Last updated: July 8, 2026
This Privacy Policy ("Policy") describes how Pharsale LLC, a Wyoming limited liability company ("Provider," "we," "us," "our"), collects, uses, stores, and discloses personal information in connection with our AI-powered customer communication platform, Orsyle (the "Service"). The Service includes the Orsyle website chat service, a virtual agent that our business customers embed on their own websites. The legacy AI phone receptionist service has been retired. This Policy continues to cover previously collected Call Data under the retention and access terms below. This Policy is incorporated by reference into our Terms of Service.
This Policy applies to four categories of individuals whose data we may process:
If you are a Chat Visitor or a Caller, please note that your conversation or call is being handled on behalf of the Customer (the business whose website you visited or whose number you called). The Customer is the data controller for your conversation data; we act as their service provider (processor). Questions about how a specific business handles your data should be directed to that business.
When you create an account or subscribe to the Service, we collect:
When a Chat Visitor uses the Orsyle virtual agent on a Customer's website, we collect:
Every chat conversation begins with a greeting identifying the assistant as an AI assistant. Chat messages are processed by a third-party large language model to generate the assistant's replies (see Section 5). The chat assistant is write-only: it cannot access, look up, or confirm any existing customer record, and it only creates a new service request from the information the Visitor provides in that conversation.
Details a Visitor provides are forwarded to the Customer (the business whose website the Visitor used) by SMS and/or email, labeled as coming from an unverified website visitor, and chat transcripts are made available to the Customer through their dashboard.
When the legacy phone receptionist service answered an inbound call on a Customer's behalf, we collected:
Legacy calls began with a mandatory AI and recording disclosure that could not be disabled by the Customer.
When you visit our websites or use the Service dashboard, we may collect:
The Service is designed to avoid collecting sensitive personal information through the virtual agent or the AI voice agent. The AI will not solicit and is instructed to decline:
If a Caller or Chat Visitor volunteers such information, it may be captured in the recording or transcript. We implement commercially reasonable measures to flag and redact such data, but cannot guarantee complete redaction.
WE DO NOT USE CUSTOMER DATA, CHAT DATA, CALL DATA, CALL RECORDINGS, CHAT OR CALL TRANSCRIPTS, OR AI-GENERATED CONTENT TO TRAIN, FINE-TUNE, IMPROVE, BENCHMARK, OR DEVELOP OUR AI MODELS OR ANY THIRD-PARTY AI MODELS. THIS PROHIBITION APPLIES REGARDLESS OF ANONYMIZATION OR AGGREGATION.
This commitment is central to our data practices and is also a key element of our compliance with the California Invasion of Privacy Act (CIPA), under which we operate as the Customer's authorized agent—not as a third-party interceptor.
In addition, we do not:
We use the following categories of third-party service providers to deliver the Service. Each provider processes data only as necessary for its designated function and is bound by contractual obligations regarding data protection.
Key sub-processors include:
We require each sub-processor to maintain security standards consistent with industry best practices. We do not permit sub-processors to use your data for their own purposes, including AI model training, except as necessary to provide their service to us.
A current list of sub-processors is available upon request by contacting contact@orsyle.com.
We retain all Call Data—including call recordings, transcripts, and AI-Generated Content—for four (4) years from the date of each call. This retention period applies regardless of whether the Customer's subscription remains active. After the four-year period, data is permanently deleted.
Call Data may be moved to cold storage after 30 days of account inactivity; retrieval from cold storage may take up to 24 hours.
We retain Chat Data—including chat transcripts and Visitor-provided contact details—for four (4) years from the date of each conversation, the same period that applies to Call Data. Hashed IP addresses and session metadata are retained with the associated conversation record; raw Visitor IP addresses are not stored for chat. Customers may view their chat transcripts in the Service dashboard, and export the lead details captured from those conversations, while their subscription is active.
We retain Customer account information for as long as the account is active and for a reasonable period thereafter to fulfill legal obligations, resolve disputes, and enforce our agreements. If a Customer deletes their account, we will delete or anonymize account data within 90 days, except where retention is required by law.
Website analytics and usage data is retained for up to 24 months. Cookies expire as described in Section 9.
Former Customers may request retrieval of their archived Call Data and Chat Data for legal or audit purposes by contacting contact@orsyle.com. Retrieval requests may be subject to a reasonable administrative fee.
We implement commercially reasonable technical and organizational measures to protect your data, including:
No method of transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
We do not collect, store, or process payment card data through the virtual agent or the AI voice agent. Payment processing is handled entirely by Stripe (our PCI-DSS Level 1 certified payment processor) and, where applicable, through the Customer's FSM platform's own payment portal. This architecture descopes our Service from PCI-DSS requirements.
