drophammer.ai/sms-optin.

Data Sharing

• We do not sell your personal data to anyone
• We share data only with the third-party services you connect (Jobber, QuickBooks, HouseCall Pro) to provide the features you requested
• We use secure cloud infrastructure to process voice commands and AI responses
• We may share anonymized, aggregated usage data to improve our services
• We will disclose data if required by law or to protect the safety of our users

Data Storage & Security

• All data is encrypted in transit (TLS/HTTPS) and at rest (AES-256)
• Voice recordings are processed and not stored permanently unless you opt in to training data contributions
• Tenant data isolation: Your Customer Data is logically isolated from all other DropHammer customers. No customer can access, view, query, or receive data belonging to another customer. Each account operates in its own isolated data environment with row-level security enforcement at the database level.
• We use security practices appropriate for an early-stage service including access controls, audit logging, and regular security reviews
• DropHammer employees access Customer Data only when necessary for support or troubleshooting, and only with appropriate authorization
• During our beta period, the Service operates on dedicated self-hosted infrastructure. We do not yet hold SOC 2 or ISO 27001 certification. If security certifications are important to your business, please contact us before subscribing.

Your Rights

You have the right to:

• Access your data — request a copy of everything we store about you
• Delete your data — request permanent deletion of your account and all associated data
• Correct your data — update or fix inaccurate information
• Export your data — you may request export of your Customer Data by contacting support@drophammer.ai. We will fulfill export requests within 30 days. Export formats include CSV and JSON for structured data; audio files are exported in their original format. Data export includes your Customer Data but does not include trained model weights, proprietary scoring outputs, risk classifications, predictive analytics, or other outputs of DropHammer’s proprietary algorithms (which constitute DropHammer trade secrets), aggregated statistical data not linked to any individual, or DropHammer’s proprietary algorithms and methods. DropHammer’s analytical outputs derived from your data using proprietary methods are trade secrets of DropHammer and are not subject to data export or access requests.
• Opt out of optional data collection (e.g., training data contributions)

We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising. To exercise rights regarding sensitive personal information, contact privacy@drophammer.ai.

During our early access period, privacy rights requests (access, deletion, correction, export) are processed manually. Please allow up to 30 days. Contact privacy@drophammer.ai.

Sensitive Permissions

Microphone (RECORD_AUDIO)

Used for voice commands and voice notes. Audio is processed to understand your commands and is not shared with third parties. Wake word detection (“Hey DropHammer”) is processed on your device — no audio leaves your device until the wake word is detected.

Camera

Used to photograph job sites and scan receipts. Photos are stored in your account and not shared.

Location (GPS)

Used for mileage tracking between job sites and detecting when you arrive at or leave a job site. Location data is not shared with third parties. Detailed location data is retained for 90 days, after which it is aggregated into summary reports.

SMS (READ_SMS)

Used for the SMS Text Recall feature, which lets you search your past business texts by voice. Messages are read locally on your device and indexed for search. We do not send, modify, or delete your text messages.

Call Log (READ_CALL_LOG)

Used to detect missed calls and track client communication history. Call log data stays in your account.

Phone State (READ_PHONE_STATE)

Used to detect when phone calls start and end so the app can identify missed calls and trigger call recording upload for transcription.

Call Recording & AI Receptionist

DropHammer uses a three-tier consent framework for call recording that automatically adapts to the recording consent laws of the caller’s state:

The caller’s state is determined by phone number area code. If the state cannot be determined (VOIP, toll-free), the strictest tier (Tier 3) is applied. If your business is in a Tier 3 state, all calls are treated as Tier 3.

The standard disclosure states: “You are speaking with an AI assistant for [your business name]. This call is being recorded for quality assurance, business record-keeping, and to provide you with accurate service.” If you have enabled voice data sharing for training purposes, the disclosure adds: “This call may also be used to improve our voice recognition technology.”

