Privacy Policy

LifeButton AI, a DBA of Hunter Ceroy Holdings, LLC (“LifeButton”, “we”, “us”), provides advertising management and marketing software for licensed life-insurance producers. The service launches and manages advertising campaigns, enriches lead records, and provides scheduling, messaging and reporting tools, delivered through our web application and through integrations you authorize.

Questions about this policy or your data: support@lifebutton.ai.

We collect and process the following categories of information:

• Account information. Your name, email address, company details and login credentials when you create an account or are onboarded by our team.
• CRM data via GoHighLevel. When you connect a GoHighLevel account, we access contacts, conversations, calendars, custom fields and related records in that account in order to operate the features you use (lead enrichment, reporting, scheduling, messaging).
• Advertising data via Meta and TikTok. When you connect an ad account, we access campaign, ad set, ad, creative and performance data, and create or modify campaigns at your direction. Lead form submissions from your ads are processed to enrich the corresponding CRM contact.
• Google user data. If you connect Google Calendar or Gmail — see section 3, which governs that data specifically.
• Billing information. Payments are processed by Stripe; we store subscription and invoice records, not full card numbers.
• Usage and log data. Standard technical logs (IP address, browser type, pages viewed, timestamps) used for security, debugging and service improvement.

This policy covers both LifeButton AI and LifeOS Agent Hub, including agency-branded appearances. Both apps are operated by LifeButton AI, a DBA of Hunter Ceroy Holdings, LLC. The mobile app uses your existing account to access contacts, conversations, tasks, appointments and calling features. Messages, notes, task changes, call records and Arti conversations are processed by LifeButton and the service providers needed to deliver those features.

When you enable notifications, we register a device push token with your user and workspace. Expo and Apple or Google deliver alerts. Message alerts use generic text rather than including a lead’s name or message content on your lock screen. You can disable notifications in the app or your phone settings.

Calls use your microphone after permission is granted. Call audio passes through our calling provider; recording and retention depend on the account’s calling configuration. The app does not import your phone’s address book or request precise device location.

Arti uses the Anthropic API. Before first use, the app asks permission to share your messages and relevant account information for AI assistance. This choice is saved for the user and account on that device and can be withdrawn using the privacy control in Arti.

For account or personal-data deletion requests, contact support@lifebutton.ai. The retention and deletion terms below apply to mobile account data as well.

When you connect Microsoft Outlook, we use your Microsoft profile and email address to identify the connected mailbox. With your permission, we read your calendar list and selected calendars’ busy times, and create, update or cancel copies of your Studio appointments in the calendar you choose.

If you enable Outlook email, we send messages you authorize from that mailbox and read new inbox messages to match senders to existing contacts in your Studio account. Matching messages are stored in Conversations. Unmatched personal messages are not imported. Message attachments remain in Outlook.

Microsoft access and refresh tokens are encrypted before storage and used by authorized server components. Calendar availability and imported messages are scoped to your Studio account. Our hosting and database providers process this data to operate these features; connected email is not used for advertising.

You can disable calendar or email syncing separately, or disconnect Outlook in Integrations. Disconnecting removes stored access credentials and cached busy times. Existing Studio conversations and appointments, and events or messages already created in Outlook, remain subject to the retention and deletion terms below. You can also revoke the app’s permissions in your Microsoft account.

LifeButton’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. The Google-specific restrictions in this section also apply to data derived from Google APIs and take precedence over the general uses and sharing described elsewhere in this policy.

