This policy explains how Logistical Innovations, Corporation (dba AI Exelion / Exelo), based in San Diego, California, handles personal information on exelo.ai and the Exelo partner platform (the "Service"). It covers three groups of people:
Partners — people with Exelo accounts;
Callers — people who call phone lines answered by AI receptionists that Partners deploy through the Service; and
Report visitors — people who open a business report shared by a Partner and choose to leave their contact details.
2. Information we collect
From Partners:
Account details: email address, name, and profile information you provide (such as an alert phone number).
Business data you add: businesses, saved leads, notes, and configuration (greetings, transfer numbers).
Connected infrastructure credentials: API keys and account identifiers for the third-party voice and telephony accounts you connect. These are encrypted at rest (AES-256-GCM) and used only to operate your AI lines.
Billing: subscriptions are processed by Stripe. We receive your plan and payment status; we never see or store your full card number.
Usage and log data: basic technical logs needed to run and secure the Service.
From Callers (on Partners' behalf):
When an AI line answers a call, the Service processes and stores: the caller's phone number, call recordings, transcripts, names and callback numbers callers provide, and AI-generated summaries and urgency assessments of the call.
From XRAY scans: publicly available information about businesses (websites, public listings and reviews) used to generate automated reports.
From Report visitors: if you open a business report a Partner shared with you and choose to unlock the full breakdown, we collect the name and phone number you enter and deliver them to the Partner who shared that report, as their sales lead. That is the only collection on report pages — no account is created, and report pages carry no advertising trackers.
3. Callers' information — the honest specifics
Call data exists so the business a caller reached can serve them: it appears in the owning Partner's portal and powers urgent alerts. The Partner who deployed the line is responsible for any recording notices or consents the law requires on their calls. If you called a business whose line is powered by Exelo and want your information deleted, contact that business — or email us at support@exelo.ai and we will handle it (Section 7).
4. How we use information
To run the Service: provision and manage AI lines, store and display calls and transcripts, generate summaries and urgency flags with AI processing, and send urgent-call alerts (email, and an automated phone call if the Partner enables it).
To bill subscriptions, provide support, secure the Service, and fix problems.
To send service communications (like login links and account notices).
We do not sell personal information, and we don't use it for third-party advertising.
5. How information is shared
Only as needed to run the Service:
Service providers working for us: cloud hosting and database, email delivery, payment processing (Stripe), and AI providers that generate transcripts, summaries, and scan analysis on our behalf.
Your own connected providers: your AI lines run on voice and telephony accounts you own; call traffic necessarily flows through those providers under your direct agreements with them.
Within your account: call data is visible to the Partner account that owns the business.
Report visitors: The contact details you provide are shared with the Partner who created the report so they can follow up regarding their services. Exelo stores this information as part of providing the platform.
Legal reasons: if required by law, or to protect rights, safety, or the integrity of the Service.
No selling, no data brokers, no ad networks.
6. Retention
Account and business data: kept while your account is active, and deleted when you delete your account — except for the limited financial and audit records described below.
Call content — recordings, transcripts, summaries, caller names and numbers — is automatically removed 90 days after the call. What remains is non-identifying: call counts, durations, timestamps, and outcomes, so Partners' statistics stay accurate.
Partners can delete call data earlier at any time, and deletion on request is honored promptly (Section 7).
Report-visitor contact details: kept as the receiving Partner's lead until that Partner deletes it or the visitor requests deletion (Section 7).
The Partner's own connected voice provider may retain its copies under that provider's agreement (Section 5).
Encrypted infrastructure credentials are deleted immediately when you disconnect your accounts.
Financial and audit records: a limited set survives account deletion, because we're required to keep records of money we received and money we returned. These are payment and usage records — amounts, dates, and payment references — together with append-only logs of the deletion itself, email delivery, and alerts. Business names and call identifiers are stripped from the payment records at deletion. None of them contain recordings, transcripts, or report content. The full list is shown to you before you confirm a deletion.
7. Your rights and choices
Email support@exelo.ai to access, correct, export, or delete personal information — whether you're a Partner, a Caller, or a Report visitor. We verify requests and respond within the timelines required by applicable law (for California residents, generally within 45 days). California residents have the rights to know, delete, correct, and to non-discrimination for exercising those rights. We don't sell or share personal information as those terms are defined in California law, so there is nothing to opt out of.
8. Security
Credentials encrypted at rest, transport encryption (TLS), row-level access controls so accounts can only reach their own data, and least-privilege service access. No system is perfectly secure, but security decisions in this product are made conservatively and documented.
9. Cookies
We use only what's needed to sign you in and keep your session working. No advertising trackers.
10. Children
The Service is for business use by adults 18+. We don't knowingly collect information from children.
11. International users
We operate from the United States and process data in the United States. If you use the Service from elsewhere, you understand your information is processed in the U.S.
12. Changes
We'll post updates here and give notice of material changes (email or in-app). The effective date above always reflects the current version.
13. Contact
Logistical Innovations, Corporation (dba AI Exelion / Exelo) — San Diego, CA