Call recordings are stored securely, encrypted at rest (AES-256), and are accessible only to the account holder. Recordings are retained for a configurable period (default 90 days). The AI Receptionist is designed to collect information and route inquiries — it is not authorized to make binding commitments, price quotes, or warranty representations on behalf of your business.

For your obligations under call recording laws, see the Call Recording section of our Terms of Service.

Cookies & Tracking

The DropHammer website may use essential cookies required for site functionality. We do not use third-party advertising trackers or sell data collected through cookies. The DropHammer mobile app does not use cookies.

Training Data

If you opt in to our Training Data Program, anonymized interactions may be used to improve DropHammer’s AI. This is entirely optional. You can opt in or out at any time in the app’s Settings. All training data undergoes multi-layer PII (personally identifiable information) redaction before use.

Voice recordings may constitute biometric information under certain state laws. Raw audio is retained for a maximum of 30 days, then permanently deleted. Processed features are retained for a maximum of 3 years from your last interaction with the Service. Anonymized features incorporated into trained models cannot be individually extracted — this is disclosed before you opt in. See our Training Data Privacy Policy for full details.

Illinois Residents (BIPA)

Tier 2 voice recording collection is not available to Illinois residents or businesses with a principal place of business in Illinois. The Illinois Biometric Information Privacy Act (740 ILCS 14/1 et seq.) imposes requirements on the collection and use of biometric information that are incompatible with our Tier 2 training data program.

• Tier 2 is disabled for Illinois. If your account is registered to an Illinois address, the “Share Voice Recordings” toggle will not be available. The training data incentive program is also not available to Illinois residents.
• Tier 1 is unaffected. Tier 1 noise and environment data consists of numerical measurements only. These are not audio recordings and do not constitute biometric identifiers or biometric information under BIPA.
• No biometric identifiers extracted. DropHammer does not extract voiceprints, vocal pattern templates, or other biometric identifiers from voice commands or AI Receptionist calls, including calls involving Illinois residents.
• Retention and destruction. To the extent any data could be construed as biometric information, it is retained for no longer than 3 years from the individual’s last interaction with the Service or until the initial purpose has been satisfied, whichever comes first.

See our Biometric Data Retention & Destruction Policy for full details.

Children’s Privacy

DropHammer is a business application designed for professionals aged 18 and older. We do not knowingly collect data from anyone under 18.

State Privacy Rights

Applicability

Multiple U.S. states have enacted comprehensive privacy laws. If you are a resident of any of the following states, you may have additional privacy rights under your state’s law: Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, and Virginia, among others.

Common Rights Across State Privacy Laws

Regardless of your state, we generally honor the following rights:

• Right to access your personal information
• Right to correct inaccurate personal information
• Right to delete your personal information (subject to certain exceptions)
• Right to data portability (receiving your data in a portable format)
• Right to opt out of targeted advertising (we do not engage in targeted advertising)
• Right to opt out of profiling in furtherance of decisions that produce legal or similarly significant effects
• Right to non-discrimination for exercising your privacy rights

California Residents (CCPA/CPRA)

Categories of Personal Information Collected

In the preceding twelve (12) months, we have collected the following categories of personal information:

We do not sell your personal information. We have not sold personal information in the preceding twelve (12) months. We do not “share” your personal information for cross-context behavioral advertising as defined under the CCPA.

Sensitive Personal Information

Under the CCPA, certain categories of personal information are classified as “sensitive personal information.” DropHammer may collect the following categories of sensitive personal information:

• Precise geolocation: GPS coordinates collected when you enable location tracking features (used for job site tracking, mileage tracking, and geofencing).
• Contents of communications: Email content accessed through the Gmail monitoring feature (used for lead detection).
• Biometric information: Voice recordings that may constitute biometric information under certain state laws (used for speech-to-text transcription and, with your opt-in consent, for training data).

