GreetScore

Effective November 10, 2026

Privacy Policy

Who we are

GreetScore is a product of Sky Power Services LLC, a Florida limited liability company based in Palm Beach, Florida. In this policy, "GreetScore," "we," and "us" mean Sky Power Services LLC. Contact us at [email protected].

This policy describes how we handle information when businesses use our small counter microphone and conversation-analysis service, visit our website, or contact us. It applies to audio, transcripts, scores, and related personal information. A business's own privacy notice also applies to recordings made at its premises.

Our role and the business's role

The business customer decides where and why to record conversations at its premises. It is the controller of those recordings, or the "business" under applicable state privacy law. GreetScore acts as its service provider or processor under our agreement. We process recordings on the customer's behalf to provide the service and carry out the uses authorized in that agreement and allowed by law.

The business is responsible for giving customers and employees clear notice before recording, displaying the provided "recorded for quality assurance" signage, and obtaining consent where required. Signage alone does not necessarily establish valid consent. The business must comply with applicable recording laws, including all-party-consent laws, and employee notice and labor requirements.

We manage business contact information and website operational information for our own account administration and security purposes. Any use of recordings to improve or train our models remains subject to our customer agreement, applicable service-provider restrictions, and any required notice or consent. Contractual permission does not override those restrictions.

Information we collect

We receive information from business customers, their authorized users, conversations captured by devices at their premises, and direct contacts or website requests. Businesses should keep devices away from private areas and avoid collecting information that is unnecessary for service coaching.

How we use information

We use information to record and transcribe service interactions, generate scores and coaching analytics, deliver reports and alerts, support accounts, administer subscriptions, troubleshoot devices, prevent misuse, and protect the service. Authorized business users can review their data and decide how to use the coaching.

We also use recordings, transcripts, and derived data to improve the product and train and evaluate our speech and coaching models, within our customer agreements and applicable law. We de-identify information where practical, but this is not a promise that all training data is anonymous. We do not authorize unrelated advertising uses or identification of people by their voices. When a use requires additional notice, consent, or a different legal arrangement, it must be in place before that use begins.

AI processing and service providers

Audio and transcripts are processed by automated speech-to-text and AI systems to assess the words, timing, and tone of an interaction. Human review may be needed for support, security, quality checks, or model improvement, with access limited to authorized personnel. Automated scores are estimates, not statements of fact about a person's ability or intent.

We use contracted subprocessors for cloud hosting and storage in the United States, speech-to-text processing, AI model processing, and related technical support. They process information under contractual confidentiality, security, and purpose restrictions. We do not give providers blanket permission to use recordings for their own unrelated model training. Business customers may request information about our current subprocessors at [email protected].

Retention and deletion

We retain recordings, transcripts, and derived scores for the service and authorized model training until the business requests deletion or its account ends, unless a legal obligation requires a longer period. Business account, billing, support, and security records are kept only as needed for those purposes and applicable legal obligations. Minimal website logs are retained only as needed for operations and security.

An authorized business contact can email [email protected] to request deletion of an account, a station's records, or identifiable interactions. We verify the requester and scope, coordinate any necessary export, remove the covered data from active systems and future training datasets, and instruct applicable subprocessors to delete it. We aim to complete active-system deletion within 30 days after verification and scope confirmation, subject to applicable request deadlines, and explain any lawful exception or delay.

Backup copies are isolated from ordinary use and removed through the backup replacement cycle, targeted within 90 days. Data retained for a legal obligation or dispute is restricted to that purpose and deleted when the reason ends. Deletion from source datasets does not automatically reverse training already completed; we assess applicable requirements and use available measures to address personal information in trained models. We do not promise that a model can be made to forget a particular interaction.

Information that has been de-identified under applicable law may be retained for aggregate analytics and model improvement. We maintain it in de-identified form and do not try to re-identify it except where permitted to test the de-identification process.

Security

We use encryption in transit and at rest, access controls, and role-based permissions to protect personal information. Access is limited to authorized business users, personnel, and service providers who need it for the permitted purposes. We use operational safeguards to monitor and respond to security incidents. No storage or transmission method is completely secure.

