1Who is responsible
Block9 LLC, PO Box 2, Barnhart, MO 63012, 636-224-8069. Privacy questions: support@block9.app.
2Information we collect directly
- Discovery and enquiry information. When you submit a discovery scope or speak with our demo agent, we collect your business name, contact name, role, email, phone, website, industry, the problem you described, your systems, and your timeline.
- Account information. Name, business email, phone, agreement number, and authentication credentials for the client portal.
- Billing information. Billing contact, invoice history, and payment status. We do not store your card number. Payment details are handled by Stripe and never touch our servers.
- Support and conversation records. Messages you exchange with AgentB9 in the portal, and any conversation you escalate to our team.
- Technical information. Standard server and application logs, including IP address, browser type, and pages visited, used to operate and secure the service.
3How we use it
- To prepare a scope and quote, and to communicate about your engagement.
- To configure, run, monitor, and improve the agents we manage for you.
- To invoice you, collect payment, and meter usage against your plan.
- To send service communications — reports, usage alerts, invoices, incident notices.
- To secure the service, detect abuse, and meet legal obligations.
We do not sell personal information, and we do not share it with third parties for their own marketing.
Mobile phone numbers and SMS consent are handled separately and strictly. Mobile information — including your number and your opt-in to be texted — is never shared, sold, or rented to third parties or affiliates for marketing purposes. It is shared only with the messaging providers who transmit a message on our behalf, and only for that purpose. See our SMS Terms.
3bCookies and similar technologies
We use a small number of strictly necessary cookies. The client portal sets a session cookie so you stay signed in and so we can tell your requests apart from someone else's — without it, the portal cannot function. We also rely on standard server logs for security and troubleshooting.
We do not use advertising cookies, cross-site trackers, or third-party marketing pixels. Because our cookies are strictly necessary for a service you asked for, we do not show a consent banner. You can block cookies in your browser, but you will not be able to sign in to the portal.
4Who we share it with
We share information only with the service providers needed to deliver the service, each bound by contract to protect it. The current list — Anthropic, xAI, Supabase, Vercel, Stripe, and Resend, plus any voice or messaging vendor your own configuration requires — is maintained on the Data Processing & Subprocessors page.
We may also disclose information where required by law, to enforce our agreements, or in connection with a merger or sale of the business — in which case we will give notice before your information becomes subject to a different policy.
5AI models and training
Your data is not used to train foundation models. The model providers we use commit contractually that data submitted through their business APIs is not used to train their models. We do not license, sell, or contribute your data to model training, and we do not use one client's data to improve another client's agent.
Each client's knowledge base and configuration are isolated. Nothing from one client's context is reachable from another's.
6Your customers' information
When your customers call, text, or message an agent we manage, that conversation may include their name, contact details, address, account or appointment information, and whatever else they choose to say. We process that information on your behalf and under your instructions, solely to operate your agent.
You are responsible for the lawful basis for that processing and for any notice or consent your jurisdiction requires — particularly for call recording and AI disclosure. See our AI & Call Recording Disclosure.
7Retention and deletion
We keep information for as long as your account is active and as needed to deliver the service, then for the period required to meet legal, tax, and accounting obligations.
On cancellation, at your request, we will export all of your data to you and then delete it from our systems. Backups expire on their normal cycle. Records we are legally required to keep — invoices and tax records, for example — are retained for the statutory period.
8Security
We use encryption in transit and at rest, row-level access controls that scope every record to a single client, least-privilege access to connected systems, approval gates on sensitive actions, audit logging, and credential storage that is encrypted separately from the database. Client API credentials, where we hold them, are encrypted with a key held outside the database.
No system is perfectly secure. If a breach affects your information, we will notify you promptly and work through it with you — our incident process is designed around telling you early rather than investigating quietly.
9Your choices and rights
- Access, correct, or delete the personal information we hold about you.
- Receive a copy of your data in a portable format.
- Opt out of marketing email at any time — service and billing notices will continue while your account is active.
- Ask questions about how your information is handled and get a straight answer.
Contact support@block9.app. If you are an end customer of one of our clients, contact that business directly — they control the data and we act on their instructions, though we will help them respond.
10Children
Our service is for businesses. We do not knowingly collect personal information from anyone under 13, and agents we configure are not designed for children.
11Changes
We will post updates here with a revised date, and give notice of material changes before they take effect.