We use sensitive personal information only for the purposes described in this Privacy Policy, which are necessary to provide the Service. You have the right to limit our use of your sensitive personal information to purposes necessary to provide the Service. To exercise this right, contact privacy@drophammer.ai with the subject line “Limit SPI.”

Notice of Financial Incentive

DropHammer offers a Training Data Incentive Program in which Tier 2 voice recording contributors may receive one (1) free month of Tier 3 Intelligence features and a twenty-five percent (25%) ongoing discount on Tier 3 features for the duration of their participation.

• How to opt in: Enable the “Share Voice Recordings” toggle in Settings > Privacy. You will be presented with a clear disclosure of what data is collected and how it is used before opting in.
• How to opt out: Disable the “Share Voice Recordings” toggle at any time. You retain any free months already earned, but the ongoing discount stops when you opt out.
• Good-faith estimate of data value: We estimate the value of contributed voice data based on the commercial cost of acquiring equivalent licensed training data for domain-specific voice applications, where high-quality labeled audio corpora are scarce. The value of the financial incentive is reasonably related to the value of the data provided by participants.
• Non-discrimination: The incentive is not unjust, unreasonable, coercive, or usurious. All app features work identically regardless of your participation in the incentive program. You do not lose functionality, receive degraded service, or face any penalty for declining to participate.
• Proportionality: The value of the financial incentive is reasonably related to the value of the data provided, considering the cost of acquiring equivalent training data through commercial licensing.

Colorado AI Act Disclosures

This section provides disclosures required by the Colorado AI Act (SB 24-205). DropHammer deploys the following AI systems that may have consequential effects on consumers:

High-Risk AI Systems

• AI Receptionist: Conducts real-time voice conversations with callers on behalf of your business. The AI Receptionist identifies itself as an AI at the beginning of every call. It collects information, answers questions based on your business configuration, and routes inquiries. It does not make binding commitments or decisions about service eligibility.
• Collections Escalation Recommendations: Analyzes invoice aging data to recommend escalation stages (friendly, firm, final, lien warning) for overdue invoices. All escalation actions require your explicit approval before execution — the AI does not autonomously send collection communications or take collection actions.
• Lead Scoring and Prioritization: Assigns hot/warm/cold scores to CRM contacts based on interaction history and engagement signals. Scores are advisory only and do not automatically exclude leads from receiving service or trigger automated outreach.

Algorithmic Discrimination Risk Management

• Input data review: AI recommendations are based on objective business data (invoice dates, payment amounts, communication frequency) rather than protected characteristics such as race, gender, age, disability, or national origin.
• Human oversight: All consequential AI recommendations require explicit human approval before action. No customer or caller is automatically denied service, subjected to adverse action, or treated differently based solely on an AI recommendation.
• Monitoring: We monitor AI outputs for patterns that could indicate discriminatory impact and investigate anomalies.
• Impact assessments: We will conduct impact assessments for high-risk AI features before commercial deployment and when material changes are made to underlying models or data sources. During our early access period, we are establishing our impact assessment methodology.

Right to Human Review

You may request human review of any AI-generated recommendation that affects your business operations by contacting support@drophammer.ai. Callers who interact with the AI Receptionist may request to be transferred to a human representative or may contact the business through alternative channels listed on the business’s website or voicemail.

Illinois Residents — Biometric Information (BIPA)

See the dedicated Illinois Residents (BIPA) section above for complete BIPA disclosures.

State-Specific Rights

We comply with all applicable state privacy laws. If your state provides additional privacy protections beyond what is described here, those protections apply to you. Contact privacy@drophammer.ai for state-specific questions.

How to Exercise Your Rights

To exercise any state privacy rights, contact us at privacy@drophammer.ai. If we decline your request, you may appeal our decision by contacting us with the subject line “Privacy Rights Appeal.” We will respond to appeals within sixty (60) days.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via the app or email. Continued use of DropHammer after changes constitutes acceptance of the updated policy.

Contact Us

Patent-pending technology. DropHammer is a trademark of DropHammer Technologies LLC.