Privacy Policy

Rally is a messaging platform for local service businesses, operated by M2Innovate LLC. Text messages are sent by each business to its own customers; Rally hosts their sign-up and consent pages on this site. References to “Rally,” “we,” and “us” in this policy mean M2Innovate LLC.

This policy covers the Rally mobile app, the Rally website at rallyai.net (including the pages we host for businesses, such as sign-up, quote, and invoice pages), and the phone numbers, text messages, and calls handled through Rally. It applies to two groups of people:

• Businesses and their team members who sign up for and use Rally (“you”).
• Their customers — people who text, call, or email a business that uses Rally, or who open a page that business sends them.

When a business uses Rally to talk with its customers, the business decides what to collect and why, and we handle that information on the business’s behalf to provide the service. If you are a customer of a business that uses Rally, that business’s own privacy practices also apply to you.

Information we collect

From businesses and team members

• Account details: your name, email address, and mobile number. If you sign in with Apple or Google, we receive the name and email address you choose to share (with Apple, this may be a private relay address).
• Business details: business name, address, and, if you register to send text messages, the information carriers require for that registration, such as your legal business name, EIN, and owner contact details.
• Content you add: notes, voice notes, jobs, quotes, invoices, and replies you write or approve.
• Contacts, only if you allow it: the app can read your phone’s address book so you can tell existing contacts about your Rally number. Your address book stays on your phone. Only the numbers you choose to text are sent to us.
• Screenshots you share: if you use the share sheet to send Rally a screenshot of a message, we receive that image. We never read photos you have not shared with us.
• Device information: a push notification token so we can send you alerts. Notifications carry no customer message content.

From customers of those businesses

• Contact details: phone number, email address, name, and service address.
• Messages: the content of texts and emails exchanged with the business through Rally.
• Calls and voicemail: calls to a Rally number may be recorded and transcribed, and callers hear a notice saying so before that happens. Voicemails are recorded and transcribed.
• Consent records: when and how you agreed to receive texts, including the exact wording you were shown, and any STOP or START replies.

From visitors to rallyai.net

• If you join our notify list, the email address you submit.
• If you fill out a business’s request or sign-up form, the details you enter, which go to that business.
• Your IP address is used briefly to block abuse of our forms. We do not store it for any other purpose.

We do not collect your precise or approximate location, health information, or browsing history. We do not use advertising identifiers, and rallyai.net does not use analytics or advertising cookies.

How we use information

• To provide Rally: route calls and messages, keep track of jobs and follow-ups, draft replies for the business to review, and send the messages the business approves or has set to send automatically.
• To transcribe calls and voicemails and read shared screenshots, so the business can see what was said and who said it.
• To register a business’s phone number with carriers, honor opt-outs, and meet telecommunications rules.
• To sign you in, keep accounts secure, prevent abuse, and provide support.
• To send you service emails and alerts about your account.

Artificial intelligence. Rally uses Google’s Vertex AI service to classify messages, draft replies, transcribe audio, and read text from screenshots. Before message text is sent for classification, we remove details such as phone numbers and email addresses where we can. A business’s own history is used to tailor drafts for that business only. We do not use your content or your customers’ content to train AI models, and we do not let our AI provider use it for that purpose.

We do not sell personal information, and we do not share it for targeted advertising.

SMS & mobile opt-in

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Information sharing to subcontractors in support services, such as customer service, is permitted. All other use-case categories exclude text-messaging originator opt-in data and consent; this information will not be shared with any third parties.

Message frequency. Messages are conversational and relate to a customer’s own job with the business they contacted — confirming appointments, sending and following up on quotes, coordinating arrival times, and answering questions. Frequency varies with the conversation; many messages are replies to the customer. There is no fixed or recurring send schedule, and we do not send marketing or promotional texts.

Message and data rates may apply. Standard message and data rates from your mobile carrier may apply to messages you send or receive. Reply STOP to any message to stop receiving texts, or HELP for help.

