Private-pilot privacy notice
How Dialtone handles pilot data.
This notice covers the current invitation-only pilot and public website. Broader release will use final terms and a privacy policy reviewed by counsel.
Current scope: Dialtone is currently available only to invited pilot users. The final legal entity, legal roles, and certifications for a broader release have not yet been established.
Information the pilot handles
The protected app may handle contact and lead records supplied by the practice, phone numbers, notes, tasks, call purpose and outcome, callbacks, meetings, pipeline state, do-not-call and policy evidence, caller-ID assignments, call events, audit receipts, and authenticated user identity. A user’s browser also keeps limited device preferences and unsent retry information.
Why it is handled
Dialtone uses this information to sign users in, show each caller only their assigned work, display the facts needed before a call, place a call the user starts, save what happened, schedule follow-up, apply practice controls, investigate problems, and keep security and review records. Dialtone does not sell personal information or use pilot records for behavioral advertising.
Services involved
The current service uses Cloudflare for authenticated access, hosting, server execution, and data storage, and Telnyx for telephony and phone-number services. Those providers process the data needed to perform their roles under their own terms. Before adding live records, the practice must approve these providers and any transfer of its data.
Recording and AI
Recording is not on by default. If a practice enables it, Dialtone follows the recording rule configured by the owner and requires the consent information set for that call; when the rule is unknown, recording stays off. Dialtone Guide is optional, read-only, and separate from the calling app. Users must not paste real contact details, notes, credentials, account information, or unredacted screenshots into Guide. For help finding something on screen, users may share only a cropped screenshot with private information removed.
Retention, access, and deletion
The practice sets how long business records are kept under its pilot policy and agreement. Dialtone keeps the history needed to explain earlier actions. A deletion receipt states what was deleted and which history remains; deleted data is not described as recoverable. Requests to view, correct, export, restrict, or delete pilot data go through the practice owner named in the invitation.
Security boundary
Cloudflare Access protects the app, and the server uses the signed-in identity to decide what that person may see and do. A browser cannot grant itself owner access. Credentials are excluded from exports and public website files. No online service can promise absolute security. Report any suspected privacy or access problem immediately through the support route.
This public site
The marketing site uses no analytics, advertising pixels, outside scripts, lead form, or account cookie. The readiness score is calculated only in the browser and the answers are not sent anywhere. Cloudflare may still process ordinary information needed to serve and protect the site, such as the IP address, browser, requested page, time, and security events.
Questions and requests
For the current invited pilot, use the named owner/support channel supplied in onboarding. Do not put private lead or customer information into an initial support message. See Support for safe diagnostic details.