Privacy Policy (service)

All legal pages · Terms · Privacy Policy · Acceptable Use · Cookies · DPA · Subprocessors · Report a security problem

This policy covers the Digital Minions service: the app each client business uses, Nell's phone and text line, and the website chat and forms a client adds to its own site. It also covers our marketing website and its contact form (section 3.3).

Who we are: Savage and Co Digital LLC, a Wyoming limited liability company ("Digital Minions", "we"), an offer from Brand Building Machine.
Contact: help@digitalminions.co · 1309 Coffeen Avenue STE 1200, Sheridan, WY 82801
Support hours: Monday–Friday, 9 a.m.–5 p.m. Eastern Time, excluding U.S. federal holidays.
Last updated: 30 October 2026

1. Who this covers, and our role

• People who use the app for a client: owners, admins and members (the client's staff).
• A client's own customers and leads: people who call or text the client's Nell line, fill in its website form, use its website chat, or get email, calls or texts the client sends through the app.

For data about a client's customers and staff, the client decides why and how it is used. We process it on the client's behalf, under our agreement with them and the Data Processing Addendum. If you are a client's customer, contact that business first; we will help them answer you.

We act for ourselves, as the "controller" (under the California law, the "business"), only for: billing and account administration for the client and its staff (name, work email, plan, usage and invoices); keeping the service secure and preventing abuse (logs, rate limits, alerts); meeting our legal duties; and answering you when you write to us directly or through our website's contact form (section 3.3).

2. How the service is set up

• One deployment and one database per client, never shared with another client. The client chooses the region when the workspace is made: US West, US East, EU West or Asia Southeast. Off-site backups stay in the same region.
• Hosting: Railway.
• Our operator console watches the deployments. It receives counts and health flags only. It never receives knowledge, chats, leads, tasks or names.

3. What we collect

3.1 From a client and its staff

• Account and sign-in: name, work email, role, and how you signed in (an emailed one-time link, a passkey, or single sign-on). Sessions are kept on the server. They end after 12 hours idle or 30 days at most, or sooner if an owner sets shorter limits, and they end when you sign out.
• Business details: the business profile, the front-desk profile (services, booking rules, price list, policies, FAQs), the Memories, and the "Get to know you" answers.
• Work in the app: chats with minions, channel messages, tasks, approvals, outputs (drafts, images, reports), knowledge and its history, skills, routines, meeting recaps, and the audit and activity logs.
• Voice: voice notes sent to a minion are transcribed. A voice note in a channel or direct message is transcribed only when that message @mentions a minion, so the minion can act on it; the words are shown only to the people who can see that message. Other voice notes there are never transcribed, and none are for health practices. Meeting recordings are transcribed when you record or send a minion to a meeting.
• Texting registration: the business's legal name, EIN, address and contact, for carrier registration. The EIN is masked everywhere except the form.
• Number porting: the account details, PIN and latest bill for a number you move to Nell. These are stored encrypted, never shown again, and deleted after the port completes.
• Connected accounts: if you connect Google, Microsoft, Slack, HubSpot, QuickBooks, Zoom or another app, we store the access credentials encrypted (AES-256-GCM). What a minion reads there is used for the work you ask for.
• Billing: plan, usage and invoices. Card details are entered on Stripe's pages and held by Stripe.

3.2 From a client's customers and leads

• Calls with Nell: the caller's number, the call recording, the transcript and summary, and the outcome. Nell's first sentence on every call says she is an AI assistant and that the call is recorded.
• Texts, WhatsApp, Messenger and Instagram messages: the number or account ID, and the messages sent and received.
• Website form: name, phone, email and request. If the consent box is ticked, we also keep the consent record: the exact wording and its version, the time, the IP address, the browser and the page. The box is never pre-ticked.
• Website chat: the transcript and any contact details the visitor gives. To limit abuse, we keep a scrambled form (a keyed hash) of the visitor's IP address.
• Customer record: a timeline built from the above, and notes the client's team or minions add.
• Opt-outs: STOP, "please stop texting me", an unsubscribe link and similar requests, on every channel.
• What the app refuses to store: card numbers, passwords and Social Security numbers in customer notes.

3.3 From visitors to our website and contact form

• No trackers. Our marketing website sets no cookies and uses no analytics, advertising pixels or third-party scripts.
• The contact form asks for your name, email address and message, and, if you choose to give it, your phone number. We use these details only to answer your request and, if you checked the box, to send the service texts the disclosure describes. We do not use them for promotions, and we do not sell or share them.
• The text message box is optional and never pre-checked, and the form works without it. Consent is not a condition of purchase. If you check it and give a phone number, we send service texts about your inquiry, appointments, account and support requests only.
• The consent record. Only if you check the box and give a phone number, we keep the consent record: your phone number, the date and time, the consent method (the website contact form), the version and exact wording of the disclosure you saw, the page, your IP address and your browser. We keep it as described in section 8.
• Where your request goes. The form sends your request to Digital Minions staff, who answer it; it is not stored in a client's workspace. To limit abuse, we count requests per address for a short time, and a hidden field catches automated form-fillers.