Businesses must protect their accounts, limit report access, secure their networks, and notify us promptly of suspected unauthorized access. Shared staff displays should show only information the business is authorized to share.

Sharing and advertising

We disclose recordings, transcripts, and reports to the business that controls them and its authorized users, and to contracted providers needed to operate the service. We may disclose information when legally required, to investigate abuse or protect rights and safety, or in a business transfer subject to appropriate confidentiality and continued privacy obligations.

We do not sell personal information or share it for cross-context behavioral advertising. We do not use customer recordings to target ads. We do not disclose personal information to independent third parties for their own marketing.

Your requests and choices

If you were recorded as a customer or employee, direct access, correction, deletion, or other privacy requests first to the business where the recording occurred. Include enough context, such as the location and approximate date and time, to help it find the interaction. Avoid sending sensitive details or audio by ordinary email. We help the business respond as required by our agreement and applicable law.

You can also email [email protected]. We may need to verify your identity and coordinate with the business before acting. An authorized agent may submit a request with evidence of authority, where allowed. We do not require an account to submit a request and do not discriminate against people for exercising privacy rights. Some requests may be limited by legal exceptions, other people's rights, or our inability to locate a record.

Ask the business about its recording practices, available alternatives, and how to avoid being recorded before speaking at the counter. For information we control directly, such as account contact details, send requests to us.

California privacy notice

Where the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA/CPRA), applies, the categories we collect or may have collected in the preceding 12 months are identifiers and contact information; business and transaction information; internet, device, and network activity; audio; employment-related information in staff interactions; and inferences such as service and sentiment scores. Sensitive personal information may be captured incidentally if someone states it in a recording. We do not seek it for advertising or unrelated profiling.

The sources, purposes, retention criteria, and recipient categories for this information are described above. We disclose these categories for the business purposes described in this policy to the controlling business and our contracted providers. We do not sell or share them for cross-context behavioral advertising, and we have no actual knowledge of selling or sharing information about anyone under 16.

Eligible California residents may request to know and access personal information, including categories and specific pieces; correct inaccurate information; and delete information, subject to exceptions. They may use an authorized agent and exercise their rights without unlawful discrimination. Where applicable, they may limit certain uses of sensitive personal information. We do not use sensitive information to infer characteristics outside the permitted service purposes. Because we do not sell or share information for advertising, there is no such activity to opt out of; Global Privacy Control signals do not change that practice.

For recordings controlled by a customer, submit these requests to that business; we assist as its service provider. For information we control, email us. We verify requests using information appropriate to the request and respond within applicable legal time limits, explaining any exception or authorized extension.

Other state privacy rights

Depending on your state and whether its privacy law applies, you may have rights to confirm processing, access or obtain a portable copy, correct or delete information, and opt out of sale, targeted advertising, or certain profiling used for decisions with legal or similarly significant effects. We do not sell information or use it for targeted advertising, and our service scores are coaching aids rather than decisions with those effects.

Use the request process above. If we deny a request concerning information we control, you may appeal by emailing us with "Privacy appeal" in the subject. We will review the decision and explain the outcome and any available route to contact your state attorney general or privacy regulator, within the time required by applicable law. For customer-controlled recordings, appeal to the business responsible.

Voice and biometric information

We analyze words and vocal tone, but we do not create voiceprints or identify individuals by voice. A voice recording can still be personal information. If we introduce voice identification or biometric processing, we will first provide separate notice and obtain any required consent, together with a specific retention and deletion policy.

Children

GreetScore is a business service and is not directed to children under 13. We do not knowingly solicit their personal information or offer accounts to them. If you believe information about a child has been collected improperly, contact the business responsible or email us so we can investigate and coordinate appropriate deletion.

United States service

GreetScore is offered for use by businesses in the United States only. Service data is hosted and stored in the United States. The service is not offered for deployment outside the United States. If you contact us from elsewhere, your information will be handled in the United States, where privacy laws may differ from those where you live.

Changes and contact

We may update this policy as our service or legal obligations change. We will post the revised policy with an updated effective date and notify business customers of material changes. Where required, we will provide additional notice or obtain consent before a new use begins.

Privacy questions and requests: [email protected]. GreetScore, a product of Sky Power Services LLC, Palm Beach, Florida.