• What we access. If you choose to connect your Google Calendar, we read your calendar list and account email to identify the connection and let you select calendars. We read events on selected calendars, including event identifiers, titles, start and end times, time zones, status and availability. Our synchronized availability records include event titles and busy times. Appointments created through LifeButton may include attendee names and email addresses, appointment details and a Google Meet link.
• Why we access it. Solely to provide scheduling and booking features: showing available times based on periodically synchronized calendar data, treating existing events as busy time, and creating, rescheduling or cancelling appointments on your primary Google calendar. Calendar invitations are sent by Google when attendees are added.
• Gmail sending. If you separately connect Gmail, we request permission to send messages from your account and basic identity information to identify the sender. Messages you send or authorize through Studio can appear in Gmail Sent. This connection does not authorize reading, searching or deleting your Gmail inbox. Studio stores the message content and delivery records needed to show your CRM conversations and sending history.
• AI-assisted scheduling. When you use Arti or enable AI scheduling, available appointment times derived from connected calendars may be processed by our AI service providers to answer your request or arrange an appointment. Arti uses the Anthropic API; AI Text uses the OpenAI API or Anthropic API according to the service configuration. When Studio AI voice scheduling is enabled, Vapi may process offered appointment times derived from connected calendars and the resulting booking confirmations. Gmail API data is not supplied to these voice scheduling tools. Our current voice configuration uses OpenAI for responses, Soniox for transcription and Vapi voice services; configured fallback speech services may also process call audio. These scheduling tools provide offered appointment times rather than the titles or descriptions of unrelated Google events. Information you include in a message or screenshot may also be processed by the AI service handling your request.
• No general-purpose model training. Google API data, including aggregated or derived data, must not be used by LifeButton or its service providers to create, train or improve foundational or general-purpose AI or machine-learning models. Processing a request is distinct from model training. LifeButton does not train general-purpose models on this data or submit it as model-training feedback. Provider retention for service delivery or abuse prevention may still apply; we do not represent all processing as zero retention.
• What we never do with it. We do not sell Google user data. We do not use it for advertising, ad targeting or ad measurement. We do not transfer it to third parties except as necessary to provide the scheduling, messaging and AI-assisted features you authorize, to comply with applicable law, or as part of a merger, acquisition or sale of assets after obtaining your explicit prior consent. Humans do not read your Google user data except with your explicit permission (for example, a support request), where necessary for security purposes, or to comply with applicable law.
• How it is stored. Google access credentials (OAuth tokens) are encrypted at the application layer before being stored, in addition to encryption at rest on our database infrastructure, and are used by authorized server components that perform the connected services. Our hosting and database providers, Vercel and Supabase, process the data needed to operate these services. Synced availability data is stored in access-restricted tables scoped to your account.
• How to disconnect. You can disconnect Google Calendar from Calendar settings or Gmail from Email Services. Disconnecting deletes the stored connection credentials and, for Calendar, the synced calendar data from our active integration records. We also request revocation at Google; if that request fails, you can revoke access directly in your Google Account. Appointments and CRM messages remain subject to the retention and deletion rules below; disconnecting does not delete messages already sent through Gmail or events already created in your Google account. You can also revoke LifeButton’s access from your Google Account at myaccount.google.com/permissions.
• Deletion requests. To request deletion of any Google user data we hold, email support@lifebutton.ai from the account’s email address. We complete deletion within 30 days.

We use the information described above to operate, maintain and improve the service: launching and optimizing the ad campaigns you configure, routing and enriching leads, scheduling appointments, sending the notifications you have enabled, providing support, billing, and protecting the service against fraud and abuse. We do not sell your personal information, and we do not use your customers’ data for our own marketing.

We share information only with:

• Service providers that host and operate parts of the platform (cloud hosting, database infrastructure, payment processing, communications), bound by confidentiality and data-protection obligations.
• The platforms you connect (GoHighLevel, Meta, TikTok, Google, Stripe), at your direction, to perform the actions you request. Each platform’s own terms and privacy policy govern data inside that platform.
• Legal authorities where required by law, subpoena or to protect the rights, safety and property of LifeButton, our users or the public.

We retain your data for as long as your account is active and as needed to provide the service. When an account is closed, we delete or anonymize personal data within 30 days, except records we are required to keep for legal, billing or security purposes. Disconnecting an individual integration deletes the credentials for that integration; Google Calendar data follows the shorter timeline in section 3.

You may request access to, correction of, or deletion of your personal data at any time by emailing support@lifebutton.ai. We will verify the request against the account’s email address and respond within 30 days. Depending on where you live, you may have additional rights under applicable data-protection law (such as the CCPA); we honor those rights regardless of your location where practicable.

All traffic to the service is encrypted in transit (TLS). Data is encrypted at rest on our database infrastructure. Integration credentials are stored in access-restricted tables reachable only by server-side components, and Google OAuth tokens carry an additional layer of application-level encryption. Access to production systems is limited to authorized personnel. No method of transmission or storage is perfectly secure; if we learn of a breach affecting your data, we will notify you as required by applicable law.

The service is a business tool for licensed insurance professionals and is not directed to children under 16. We do not knowingly collect personal information from children.

We may update this policy from time to time. Material changes will be announced in the application or by email before they take effect, and the “Last updated” date above will change. Your continued use of the service after a change takes effect constitutes acceptance of the updated policy.

LifeButton AI offers an optional internal SMS testing program for its team members. When you submit the testing signup form, we record your name, mobile number, consent choice, the consent wording shown to you and the submission time. Leaving the optional consent box unchecked does not authorize text messages. We use these records to administer the test program, document permission and honor opt-out requests.

We do not sell mobile information or share it with third parties or affiliates for marketing or promotional purposes. SMS opt-in data and consent are not shared for others to market to you. Service providers may process this information only as necessary to operate the messaging program on our behalf, subject to confidentiality and data-protection obligations. The general sharing provisions above do not authorize sharing SMS consent for another party's marketing.

Reply STOP to opt out or HELP for help. You can also contact support@lifebutton.ai.

LifeButton AI · support@lifebutton.ai