Privacy Policy

Effective Date: January 1, 2026

jchowlabs, LLC (“jchowlabs,” “Company,” “we,” “us,” or “our”) is a California limited liability company that operates two service offerings:

This Privacy Policy explains how we collect, use, disclose, and protect information when you access or use our websites, including:

(collectively, the “Sites”).

Demonstration sites are operated by jchowlabs for illustrative purposes and are governed by this Privacy Policy. They do not represent real businesses and do not process real transactions. If you engage jchowlabs to build and operate a voice concierge on your own branded website or telephony system, that client deployment is not covered by this Privacy Policy. Your deployment will be governed by your own privacy policy, and jchowlabs will act as your service provider under a separate written agreement. See Section 12 for the roles and responsibilities in that relationship.

By accessing or using the Sites, you acknowledge that you have read and understood this Privacy Policy.

1. Eligibility and Age Restriction

The Sites and all associated features are intended solely for individuals 18 years of age or older.

We do not knowingly collect, process, or store personal information, voice data, or any other information from individuals under the age of 18. If we become aware that such data has been collected from a minor, we will promptly delete it.

By using the Sites, you represent and warrant that you are at least 18 years old.

2. Scope and Intended Audience

The Sites are directed at residents of the United States. While the Sites are accessible over the public internet, our services, advisory offerings, and compliance posture are designed for a US-based audience.

We do not currently offer services in the EU/EEA and have not implemented GDPR compliance measures. If you are accessing the Sites from outside the United States, please be aware that your data will be processed and stored in the United States, and US privacy law may provide different protections than those available in your jurisdiction. We recommend you carefully consider whether to use the Sites or submit any personal information.

We reserve the right to restrict access to the voice concierge feature from specific jurisdictions where doing so is appropriate in light of applicable biometric or voice-data laws. See Section 10.

3. Categories of Information We Collect

A. Information You Provide Directly

You may voluntarily provide:

Providing this information is optional; however, certain features (such as responding to a contact inquiry) may not be available without it.

B. Voice Concierge — Voice and Transcript Data

Each of our Sites includes an AI-powered voice concierge that can answer questions about the services offered on the site and, where applicable, facilitate a booking or inquiry by collecting your name and telephone number. On jchowlabs.com and jchowlabs.chat, the voice concierge operates as a live agent for jchowlabs, LLC. On demonstration sites, the voice concierge operates in demonstration mode: a simulated experience of a production deployment for a specific industry. Demonstration mode agents differ from our live agents in two ways — (i) the agent discloses at the start of each session that the site is a demonstration site, and (ii) the agent includes a closing promotion identifying jchowlabs as the operator and inviting the visitor to inquire about our managed services.

The voice concierge is opt-in and gated by this Privacy Policy:

If you choose to use the voice concierge on our Sites:

Voice Data and Biometric Privacy Laws

Voice recordings may qualify as biometric information under state laws including the Illinois Biometric Information Privacy Act (BIPA), the Texas Capture or Use of Biometric Identifier Act (CUBI), and Washington’s biometric privacy statute, depending on how they are processed. We treat voice data accordingly:

If you are a resident of Illinois, Texas, Washington, or another state with a biometric privacy statute, see Section 10 for additional rights.

C. Interactive Security and Identity Content

The jchowlabs.com site may, from time to time, host interactive content and labs that demonstrate identity, authentication, and security concepts. Any such content is open and publicly accessible and is designed to run entirely in your browser. Specifically:

Your device will prompt you to grant camera permission before any interactive content uses the camera. You can decline or revoke camera permission at any time through your browser or device settings.

If we introduce interactive content that requires server-side processing, we will update this Privacy Policy before such content is made available.

D. Contact Forms and Spam Protection

Our Sites include contact forms you can use to inquire about our advisory or managed services. When you submit a contact form, we collect:

We use this information solely to respond to your inquiry and, if we enter into an engagement, to maintain the resulting correspondence and contract record. We do not use contact form submissions for marketing lists or advertising.

Contact form submissions are processed by Resend, a third-party email delivery service, which transmits your submission to us. Resend may implement security mechanisms to detect abuse and spam as part of its standard service operation. Resend’s data handling is governed by their Privacy Policy. We do not use Google reCAPTCHA on our contact forms.

E. Cookies, Local Storage, and Tracking Technologies

We use a minimal number of cookies and browser storage mechanisms. We do not use advertising cookies, retargeting pixels, cross-site trackers, or analytics cookies.

First-Party Storage We Set

Privacy Notice Preference (localStorage) — We store your privacy notice selection (accepted or declined) in your browser’s localStorage under the key cookieConsent. This entry never leaves your device and is never transmitted to any server. It persists until you clear your browser’s site data for the relevant jchowlabs domain, or until we issue a material update to this policy, at which point the notice will reappear.

Third-Party Cookies and Storage

Cookies We Do NOT Set

We do not set or permit advertising or retargeting cookies, social media tracking pixels, cross-site tracking of any kind, or analytics or behavioral cookies.

Do Not Track

Some browsers offer a Do Not Track (DNT) signal. Because we do not use tracking, analytics, or advertising technologies on our Sites, DNT signals have no effect on our data practices — we do not track you regardless of whether a DNT signal is present.

Managing Your Consent Preference

You may reset your consent preference at any time by clearing site data or localStorage for the relevant jchowlabs domain in your browser settings. Once cleared, the privacy notice will reappear on your next visit.

4. How We Use Information

We use collected information only to:

We do not sell personal information. We do not use personal information for advertising or commercial profiling. We do not use voice data, transcripts, or any other information collected through the Sites to train AI models or to develop new products.

