Privacy policy
Effective November 4, 2026
LAP System ("LAP", "we") is an AI receptionist for service businesses. It answers a business's phone calls, takes down what each caller needs, and can book visits into the business's Google Calendar. LAP is run by Dylan Orr in Niagara Falls, Ontario, Canada. This policy explains what information we handle, why, and what you can do about it. Questions: support@lapsystem.ca.
Who this covers
- Businesses that use LAP, and the people on their team who sign in.
- Callers who phone a business that uses LAP. The business decides how it uses your information, and its own privacy policy applies too. We handle it for them.
What we collect
From businesses
- Account details: names, email addresses, roles and sign-in activity.
- Setup answers: business name, services, hours, service area, urgent-call rules, alert contacts and booking settings.
From callers
- The number you call from (caller ID), the number you called, and the time and length of the call.
- What you tell the receptionist: your name, callback number, service address, what the problem is, and any time you book.
Technical
- Sign-in cookies that keep you signed in. To stop password guessing, we keep a scrambled (hashed) copy of the email and network address behind failed sign-ins for one day.
What we don't do
- We don't record calls and we don't keep call transcripts.
- We don't sell information or share it for advertising.
- We don't use your information to train AI models.
- We don't use advertising or tracking cookies.
How we use it
- To answer calls and pass each caller's message to the right business, by email.
- To book, move or cancel visits when the business has booking turned on.
- To run accounts, keep them secure, fix problems and give support.
- To meet legal duties.
Google Calendar
A business can connect its Google Calendar so the receptionist can book visits. When it does, LAP asks Google for these permissions and uses them only for booking:
- Free and busy times, to offer callers open arrival windows. LAP does not read the details of your other events.
- Your list of calendars, so you can pick which calendar LAP books into.
- Events on calendars you own, to add, move and cancel the visits LAP books. LAP only changes events it created.
- Your Google email address, to show which account is connected.
We store the connection key Google gives us encrypted, and we never show it to anyone. We don't sell Google data, use it for advertising, or use it to train AI models. People at LAP don't read it, except with your permission, to fix a security problem, or when the law requires it.
LAP's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
You can disconnect at any time in your LAP account, or remove LAP's access in your Google account at myaccount.google.com/permissions. Bookings LAP already made stay in your calendar until you delete them.
Who helps us run LAP
We use these service providers. Each gets only what it needs to do its job.
- Supabase: database and sign-in. Stored in Canada (Montreal).
- Fly.io: the server that handles calls. Runs in Canada (Toronto).
- Vercel: hosts this website and the dashboard.
- xAI: the voice AI that talks with callers. It hears the call live to respond.
- Twilio: connects phone calls.
- Resend: sends the alert emails.
- Google: the calendar, when a business connects it.
Some of these providers process information in the United States, so it may be subject to the laws there. We may also share information when the law requires it, or to protect people from fraud or harm.
How long we keep it
We keep a business's account and its callers' messages while the business uses LAP. When a business stops using LAP, we delete its information within 90 days, unless the law requires us to keep something longer. Failed sign-in records are deleted after one day.
How we protect it
Information travels over encrypted connections. Each business can only see its own records, and the database enforces that. Calendar connection keys are encrypted. If a breach puts you at real risk of significant harm, we will tell you and the Privacy Commissioner of Canada, as the law requires.
Your choices and rights
You can ask to see the information we hold about you, correct it, or delete it, and you can withdraw your consent. Email support@lapsystem.ca. If you called a business, you can also ask that business. We may need to confirm who you are first. We answer within 30 days.
If you're not happy with our answer, you can complain to the Office of the Privacy Commissioner of Canada.
Changes
If we change this policy, we'll update the date at the top. If a change is important, we'll tell businesses that use LAP by email first.
Contact
Dylan Orr, LAP System, Niagara Falls, Ontario, Canada. support@lapsystem.ca