1. Who we are
Hewstone ("Hewstone," "we," "us," or "our") is a sole-proprietor business operated by Thomas Cannaday in Minnesota, United States. We build AI systems for the trades. This policy explains what information we collect from people who visit hewstone.io, call our business line, or work with us as clients — and what we do with it.
2. Information we collect
From website visitors: Standard server logs (IP address, browser type, pages viewed, timestamps) and any information you voluntarily submit through our contact form (name, email, phone number, message).
From callers: When you call our business line at (612) 453-1585, your phone number is automatically captured by our telephony provider (Twilio). The call is answered by an AI receptionist, and your spoken words are transcribed for the duration of the call so the AI can respond. A transcript of the conversation may be retained for follow-up and quality purposes.
From SMS recipients: If you verbally request our booking link during a phone call, we send one SMS to the phone number you called from. We do not collect any additional information from this SMS interaction.
From clients: Business name, contact name, email, phone number, billing address, payment information (processed by Stripe — we never see or store your full card number), and any operational data you share with us to build the AI systems we deliver.
3. How we use information
- To respond to your inquiry or call
- To send you the booking link by SMS if you requested it
- To deliver services you've contracted us to build
- To send transactional emails (invoices, scheduling, project updates)
- To improve our website and the AI receptionist's responses
- To comply with legal obligations (tax records, etc.)
4. SMS and phone communications
Phone numbers collected through calls or SMS are never shared, rented, sold, or otherwise disclosed to third parties for marketing purposes. Mobile information will not be shared with third parties or affiliates for marketing or promotional purposes. The only third party that processes your phone number on our behalf is Twilio (our telephony and SMS provider), and they do so solely to deliver the call or text message you requested.
SMS opt-in occurs either (a) when you verbally request our booking link during a live phone call with our AI receptionist, or (b) when you submit your number and check the SMS-consent box on our SMS Terms page. You can opt out at any time by replying STOP to any SMS we send. Reply HELP for help. Message and data rates may apply. Message frequency is low (typically one message per request; no recurring messages). Text-messaging originator opt-in data and consent are not shared with any third parties, and no mobile information is shared with third parties or affiliates for marketing or promotional purposes.
5. How we share information
We share information only with the following categories of recipients:
- Service providers who help us operate the business (Twilio for voice/SMS, Vercel for hosting, Anthropic for AI, Stripe for payments, Resend and Formspree for email, Cal.com for scheduling). These providers are bound by their own privacy and security obligations.
- Legal requirements if we are required to by law, subpoena, or court order.
We do not sell personal information. We do not use personal information for advertising or share it with advertising networks.
6. Data retention
Call transcripts and voice-receptionist conversation history are retained for up to one hour in memory for the duration of the call session. Email correspondence and client records are retained for the duration of our business relationship and as required by tax and accounting obligations (typically 7 years). Website analytics logs are retained for 30 days.
7. Your rights
You can request a copy of the personal information we hold about you, ask us to correct it, or request its deletion, by emailing hello@hewstone.io. We will respond within 30 days.
8. Security
We use HTTPS across the site, store secrets in encrypted environment variables, and limit access to our backend systems to the business owner. No system is perfectly secure, but we follow standard practices to protect the information you entrust to us.
9. Changes to this policy
If we make material changes to this policy we will update the "Last updated" date at the top and, where appropriate, notify active clients by email.
10. Contact
Questions about this policy? hello@hewstone.io