Regardless of your location, you may:
If you are a California resident, you have additional rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act:
For Callers and Chat Visitors:We act as a "service provider" (as defined under CCPA) on behalf of the Customer. CCPA requests from Callers or Chat Visitors regarding their conversation data should be directed to the Customer (the business they called or whose website they used). We will reasonably assist Customers in responding to such requests.
For Customers: You may exercise your rights by contacting us at contact@orsyle.com. We will verify your identity using commercially reasonable methods before processing your request. We will respond within 45 days (extendable by an additional 45 days with notice).
Residents of Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, and other states with comprehensive privacy legislation may have similar rights. We will honor requests consistent with applicable law. Contact contact@orsyle.com to exercise your rights.
If you are located in the EEA, UK, or Switzerland, and your personal data is processed in connection with the Service:
Our websites use cookies and similar technologies. We do not use advertising or tracking cookies. We do not engage in cross-site tracking or behavioral advertising. You can manage cookie preferences through your browser settings. Disabling cookies may affect Service functionality.
Every chat conversation handled by the Service begins with a greeting that identifies the assistant as an AI assistant. This disclosure is enforced by the Service and cannot be removed by the Customer. It is designed to satisfy state bot- and AI-disclosure laws, including the California B.O.T. Act (Bus. & Prof. Code §§ 17940–17943) and Utah SB 149. Chat Visitors are not required to provide personal information; contact details are collected only if the Visitor chooses to share them.
Every call handled by the retired phone receptionist service began with a mandatory disclosure informing the Caller that:
This disclosure is designed to satisfy federal and state requirements including the Telephone Consumer Protection Act (TCPA), California Invasion of Privacy Act (CIPA), and state AI disclosure laws (including Texas SB 140, California AB 2905, Utah SB 149, and Colorado SB 24-205).
Customers may customize the wording of the disclosure but may not reduce it below the minimum required by applicable law. If a Caller does not wish to be recorded, they may disconnect the call.
When the legacy phone receptionist service accessed existing customer records on behalf of a Customer, it used a two-factor verification process:
This approach is designed to satisfy the CCPA's "reasonable degree of certainty" standard for identity verification when accessing low-sensitivity personal information. Only non-sensitive record information (name, address, upcoming appointments) is accessible through the AI; financial data and invoices are never exposed.
The website virtual agent cannot read back, confirm, or disclose any existing customer record. Because a website visitor's identity cannot be verified, the virtual agent is write-only: it only creates a new service request from the information the Chat Visitor provides. Where a Customer has connected a business management tool (such as a field-service CRM), the Service may match a Visitor-provided phone number against the Customer's existing records solely to avoid creating a duplicate; the result of that match is never revealed in the chat.
The Service is a business-to-business platform designed for use by home services contractors. It is not directed at individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child under 16, we will take steps to delete that information promptly.
If you believe a child's information has been collected through the Service, contact us at contact@orsyle.com.
The Service is operated from the United States. If you access the Service from outside the United States, your information will be transferred to, stored in, and processed in the United States, where data protection laws may differ from those in your jurisdiction.
For transfers from the EEA, UK, or Switzerland, we implement appropriate safeguards including:
We may update this Policy from time to time. When we make material changes, we will:
Your continued use of the Service after the effective date of a revised Policy constitutes acceptance. If you disagree with any changes, you may cancel your subscription before the effective date.
Customers may optionally connect their Google Calendar to the Service so that the virtual agent can check availability and schedule appointments on their behalf. This integration is initiated by the Customer through the Service dashboard and is never enabled by default.
When you connect your Google Calendar, you grant the Service permission to:
We request only the narrowest Google Calendar permission needed to provide this feature. We do not request access to your Gmail, Google Contacts, Google Drive, or any other Google service.
Orsyle's use and transfer of information received from Google APIs to any other application will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
You may disconnect Google Calendar at any time from the Service dashboard, or revoke the Service's access directly in your Google Account at myaccount.google.com/permissions. When you revoke access, we stop accessing your calendar and delete the stored OAuth token. Any events already created on your calendar remain under your control.
If you have questions about this Privacy Policy, wish to exercise your data rights, or have a data protection concern, contact us at:
Pharsale LLC
1309 Coffeen Avenue STE 1200
Sheridan, Wyoming 82801
Email: contact@orsyle.com
Phone: +1 307 218 3046
For CCPA-specific requests, you may also submit a verifiable consumer request by emailing contact@orsyle.com with the subject line "CCPA Request."
For GDPR-specific inquiries, including requests for a Data Processing Agreement, email contact@orsyle.com with the subject line "GDPR Inquiry."