5. Consent

Access to the voice concierge is gated by a single, clear consent mechanism: a privacy notice displayed on your first visit to any of our Sites. If you decline, the voice concierge is not loaded and no voice processing occurs. If you accept, the voice concierge becomes available, and recording begins only when you affirmatively click the voice button to initiate a session. Informational content on the Sites is accessible regardless of your consent choice.

6. Third-Party Service Providers

We use the following third-party providers to operate the Sites:

Provider Purpose Data Involved
ElevenLabs Voice concierge processing (speech-to-text, conversational AI, text-to-speech) Voice audio, conversation transcripts
Twilio Telephone number provisioning and telephony services for phone-based voice agent deployments Telephone number, call metadata, and call audio as needed to connect and operate telephone-based voice agent calls
Resend Contact form and voice inquiry submission delivery Name, telephone number, and inquiry context submitted through forms or voice concierge
GitHub Static site hosting Request metadata per GitHub’s standard logging
Cloudflare Content delivery, edge routing, DDoS protection and abuse prevention IP address, request metadata, short-lived functional cookies

These providers act as service providers or data processors and are contractually limited in how they may use data on our behalf. We do not authorize any service provider to use your information for their own independent marketing or commercial purposes.

7. Data Retention

Data Type Retention Period
Voice concierge transcripts and audio recordings For website-based voice interactions, retained on ElevenLabs infrastructure for up to 30 days, then deleted. For telephone-based voice agent deployments, related call audio, transcripts, and call metadata may also be processed or retained by Twilio in accordance with the applicable service configuration and Twilio’s retention practices. This schedule serves as our written retention and destruction guidelines for voice data under applicable biometric privacy statutes.
Contact form and voice inquiry submissions (name, telephone, inquiry context) Retained by us as needed for correspondence and any resulting engagement; deleted upon request. Resend retains a copy on their infrastructure per their own retention practices.
Interactive content (camera, video, images) Not retained — all processing is client-side and terminates with the session
Hosting and infrastructure logs Retained for a short period as necessary for security, abuse prevention, and operational integrity, per provider defaults
Privacy notice preference (localStorage) Stored on your device until you clear site data or we update this policy

8. Data Security

We use TLS encryption for data in transit, restrict administrative access to systems containing personal data, and rely on reputable third-party providers for voice processing and form delivery. No system can guarantee complete security. In the event of a data breach affecting your personal information, we will notify affected individuals and relevant authorities as required under applicable law, including California Civil Code §1798.82.

9. California Privacy Rights (CCPA / CPRA)

If you are a California resident, you have the right to:

We do not sell or share personal information as defined under the CCPA/CPRA.

To submit a request: Email privacy@jchowlabs.com with the subject line “California Privacy Request” and a description of your request. We will acknowledge receipt within 10 business days and respond substantively within 45 days, with a possible extension of up to 45 additional days as permitted by law.

We will take reasonable steps to verify your identity before processing access or deletion requests. Because we do not link voice concierge sessions to a persistent identifier, deletion requests for voice data require you to provide information (such as approximate date and time of your session) that allows us to locate the associated data on ElevenLabs’ infrastructure.

10. Biometric-Specific State Rights

If you are a resident of Illinois, Texas, Washington, or another state with a biometric privacy statute, you may have additional rights regarding voice data. We address those rights as follows:

We do not currently operate any content or service that collects, stores, or processes facial geometry, fingerprints, retina scans, or other biometric identifiers on our servers or through a third-party biometric processor.

11. International Users

The Sites are operated from the United States. Our services are designed for a US audience, and we have not implemented compliance measures for non-US data protection frameworks. By accessing the Sites from outside the United States, you understand that your information will be transferred to and processed in the United States, and that US privacy law may provide different protections than those available in your jurisdiction. If you are located outside the US, we recommend you carefully consider whether to use the Sites or submit any personal information.

12. Managed Services and Client Sites

When jchowlabs builds, deploys, or operates a website, voice concierge, or telephony agent for a client, the client is the data controller for personal information collected from their customers, and jchowlabs acts as the client’s service provider under applicable state privacy laws. The client is responsible for their own privacy policy covering their customers’ data. jchowlabs processes personal information solely for the purposes set out in the engagement agreement with that client and does not use client customer data for its own purposes.

This Privacy Policy does not govern data collected on a client’s site. If you are a customer of one of our clients and wish to exercise privacy rights, please contact the client directly.

Demonstration Sites We Operate

We operate demonstration sites to showcase the voice concierge experiences we build for clients. These sites are operated by jchowlabs for illustrative purposes, are not real businesses, and are governed by this Privacy Policy. If you provide your name and telephone number during a demonstration session, jchowlabs receives and retains that information and may use it to follow up regarding our managed services. Each demonstration site identifies jchowlabs, LLC as the operator and links to this Privacy Policy.

Information jchowlabs Collects Directly From Clients

In the course of a managed services or advisory engagement, jchowlabs collects information directly from our client contacts — such as contact details, contract documents, and invoicing information. That information is collected by jchowlabs as a business in its own right, and this Privacy Policy governs its handling.

13. Accessibility

We design the Sites with accessibility in mind and welcome feedback. If you encounter an accessibility barrier or need content in an alternative format, please contact privacy@jchowlabs.com and we will make reasonable efforts to help.

14. Changes to This Policy

We may update this Privacy Policy periodically. Updates will be posted with a revised effective date. For non-material changes, continued use of the Sites constitutes acceptance. For material changes — particularly those affecting collection or use of sensitive personal information or voice data — we will provide advance notice and, where required, seek fresh consent before changes take effect. When we update to a new version, the privacy notice will reappear on your next visit so you can review and confirm your preference.

15. Contact Information

jchowlabs, LLC
California, United States
Privacy inquiries: privacy@jchowlabs.com