Legal
Privacy Policy
Effective October 2, 2026 · Chase Tolleson
The short version
- We use your information to run Chase AI for you, keep it secure, and meet legal duties.
- We do not sell or share your personal information. No ads, no tracking cookies.
- Your messages and files are processed by our hosting and AI providers. Recordings you upload are deleted once transcribed, and we never receive your call audio.
- You can ask to see, correct or delete your information at any time: support@chasetolleson-ai.com.
On this page
- 1. Who we are
- 2. Information we collect
- 3. How we use it
- 4. How we share it
- 5. We do not sell or share your personal information
- 6. Cookies and browser storage
- 7. How long we keep it
- 8. Security
- 9. Your privacy rights
- 10. Users in the EU and UK
- 11. Information about other people
- 12. Children
- 13. Changes to this policy
- 14. Contact
1.Who we are
Chase Tolleson ("we", "us") runs Chase AI at chasetolleson-ai.com: an AI coaching tool for Chase Tolleson's clients, trained on Chase's own coaching material. This policy explains how we handle personal information about members and visitors.
- Operator: Chase Tolleson
- Email: support@chasetolleson-ai.com
2.Information we collect
Your account
Email, name, role, settings (such as your theme and the language Chase AI answers in), and sign-in codes and session tokens (stored only in hashed form).
What you tell us when you start
Your answers to the first questions, if you give them: what you do and who you serve, your current offer, where you want to be in 12 months, what feels stuck, and how you want to sound.
What you put into Chase AI
- Messages, conversations, feedback and answer ratings.
- Your brand foundation, your niche and offer summaries, and which parts you allow to inform public content.
- Files you upload: documents, screenshots (for example of a DM thread), photos, and recordings or videos (for example sales calls), and links you share for review.
- Transcripts of recordings, and the text of what you say on calls.
- Facts Chase AI remembers about your business so it does not ask twice. You can see and delete them in Your business.
- What it creates for you: documents, video plans and scripts, email campaigns, sales call flows, carousels and to-dos.
Your content may include information about other people, such as prospects on a sales-call recording or in a DM thread. See information about other people.
Voice calls and dictation
Calls and dictation use your browser's built-in speech recognition. Your microphone audio is turned into text by your browser, which may send it to its own provider (for example Google for Chrome, or Apple for Safari) under that provider's terms. We do not receive or store the audio of your calls, only the resulting text. We record how long calls last, to apply limits. The voice you hear is synthetic; to create it we send the reply text (not your voice) to our text-to-speech provider.
Connected tools (optional)
If you connect them: your booking link and website address; Instagram publishing through Zernio (the account you connect and the posts you schedule); and Zoom (read-only access to the cloud recordings you choose to have reviewed, transcribed and then deleted as audio). Disconnecting a tool in Connected tools deletes its stored access.
Usage and security information
Usage counts (messages, call minutes), timestamps, and IP addresses or email addresses used to limit repeated attempts (for example sign-in codes). Our hosting providers also keep short-lived technical logs.
Emails you send us
Anything you send to an @chasetolleson-ai.com address, including replies to our emails.
3.How we use it
- To provide the Service: sign-in, answers, calls, reviews, the brand journey, documents, memory, and check-ins you schedule.
- To send service emails: sign-in codes, your invitation, check-ins you set up, and now and then a note about something new in Chase AI (stop those with the link at the bottom of any of them).
- To keep the Service secure, prevent abuse, and fix problems.
- To support you and look after answer quality, for example when you rate an answer or report a problem, and so Chase can see how the AI answers his clients and correct it.
- To comply with the law and to establish or defend legal claims.
Your content is not added to the library that answers other members. We may use aggregated information that does not identify you (for example how often a feature is used) to improve the Service.
5.We do not sell or share your personal information
We do not sell your personal information, and we do not share it for cross-context behavioral advertising (targeted ads), as those terms are defined in California and other US state privacy laws. We do not use advertising cookies, tracking pixels or analytics that follow you across sites, and we do not use personal information for targeted advertising or for profiling that produces legal or similarly significant effects.
Because there is nothing to opt out of, we do not show a "Do Not Sell or Share" link. If your browser sends a Global Privacy Control signal, we treat it as a request to opt out, which our practices already meet.
