Privacy Policy

Last updated: October 14, 2026

Medalist ("we", "us") is a business name of H2N Ventures LLC, a Florida limited liability company. We set up and run websites, AI receptionists, booking, CRM and review systems for local businesses (our "clients"). This policy explains what information we handle in two situations: when you deal with Medalist directly, and when you deal with one of our clients through a system we run for them.

1. When you deal with Medalist directly

  • Contact details you provide: name, phone number, email address, business name and message content when you use our chat, book a call, fill out a form or contact us.
  • Communications: the content of SMS, email, chat and voice conversations you have with us or with our AI assistant.
  • Usage data: standard analytics (pages visited, device type, approximate location) collected with cookies through Google Analytics.

We use this information to answer you, provide the services you ask for, send messages you agreed to receive, and improve our website and services.

2. When you deal with one of our clients

When you call, text, book with, or leave a review for a business that uses a Medalist system, we handle your information on behalf of that business, only to provide its system, and as required by law. That business decides how your information is used, and its own privacy policy applies. This can include:

  • your name, phone number, email and address;
  • call recordings, transcripts and call summaries from calls answered by the business's AI assistant;
  • text messages, appointment details and notes;
  • photos of your rooms and voice notes taken by the business during an in-home estimate;
  • photos you upload to see products in your room (the visualizer).

To ask for access to, correction of or deletion of this information, contact the business directly. You can also write to us at the address below and we will forward your request and help the business answer it.

3. AI assistants and call recording

Calls answered by our AI assistant, or by an AI assistant we run for a client, start by saying that you are speaking with an AI assistant and that the call may be recorded and transcribed. Recordings and transcripts are used to book appointments, write call summaries and improve the service for that business. Unless the business asks for a different period, recordings and transcripts are deleted after 90 days.

4. Visualizer photos

Photos uploaded to the visualizer are sent to third-party AI services only to create the preview of the product in your room. The previews are illustrations; the physical sample and the business's written quote are what count.

5. SMS / text messaging

If you give a phone number and agree to receive text messages (from us or from a business that uses our system), you may receive texts that answer your request, confirm or remind you of an appointment, or ask for a review after a job. Message frequency varies. Message and data rates may apply. Reply STOP at any time to opt out, or HELP for help. Consent to receive texts is not a condition of any purchase.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent are excluded from all categories of sharing in this policy and will not be shared with any third parties.

6. Who we share information with

We do not sell personal information and we do not share it for anyone's marketing. We share it only with service providers that make the systems work, under obligations to protect it: our CRM and communications platform (CRM, phone, texting, AI assistant and website hosting), phone carriers, the AI model providers used by those services and by the visualizer, Google (Business Profile and analytics), website hosting providers and payment processors. We may also disclose information when the law requires it.

7. Security and incidents

We use reasonable administrative, technical and physical safeguards, including individual logins, two-factor authentication where available, and access limited to the people who need it. If a security breach affects personal information we handle for a client, we notify that client without undue delay, and no later than 10 days after we determine that it happened, so the client can give any notices the law requires.

8. Retention and your rights

We keep information for as long as needed to provide the services and as the law requires. When a client's agreement with us ends, we deliver its data to the client and then delete it from the accounts we control. For information you gave Medalist directly, you can ask for access, correction or deletion at any time by emailing support@medalisthq.com.

9. Children

Our services are meant for businesses and adults. We do not knowingly collect information from children under 13.

10. Changes

We may update this policy. The date at the top shows the latest version.

Contact

Medalist · H2N Ventures LLC · Florida, USA
support@medalisthq.com