This Privacy Policy explains how Chleb Holdings LLC (DBA Chleb AI) and its affiliate CHLEB AI LLC (together, "CHLEB," "we," "us," or "our") collects, uses, stores, discloses, and protects information obtained through our websites, lead forms, scheduling tools, consultations, payment processes, communications, and AI-powered services (collectively, the "Services").
Scope & applicability
This policy applies to visitors to our websites, business leads and prospects, clients and authorized representatives, and communications conducted via phone, email, SMS, video conferencing, or AI systems. Our Services are primarily B2B; however, personal information may still be collected in connection with business contacts.
It does not cover the client portal at app.chlebholdings.com, the external payment pages, or the systems we configure inside a client's own account. Where we run an AI receptionist for a client, that client is responsible for the information their callers give, and we handle it on their instructions.
Information we collect
What the website forms send. The contact form sends your name, business name, email address, phone number if you give one, your message, and how you heard about us if you choose to answer. We use that optional answer to understand how people find Chleb. The revenue calculator sends your email address and the figures you entered. Both also send the page you submitted from and available entry, referral and campaign information. If you enable Inquiry source in Cookie settings, a note in this tab can preserve that context across page loads for up to 30 minutes. Otherwise forms use the context available on their current document; missing information stays unknown. The note is not sent while you browse, and your form answers are not stored in it. Our intake records your browser's user agent string and a one-way hash of your IP address. The raw IP address is not stored.
Calls, meetings and consultations. Notes and business information shared verbally, operational workflows, automation logic, and your preferences for websites, calendars and AI systems. Recordings of a call or meeting are made only where the law allows and with consent.
Calls handled by an AI receptionist. Call recordings and transcripts exist only where the client whose phone line it is has that feature turned on in their own account. Those records belong to that client. If you called a business that uses Chleb, ask that business about its own recording practice.
The voice demo on this site. Pressing the demo opens a voice session and asks your browser for microphone access. While it runs, the page address, page title and referring address are sent along with identifiers generated for that one call. Those identifiers are not stored in your browser and are not reused.
Payment information. Payments are processed through Stripe. Card details are entered on Stripe's own pages. We do not receive or store card numbers. We may receive billing contact information, invoice and payment status, and transaction confirmations.
Communication data. Email correspondence, SMS message content and consent logs, call metadata, and support inquiries.
What we do not collect. This website runs no analytics vendor or pageview collector. Apart from the entry context described above, we do not keep a history of pages you read, how long you stayed, or where you are. We do not build advertising profiles and we do not track you across other websites. Outside a form submission or the voice demo, the site sends us nothing about your visit.
How we use information
We use collected information to provide and maintain Services, design and manage websites, automations and AI systems, communicate regarding scheduling and support, process payments and billing, improve performance and security, detect fraud, and comply with legal obligations.
AI services & automation
Information may be used to configure AI receptionists and workflows, customize automations for messaging and scheduling, and generate internal service profiles. AI systems are used only within the scope of contracted services and are not used to create consumer advertising profiles or sold datasets.
SMS, phone & email communications
By providing your contact information, you consent to receive service-related communications. For SMS: message frequency may vary, message and data rates may apply, reply STOP to opt out, reply HELP for assistance. Consent is not a condition of purchase.
Service providers
These are the companies that process information on our behalf. Each is used for the purpose named and nothing else.
- Supabase. The managed database and the intake function that receives our website forms. Lead records are stored here.
- HighLevel (LeadConnector). Our CRM. Contacts, opportunities, the website chat widget, the booking calendar, and the AI receptionist and SMS features run here.
- Stripe. Payments and checkout.
- Retell AI. The voice provider behind the demo on this site, with LiveKit carrying the audio.
- FormSubmit. Emails us a copy of each form you send, so the team sees it, and delivers the form on its own when our intake cannot be reached, so an inquiry is not lost.
- jsDelivr. Serves the media library the voice demo needs, and only when you press it.
- Google Workspace. Our business email and calendars.
- Google Preferred Sources. The footer control loads Google's publisher script when a page opens, separately from the optional chat/calendar and Inquiry source choices. Google receives web-request information for that load and handles the preference if you use its control. Our code does not pass the inquiry-source note to it.