7.How long we keep it
| Information | How long |
|---|---|
| Uploaded recordings and videos | Deleted from storage right after they are transcribed |
| Sign-in codes | Valid for 10 minutes and one use; the hashed record is deleted within 30 days |
| Sign-in sessions | End 90 days after you sign in, or sooner when you sign out (on that device, or everywhere else with Sign out other devices in Settings) or your access ends |
| Your account, conversations, foundation, memory, files and everything created for you | While you have access and up to 12 months after it ends (so you can come back and pick up where you left off), then deleted. You can delete conversations, memories and files yourself at any time, and delete your whole account in Settings > Delete my account (or ask us to) |
| Security records (rate limits) and technical logs | Up to 30 days |
| Emails you send us | Up to 3 years after the matter is closed |
Backups are overwritten on their normal cycle. We may keep information longer where the law requires it or for a legal claim.
8.Security
We protect personal information with safeguards that fit the risk, including:
- encryption in transit (HTTPS with HSTS) for the site, the app and our providers;
- one-time sign-in codes and session tokens stored only as keyed hashes, with attempt limits;
- account access checked on every request, and instant sign-out when access ends;
- a strict content security policy;
- uploaded recordings deleted after transcription; and
- access to admin tools limited to the people who need it.
No system is perfectly secure. If a breach affects your personal information, we will notify you and the authorities as the law requires.
9.Your privacy rights
Depending on where you live (for example California, Colorado, Connecticut, Virginia, Texas or another state with a privacy law), you may have the right to:
- know what personal information we collect, use and disclose, and get a copy of it;
- correct information that is inaccurate;
- delete your personal information;
- opt out of the sale or sharing of personal information, targeted advertising and certain profiling (we do none of these); and
- not be discriminated against for using these rights.
Anyone can ask us to see, correct or delete their information, wherever they live. Email support@chasetolleson-ai.com from the address on your account. We will confirm we received your request, may need to verify your identity, and will answer within 45 days (or sooner where the law requires). You can use an authorized agent, who must show us your written permission. If we decline your request, you can appeal by replying to our decision.
Categories, in the terms California law uses: identifiers (name, email, IP address); internet activity (usage within the Service); audio-derived information (call transcripts, not audio); professional information (your business details); and the content of files and messages you choose to send. We collect them from you and from tools you connect, for the purposes in how we use it, and disclose them only to the recipients in how we share it.
10.Users in the EU and UK
If you are in the European Economic Area or the United Kingdom, the GDPR or UK GDPR applies to our processing of your personal data, and Chase Tolleson is the controller.
Legal bases
| Purpose | Legal basis |
|---|---|
| Providing the Service and service emails | Performance of our contract with you (Art. 6(1)(b)) |
| Security, abuse prevention, support and quality | Legitimate interests in a secure, working service (Art. 6(1)(f)) |
| Legal obligations and legal claims | Legal obligation (Art. 6(1)(c)); legitimate interests (Art. 6(1)(f)) |
International transfers
Most of our providers are in the United States, so your personal data is processed there. Where the law requires a safeguard for data sent to the US, we rely on the EU-U.S. Data Privacy Framework (and its UK extension) for certified providers, and otherwise on the European Commission's Standard Contractual Clauses in our providers' data processing terms. You can ask us for details.
Your rights
You have the right to access, correct, delete, restrict or object to our processing of your personal data, to data portability, and to withdraw consent where we rely on it. Email support@chasetolleson-ai.com. We reply within one month (extendable by two months for complex requests).
Complaints. You can complain to the data protection authority where you live or work (in the UK, the Information Commissioner's Office). We would appreciate the chance to address your concern first.
11.Information about other people
When you upload information about other people (for example a sales-call recording, a DM thread or notes about a client), you decide how it is used, and we handle it for you as your service provider (a "processor" under the GDPR) under the Data Processing Addendum in the Terms.
You must have the right to share it, and tell those people about it where the law requires (for example that a call is recorded).
12.Children
The Service is for adults running a business. It is not for anyone under 18, and we do not knowingly collect personal information from children, including children under 13 as defined by the Children's Online Privacy Protection Act (COPPA). If you believe a child has given us personal information, email us and we will delete it.
13.Changes to this policy
We will update this policy when our services, providers or the law change. The date at the top shows the current version. If a change materially affects how we use your information, we will tell members by email or in the app before it applies.
14.Contact
Questions or requests about your personal information: support@chasetolleson-ai.com.
- Operator: Chase Tolleson
- Email: support@chasetolleson-ai.com