See our SMS Messaging Terms for how business text messaging works, including who sends messages and how consent is established.

Connected accounts

You can choose to connect other accounts to Rally. We use that access only to provide the feature you turned on, and you can disconnect at any time in Settings. Access tokens are stored encrypted.

• Gmail: to send email to your customers from your own address when you approve it, and to keep those conversations together in Rally.
• Google Calendar: read-only, to see when you are booked.
• Google Business Profile: to keep your business phone number up to date and to show and answer customer reviews and questions.
• QuickBooks, Stripe, or Square: read-only, to match payments to jobs.

Rally’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, we do not sell it, we do not use it to train AI models, and people at Rallydo not read it unless you ask us to for support, it is needed for security or to comply with the law, or it has been made anonymous.

Who we share information with

We share information only with the service providers that help us run Rally, and only what each one needs:

• Google Cloud — hosting, storage, and the Vertex AI service described above.
• Twilio — phone numbers, text messages, calls, recordings, and carrier registration.
• Clerk — sign-in and account management. Apple and Google if you use their sign-in.
• Postmark — sending and receiving email. Resend — our notify-list emails.
• Cloudflare and Vercel — network delivery, security, and hosting for rallyai.net.
• Expo, Apple, and Google — delivering push notifications.

Within a business’s account, the business owner and the team members they invite can see the customers, messages, and jobs the business shares with them. We may also disclose information if the law requires it, to protect people’s safety or our rights, or as part of a merger or sale of our business, in which case this policy continues to apply.

How long we keep information

• Call and voicemail audio, and shared screenshots: deleted once the item is matched to a customer. Items that can’t be matched are kept for up to 7 days so the business can file them, and all such files are deleted within 30 days at most. Twilio’s copy of a recording is deleted as soon as we have it.
• Raw transcripts and text read from screenshots: 7 days. Anything the business saves to a customer’s record stays with that record.
• Customers, messages, and jobs: for as long as the business keeps its account, unless the business or the customer asks us to delete them.
• Quote and invoice links: stop working after 30 days (quotes) or 90 days (invoices).
• Forwarded emails: the original copy is deleted after one year.
• Backups: overwritten on a rolling basis, within about 14 days.
• Security and audit records: up to 7 years. These record that an action happened, not the content of messages.

Deleting your account

You can delete your account in the Rally app under Settings → Delete account, or by emailing info@rallyai.net from the address on your account with the subject “Delete my account.” Once you confirm, sending stops immediately and you can no longer sign in. We then delete the business and its data, including its customers, messages, recordings, and phone number, within 30 days, and email you when it is done. If you signed in with Apple, we also revoke Rally’s access to your Apple ID. Team members who delete their own access are removed right away; the business’s data stays with the business.

We keep a minimal record that the account existed and was deleted, along with the security and audit records described above, so we can show that we honored the request and meet our legal obligations.

Your choices and rights

• Stop texts: reply STOP to any message. Reply START to opt back in.
• Access, correct, or delete: businesses can view and edit their data in the app. Customers can ask the business they dealt with, or email us at info@rallyai.net. We will verify the request and respond within 45 days.
• Notify list: unsubscribe using the link in any of our emails.

Depending on where you live, you may have additional rights, such as the right to know what we hold about you or to appeal a decision about your request. We will not treat you differently for exercising them. To make a request, email info@rallyai.net.

Security

Information is encrypted in transit and at rest. Access to customer data by Rally staff is limited to support and security work and every access is logged. No system is perfectly secure, but we work to protect your information and will notify you if a breach affects it, as the law requires.

Where information is stored

Rally is operated from the United States, and information is stored and processed in the United States.

Children

Rally is a tool for businesses and is not directed to children under 13. We do not knowingly collect information from children under 13. If you believe a child has given us information, email info@rallyai.net and we will delete it.

Changes to this policy

If we make a material change, we will update the date above and let account holders know by email or in the app before it takes effect.

Contact

M2Innovate LLC. Questions or requests: info@rallyai.net.