Privacy policy
Pilot review draft: July 15, 2026 · Published by Thorton LLC
This working draft describes the intended Release 1 website and communications pilot. Live customer data and messaging remain disabled until the final notice, pilot agreement, provider terms, retention schedule, and data-governance gate are approved.
Who's who
Three parties show up in this policy:
- The business - the contractor you hired or contacted (for example, your electrician). During Release 1, they use OwnerSwitch for supported customer-care conversations and follow-up state.
- You - either a customer of that business (you text, call, or email them) or a business user (you run the business and use the OwnerSwitch app).
- Us - Thorton LLC, a California limited liability company, which owns and operates the OwnerSwitch product brand on behalf of the business. For customer conversation data, the business decides why it's used; we process it to provide the service.
What we collect
Summary: your contact details, the messages themselves, consent records, and basic technical logs. No ad trackers, no cookies on this site, no fingerprinting, no buying data about you.
| Category | Examples | Where it comes from |
|---|---|---|
| Contact information | Name, phone number, email, service address | You, when you contact the business or fill a form here |
| Messages and channel events | Text messages, emails, website leads, call metadata, and content you choose to send through an activated pilot channel | Your conversation with the business. Voicemail recording and transcription remain off until their separate disclosure and retention review is approved |
| Consent records | Date and time (UTC), the exact consent text version you saw, the page address, your IP address and browser type, your confirmation reply ("YES") or opt-out ("STOP") | The consent, opt-out, and preferences forms on this site, and your SMS replies |
| Active-work context | Service location, work status, internal notes, and approved conversation history | The business and the customer conversation. Release 1 does not include OwnerSwitch invoicing or payment collection |
| Website analytics | Page viewed, a bounded event type (for example "consent form submitted"), and an ephemeral tab session. If you explicitly allow anonymous visitor measurement, we also save one random ID for this browser profile and the disclosure version you accepted. No cookies, fingerprint, raw referrer, or cross-site identifier. | This website and, only for the optional random ID, your saved browser preference |
| Waitlist | Email, business name, trade | The waitlist form |
Anonymous analytics preferences
Basic first-party, cookie-less session measurements help us keep this site working. They disappear from your browser when the tab closes. You can separately allow one random ID to persist in this browser profile so we can count consented browser profiles and understand repeat visits. The ID is not a name, account, device fingerprint, advertising ID, or proof that one person visited; it is not shared across sites and is never used to authorize a text or email.
No persistent anonymous-measurement preference is assumed.
Turning it off replaces the saved choice and removes the random ID from this browser profile. Earlier append-only events remain subject to the raw-analytics retention limit below; admin reports expose only tenant-scoped aggregate counts, never the ID itself.
What we use it for
- Delivering messages between you and the business, and keeping the shared record of your project.
- Drafting replies with AI, when the live pilot gate is approved. A configured model provider may process bounded conversation context to prepare a draft for the business to review. Live AI drafting remains off until the provider's no-training, retention, processing-region, deletion, and contract terms are documented and approved.
- Checking consent before every message the business sends through OwnerSwitch, and honoring your opt-outs.
- Safety: flagging messages that sound like an emergency so a human calls you.
- Running and securing the service: authentication, fraud and abuse prevention, debugging, and legally required records.
What we don't do: sell personal information; share it for cross-context behavioral advertising; use one business's customer data for another business's benefit; or use your conversations to train shared AI models. If we ever want to change any of these, we'll ask first, plainly - not with a policy-update email nobody reads.
Your mobile number, specifically
Because we send text messages, carrier rules deserve their own paragraph: your mobile opt-in data and consent records are not shared with or sold to third parties or affiliates for their marketing or promotional purposes. Text messaging originator opt-in data is used only to run the messaging program you signed up for.
Who we share with
- The business you're talking to - they see your conversation; it's theirs and yours.
- Approved service providers - the final pilot subprocessor list will identify the configured authentication, hosting, messaging, email, model, and crash-reporting providers and their purpose before live data is enabled. Release 1 does not use OwnerSwitch payments.
- Authorities, when legally required - and where the law allows, we'll tell the affected business.
- A future acquirer - if OwnerSwitch is ever acquired, this policy's promises travel with the data, and we'll notify you of any material change.
How long we keep things
Consent and opt-out evidence is proposed to be kept for at least 5 years from the last message that relied on it, subject to counsel approval and any longer period legally required. Other pilot retention, deletion, and backup-expiry periods are governed by the signed pilot agreement and approved data-processing terms. The final schedule will distinguish conversations, audit records, website events, waitlist records, provider receipts, and backups. Live data stays disabled until that schedule matches the implemented backup and deletion controls.
Raw website analytics, including any consented random browser-profile ID, have a maximum operating limit of 13 months. The final approved schedule may be shorter but must not silently extend that limit.
Your rights
Depending on where you live, which law applies, and OwnerSwitch's role for the data, you may have rights to know, access, correct, delete, or limit certain processing. We do not claim that every privacy law applies to every pilot record. The request channel is available regardless, and the business may be the party responsible for deciding a customer-record request:
- Email privacy@ownerswitch.com to make a request. We verify authority and respond within the timeframe required by the applicable law and approved pilot process.
- If the data belongs to your conversation with a business, we may route the request to that business. Consent and opt-out evidence may be retained where needed to honor suppression and meet approved legal-record requirements.
- You will never need an account or a login to opt out of messages: opt-out form, STOP reply, or unsubscribe link.
Security
The pilot uses TLS in transit, role-limited tenant access, redacted operational logs, and append-only records for approvals and consent changes. Encryption at rest, off-box backup protection, restore evidence, access review, and incident notification must be verified in the final data-governance pack before live customer data is enabled. No system is unhackable.
Children
OwnerSwitch is for business communication and isn't directed at children under 13. If you believe a child's information reached us, email privacy@ownerswitch.com and we'll delete it.
Changes
We'll post changes here with a new effective date. For material changes affecting message recipients, we'll notify the businesses (who can notify you) and, where required, notify you directly. The prior version stays available on request.
Contact
Thorton LLC
2108 N St Ste N, Sacramento, CA 95816
Privacy: privacy@ownerswitch.com · Support: support@ownerswitch.com
Registered agent for service of process: Northwest Registered Agent, Inc. (California 1505 registered corporate agent).
This policy is a working draft for counsel and operator review, not a claim that the live-data gate is cleared. Final language and the signed pilot agreement must match the verified runtime before any live customer data is enabled.