Privacy Policy

1.Who We Are

Crankshaft ("Crankshaft," "we," "us," or "our") is an Arizona company that operates an AI-powered inbound call qualification and live-transfer platform. Consumers respond to advertising by calling us; an AI verifier confirms their interest and eligibility; qualified callers are transferred live to licensed insurance agents and agencies who are our clients.

This Privacy Policy explains what personal information we collect, how we use and share it, how long we keep it, and the choices you have. It applies to crankshaft.ai and its subdomains (the "Website"), our platform and partner portals (the "Platform"), and calls placed to telephone numbers we operate.

Questions about this policy can be sent to privacy@crankshaft.ai.

2.Who This Policy Covers

We interact with several groups of people, and the information we hold differs for each:

• Website visitors browsing crankshaft.ai or subscribing to our newsletter.
• Applicants and clients: insurance agents, agencies, and call centers who apply for or use our services.
• Callers: consumers who call a Crankshaft telephone number in response to an advertisement.
• Traffic partners: media buyers and agencies who run advertising that drives calls to our numbers and who connect their advertising accounts to us.

3.Information We Collect

Information you provide

• Account and application details: name, email address, phone number, business name, licensing information such as National Producer Number (NPN), and the states in which you are licensed.
• Service preferences: call routing schedules, availability, plan selections, and configuration you set in your dashboard.
• Payment details, which are collected and processed by our payment processor. We do not store full card numbers.
• Messages you send to our support, sales, or legal teams.

Information collected on calls

• Caller telephone number, line type, and the time and duration of the call.
• Information a caller chooses to share with our verifier, typically first and last name, age, and state of residence.
• Call audio, machine-generated transcripts, and the verifier's structured summary of the conversation. Callers are informed that calls may be recorded and monitored in accordance with applicable law. See our Compliance & Call Recording policy.
• Which advertisement or telephone number produced the call.

Information collected automatically

When you use the Website or Platform we collect IP address, browser and device type, pages viewed, referring URLs, and interaction data using cookies and similar technologies, including product analytics tools. See our Cookie Policy.

Information from third parties

• Identity and line-type data providers. To comply with telemarketing rules and to confirm we are speaking with the right person, we may look up a caller's telephone number with a reverse-phone or line-type data provider, which returns information such as line type (mobile or landline), carrier, and the name and location associated with the number.
• Advertising platforms. When a traffic partner or Crankshaft connects an advertising account (Meta or Google Ads) to our Platform, we receive aggregate campaign performance data from that platform. See Section 5.

4.How We Use Information

• To operate the Platform: answer and qualify inbound calls, and transfer qualified callers to a licensed agent.
• To verify licensing, eligibility, and compliance with telemarketing and call-recording laws, including blocking calls we are not permitted to handle.
• To measure and improve our verifier, scripts, and call quality, including reviewing recordings and transcripts.
• To attribute calls to the advertisement that produced them, measure advertising performance, and reconcile what we owe to and are owed by our clients and partners.
• To detect fraud, abuse, and traffic that does not originate from genuine advertising.
• To process payments, send transactional messages, and provide support.
• To send newsletters and marketing communications where you have opted in. You can unsubscribe at any time using the link in any such email.
• To comply with legal obligations and enforce our Terms of Service.

Automated processing

Our verifier uses AI speech and language models to hold the conversation, transcribe it, extract the details a caller provides, and decide whether the caller is eligible for a live transfer. Those decisions determine whether a call is transferred to an agent; they do not determine whether a caller is offered insurance coverage, which remains a decision made by a licensed agent or carrier. Callers who prefer not to interact with an automated system can hang up at any time.

5.Advertising Platform Data (Meta and Google Ads)

Crankshaft's business depends on knowing which advertisements produce genuine calls. To do this we connect to the advertising platforms that run those ads.

What we access

With the account holder's authorization, we read campaign, ad set, and ad-level performance data such as spend, impressions, clicks, and the count of calls the platform recorded. We do not access the advertising account holder's personal Google or Meta account contents, contacts, email, or files. We do not create, edit, or pause campaigns on a connected account.