Our website hosting provider also processes ordinary server request records in the course of serving the site.
Sharing & disclosure
We do not sell personal information. Beyond the providers listed above, we may share information with legal and compliance advisors, and with government authorities when required by law. Mobile information will not be shared with third parties for marketing or promotional purposes.
Data security
We employ reasonable administrative, technical, and physical safeguards. Information reaches us over encrypted connections, the tables holding website leads cannot be read or written from a browser, and your IP address is hashed before it is stored. No system is entirely secure, and we cannot guarantee absolute security. Our security page sets out what protects this information, and what we do not claim.
Cookies & tracking
This site sets no cookies of its own. It keeps two small items in your browser: your answer to the cookie banner, and a note that you closed the booking prompt. If you enable Inquiry source, an additional note keeps entry context in this tab for up to 30 minutes. Browsing does not extend that limit. It is removed when the site next checks after expiry, when you turn the option off, or when the tab session ends. An unchanged retry retains the context of its original inquiry. The chat widget and the booking calendar are run by HighLevel and set their own cookies and storage, and neither loads until you allow it. We use no analytics or advertising cookies of any kind. The Cookie Policy names every item, who sets it, what it does and how long it lasts, and carries a control that reopens the banner so you can change your answer.
Data retention
Pending We have not yet published a retention schedule for website lead records, and we are not going to print a number we have not confirmed. Today those records are kept while an inquiry is open and afterwards for as long as we may need them for tax, accounting, and legal-defense purposes. Client records, contracts, and billing records are kept for the duration of the engagement and afterwards for the periods tax and accounting law requires of us. Call and meeting recordings are kept for as long as the client whose account holds them keeps them.
You can ask us to delete your record at any time, and that request does not wait on a published schedule. See below.
Legal bases & international transfers
Our Services are offered to businesses in the United States, and our providers are United States companies. Where the GDPR or UK GDPR applies to a particular contact, we process personal information on the basis of contract performance, our legitimate interests in operating and securing our business, your consent for marketing communications and for the third-party tools on this site, and compliance with legal obligations. Information reaching those providers is transferred to the United States, and the transfer terms are the ones in each provider's own data processing agreement. We have not appointed an EU or UK representative and we have not appointed a data protection officer. You may withdraw consent at any time and lodge a complaint with your local supervisory authority.
Children's privacy
Our Services are intended for businesses and are not directed to individuals under 18. We do not knowingly collect personal information from children. If we learn that we have collected such information, we will delete it promptly.
How to reach us about your data
Email chleb@chleb.ai with the subject line "Privacy Request", or call (813) 694-8671 and say it is about your data. A person reads every one.
Exercising your rights
To access, correct, delete, or obtain a copy of your personal information, or to appeal a denied request, use the contact above. We will verify your identity using information already associated with your record and respond within 45 days, extendable once where permitted by law. Authorized agents may submit requests with written proof of authorization. We will not discriminate against you for exercising these rights.
Automated decision-making
We do not use AI systems to make legal or similarly significant decisions about individuals without human involvement. AI outputs used in our Services support human review rather than replace it.
Changes to this policy
We may update this policy from time to time. Material changes will be reflected in the "Updated" date above and, where required by law, communicated directly. Continued use of the Services after an update constitutes acceptance of the revised policy.
State privacy rights
We respect applicable rights under the New Jersey Data Privacy Act (NJDPA) and the California Consumer Privacy Act (CCPA/CPRA), including rights to know, access, delete, and correct personal information. We do not sell or share personal information as defined by California law. If your browser sends a Global Privacy Control signal, this site treats it as a refusal of the optional third-party tools and loads none of them. Where applicable, similar rights under other state statutes apply.
Contact
Chleb Holdings LLC (DBA Chleb AI) · Tampa, Florida, United States
CHLEB AI LLC · Montville, New Jersey, United States
Chleb Holdings LLC and CHLEB AI LLC are affiliated entities operating under the "Chleb AI" brand. The entity named in your signed Service Agreement or invoice is the contracting party for that engagement.
Email: chleb@chleb.ai · Phone: (813) 694-8671