Legal

Privacy Policy

Last updated: October 30, 2026

1. Introduction

Child Care Genius ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our enrollment CRM platform and related services, including SMS communications, email marketing, AI voice receptionist, and parent portals.

2. Information We Collect

We collect information you provide directly to us, including:

  • Account information (name, email address, phone number, password)
  • Organization details (childcare center name, address, contact information)
  • Lead and contact data you enter into the platform
  • Communication content (emails, SMS messages sent through our platform)
  • Call recordings and transcripts from the AI receptionist feature
  • Voicemail recordings left by callers
  • Children's enrollment information (name, age, program interest) as entered by parents or staff
  • Payment information (processed securely through third-party providers — we do not store full card numbers)
  • Usage data and analytics (feature usage, login times, page views)

3. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our services
  • Process transactions and send related information
  • Facilitate communications between childcare centers and families via email, SMS, and voice
  • Power AI features including lead scoring, content generation, and the voice receptionist
  • Send promotional communications (with your consent)
  • Respond to your comments, questions, and customer service requests
  • Monitor and analyze usage patterns to improve user experience
  • Detect, prevent, and address technical issues and security threats
  • Enforce usage limits and rate limiting to protect platform stability

4. Call Recording and Voice Data

When the AI voice receptionist feature is enabled:

  • Inbound calls may be recorded and transcribed
  • Callers are informed at the beginning of each call that recording may occur
  • Call recordings are stored securely with encryption at rest
  • Recordings are accessible only to authorized users within the organization that owns the phone number
  • Voicemail recordings are stored when callers leave messages
  • Call transcripts may be processed by AI to extract lead information (caller name, child details, tour requests)
  • You may request deletion of specific call recordings through your account settings

5. SMS and Email Communications

Regarding communications sent through our platform:

  • SMS messages are transmitted via Twilio and subject to Twilio's privacy practices
  • Emails are transmitted via Resend and subject to Resend's privacy practices
  • Message content and metadata (timestamps, delivery status) are stored for your records
  • We track delivery status but do not read the content of your messages for advertising purposes
  • Opt-out requests from message recipients are honored and logged

6. SMS / Text Messaging

If you give us your mobile number, we (or the childcare center you contacted through GEM) may text you about your inquiry, tours, enrollment and account. Message frequency varies. Msg & data rates may apply. Reply STOP to opt out at any time and HELP for help.

Mobile information will not be shared with third parties or affiliates for marketing or promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

7. Children's Privacy (COPPA)

We take children's privacy seriously and comply with the Children's Online Privacy Protection Act (COPPA):

  • Our services are designed for childcare business operators, not for children
  • We do not knowingly collect personal information directly from children under 13
  • All children's information in the platform is provided by their parents, guardians, or authorized childcare staff
  • Children's data is used solely for enrollment management, attendance tracking, and daily reporting purposes
  • Parents may request access to, correction of, or deletion of their child's data by contacting their childcare center or us directly
  • We do not use children's data for advertising or marketing purposes
  • If we become aware that we have collected personal information from a child under 13 without parental consent, we will take steps to delete that information promptly

8. Data Sharing and Disclosure

We do not sell your personal information. We may share your information with:

  • Service providers: Twilio (SMS/voice), Resend (email), Stripe (payments), ElevenLabs (AI voice) — these providers process data on our behalf and are contractually obligated to protect your information
  • AI providers: We use AI services for lead scoring, content generation, and voice interaction — prompts may include lead data but are not used to train AI models
  • Legal requirements: When required by law, subpoena, or legal process
  • Business transfers: In connection with a merger, acquisition, or sale of assets

None of the sharing above includes mobile phone numbers or SMS opt-in data for marketing purposes (see SMS / Text Messaging).

9. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. This includes encryption of data in transit (TLS) and at rest, row-level security policies ensuring data isolation between organizations, regular security assessments, and role-based access controls.

10. Data Retention

We retain your information as follows:

  • Account data: Retained for as long as your account is active
  • Communication logs: SMS, email, and call records are retained for the duration of your subscription
  • Call recordings: Retained for 90 days unless you configure a different retention period
  • Lead and enrollment data: Retained until you delete it or close your account
  • Raw lead form data from connected tools (Facebook and Instagram Lead Ads, Zapier, Make): the original submission is deleted after 30 days, or right away when the lead is deleted. The lead record keeps what the center needs.
  • After account closure: Data is permanently deleted within 30 days of a written deletion request to support@childcaregenius.com, unless required by law

11. Your Rights

Depending on your location, you may have the right to:

  • Access the personal information we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data
  • Object to or restrict certain processing activities
  • Request data portability (export your data)
  • Withdraw consent at any time
  • Opt out of SMS and email marketing communications

To exercise any of these rights, please contact us at support@childcaregenius.com.

12. Third-Party Services

Our platform integrates with the following third-party services, each with their own privacy policies:

  • Twilio — SMS and voice communication
  • Resend — Email delivery
  • ElevenLabs — AI voice synthesis for the receptionist feature
  • Stripe — Payment processing
  • Google Calendar — Tour scheduling integration (when connected)
  • Meta (Facebook and Instagram Lead Ads) — Lead form submissions from a center's own Facebook Page (when connected)

13. Google API Services User Data Policy (Limited Use)

Child Care Genius's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically, we do not use data obtained from Google Workspace APIs (such as Google Calendar or Gmail) to develop, improve, or train generalized or non-personalized AI and/or machine learning models. Data received from Google APIs is used solely to provide and improve the user-facing features that you have explicitly authorized (such as syncing tour appointments to your Google Calendar). We do not transfer this data to others unless doing so is necessary to provide or improve those features, to comply with applicable law, or as part of a merger, acquisition, or sale of assets with notice to users. We do not use or sell this data for advertising purposes, and human access to this data is restricted to the limited cases permitted by the policy.

14. Facebook and Instagram Lead Ads

If a childcare center connects its Facebook Page to GEM, we receive the answers people submit on that center's Facebook and Instagram lead forms. That includes name, phone, email, details about their child, and any other questions the center asks. We also receive the form, the ad ID, and whether the lead came from Facebook or Instagram.

We use this information only to create or update that lead in the connecting center's GEM account, so the center can follow up about care. We never use it for advertising, never sell it, never share it with other centers, and never use it to train AI models. Lead records are controlled by the center and kept until the center deletes them or closes its account. The original submission we receive from Meta is deleted after 30 days.

We store an encrypted access token for each connected Page and use it only to read that Page's lead forms and leads. A center can disconnect at any time in Settings → Lead Sources → Facebook, which stops new leads, unsubscribes the Page and deletes the stored token. You can also remove GEM from your Facebook account (Settings & Privacy → Settings → Business Integrations), which does the same.

To request deletion of data we received from Meta, see our data deletion instructions or email support@childcaregenius.com. If you submitted a center's lead form, contact that center or email us and we'll work with the center to delete your record.

15. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at:

Email: support@childcaregenius.com
Address: Child Care Genius, Inc.