Why we access it

• On Crankshaft's own advertising accounts: to calculate advertising cost and cost per qualified call.
• On a traffic partner's advertising account: to confirm that the calls arriving on the partner's assigned telephone numbers correspond to advertising the partner actually ran, so that we pay only for genuine ad-driven calls.

What we send

For advertising accounts that Crankshaft itself operates, we report call outcomes back to the advertising platform so it can measure how well our ads perform. Where a caller has shared identifying details, this may include the caller's phone number, name, and state, which we transmit only in one-way hashed form. We do not send this data to a traffic partner's advertising account.

Google API Services

Crankshaft's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Google Ads data we receive is used only to provide and improve the features described in this Section, is not sold, is not used for advertising unrelated to those features, and is not read by humans except with your consent, for security purposes, to comply with law, or in aggregated and anonymized form.

Revoking access

You can disconnect Crankshaft's access at any time from your Google Account permissions page or your Meta Business settings, or by contacting us at privacy@crankshaft.ai. Once access is revoked we stop reading new data from that account.

6.How We Share Information

We do not sell personal information. We share it only as follows:

• Licensed agents and agencies receiving a transfer. When a caller qualifies, we pass the caller's phone number and the details they shared with the verifier to the agent who takes the call, so the agent can help them. Callers who do not qualify are not shared with agents.
• Service providers who process data on our behalf under contract: cloud hosting and database services, telephony carriers, AI speech and language model providers, payment processing, transactional email, customer relationship management, product analytics, and identity or line-type data providers.
• Advertising platforms, as described in Section 5, for Crankshaft's own campaigns only.
• Traffic partners see aggregate performance of their own advertising (call volumes, qualification rates) and never see caller recordings, transcripts, or contact details.
• Legal and safety. When required by law, subpoena, or regulator, or to protect the rights, property, or safety of Crankshaft, our users, or the public.
• Business transfers. In connection with a merger, acquisition, or sale of assets, subject to this policy.

7.Data Retention

• Account, application, and billing records are kept for the life of the relationship and thereafter for as long as needed to meet legal, tax, and dispute-resolution obligations.
• Call recordings, transcripts, and verifier summaries are kept for as long as needed for quality assurance, compliance verification, billing reconciliation, and dispute resolution, and are then deleted or anonymized.
• Advertising performance data read from connected accounts is kept as aggregate reporting history. Raw responses are not retained beyond what is needed to produce those aggregates.
• Website analytics data is retained according to the settings of our analytics provider and is aggregated over time.

You may request deletion of your personal information at any time (see Section 9). We will honor the request except where we are required or permitted by law to retain the data.

8.Security

We use industry-standard safeguards including encryption in transit and at rest, role-based access controls, credential management, audit logging, and least-privilege access for staff and contractors. Recordings and transcripts are accessible only to authorized personnel for the purposes described in this policy. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9.Your Rights and Choices

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information, to object to or restrict certain processing, and to withdraw consent. To exercise any of these rights, email privacy@crankshaft.ai. We will verify your identity before acting and respond within the time required by applicable law.

California residents

Under the California Consumer Privacy Act (CCPA/CPRA), California residents have the right to know what personal information we collect and how it is used and shared, to delete it, to correct it, and to be free from discrimination for exercising these rights. We do not sell personal information and do not share it for cross-context behavioral advertising as those terms are defined under California law. You may designate an authorized agent to make a request on your behalf.

Marketing communications

You can opt out of newsletters and marketing email using the unsubscribe link in any message. Transactional messages about your account will continue.

Do Not Call

Crankshaft handles inbound calls that consumers place to us. If you wish not to be contacted by an agent to whom you were transferred, tell that agent directly or contact us and we will pass the request along.

10.Children

Our Website and Platform are intended for adults and businesses. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us information, contact us and we will delete it.

11.International Users

Crankshaft operates in the United States and serves United States consumers. Information we collect is stored and processed in the United States. If you access our services from outside the United States, you understand that your information will be transferred to and processed there.

12.Changes to This Policy

We may update this policy from time to time. Each version is published with its own effective date at crankshaft.ai/legal/privacy, and prior versions remain available. Material changes to how we use data obtained from advertising platforms or from callers will be reflected here before they take effect.

13.Contact Us

Privacy inquiries and rights requests: privacy@crankshaft.ai

General legal inquiries: legal@crankshaft.ai