4. How we use it

• To run the service the client chose: answering and placing calls, texts and emails, drafting content, keeping the business's knowledge, booking appointments, and reporting.
• Approvals come first. By default, email, texts, calls, publishing and payments wait for a person's approval, under the client's policy. Outreach also passes opt-out, consent and calling-hour checks.
• To bill the client for its plan and usage.
• To keep the service secure and working: rate limits, signature checks, alerts, backups and audit logs.
• We don't use one client's data to serve another client.
• We do not sell personal information, and we do not share it for cross-context behavioral advertising, as the California law and other state laws define those terms. We have not done either in the last 12 months. The app has no advertising or analytics trackers.
• We use the data we hold for a client only to provide the service to that client. We do not use sensitive personal information to infer characteristics about anyone.

5. AI providers

A minion's work goes to the AI model chosen for it: Anthropic, OpenAI, xAI or Google, or one the client hosts. Each request carries only what that task needs: the instructions, the relevant business knowledge, and the conversation or customer details involved. Requests to OpenAI and xAI are sent with store: false. Each provider handles API data under its own terms. Its training and retention terms are summarised on the subprocessor page, and we review them when a provider changes them.

We do not use your content to train AI models. We use AI service providers to process content so we can deliver the features you request.

6. Who we share it with

We share data with the providers that run the service, and only for the features a client turns on. The full list, with what each one receives, is at /legal/subprocessors. We may also disclose data when the law requires it, or as part of a sale, merger or reorganisation of our business, in which case the new owner must keep honouring this policy and the client's agreement. If the law asks us for a client's data, we tell the client first unless the law forbids it. We may also disclose data where needed to protect the safety, rights or property of a person, a client or Digital Minions. The "Text messages" section below has no exception for these cases: mobile numbers and SMS opt-in information are not sold or shared with third parties or affiliates for their marketing or promotional purposes.

Twilio delivers text messages and calls for us as a processor (a "service provider"). It receives the phone numbers and the message content it needs to deliver them. The consent records themselves (the wording, time, IP address and browser) stay in the client's own database and are not sent to Twilio.

Text messages

7. Who at Digital Minions can see client data

Digital Minions support can sign in only if an owner allows it, for a period the owner sets (30 days by default, 90 at most). An owner can end it at any time. Every support sign-in is in the client's access log, and owners are told.

When signed in, support sees what an admin sees. It never sees private chats, private requests or private notes. It can't export data, read the audit log or close the workspace.

8. How long we keep data

• Client data is kept while the client uses the service. Owners can set how long each kind is kept: calls, transcripts, texts, chats, outputs and corrections. Out of the box, each is kept until it is deleted. A legal hold pauses deletion.
• Activity log: kept for the life of the workspace, because it is a tamper-evident record. It is not pruned by the retention settings.
• Consent records (text sign-ups and form consents):

We retain limited records of SMS consent—including your phone number, consent date and time, the consent method, and the wording you accepted—for four years after you withdraw consent or our last message to you, whichever is later, where permitted by law. These records are restricted to compliance and legal purposes and are not used to resume messaging. We may retain a minimal opt-out record to honor your request not to receive texts. Deletion requests are subject to lawful record-retention exceptions.

• Backups: A snapshot every night, checked when it is taken and kept 30 days. They are kept on the same storage volume. If off-site backup is set up, a copy also goes to an S3-compatible store in the same region. Snapshots are encrypted, locked to the client's own key, once the client vault is set up; until then they are plain. Deleted data leaves the backups as old snapshots age out.
• Staff who leave: their personal layer (private notes and chats, My voice samples, voice notes) is deleted 90 days after they are removed.
• Port paperwork is deleted after the port completes.
• Opt-outs are kept even after a customer is forgotten, so that person is never contacted again.
• Closing the workspace: after a 14-day cooling-off period, the business's data, local snapshots and off-site copies are deleted. Until Digital Minions removes the deployment, a minimal record stays: the audit and access logs, legal holds, opt-outs and forget marks. We keep it until we remove the deployment, which we do within 30 days after the cooling-off period ends, unless the law or a legal hold requires us to keep it longer.
• At our providers: the providers keep their own copies under their terms. For example, Twilio keeps message metadata for 40 days and message bodies for up to 30 days in its backups.

9. Your choices and rights

• A client's customers: ask the business you dealt with. In the app, its owner or admin can download what we hold about one customer, or forget a customer.
  • Forgetting deletes that person's calls, texts, leads, consent records, follow-ups, chats, notes and customer record, and removes their name, number and address from tasks, bookings, approvals and activity.
  • We also ask Twilio to delete its copies of those texts and recordings, and remove the minions' own Slack posts that named them.
  • Only the opt-out is kept.
  • Backups age out on their schedule. A restore or import can't bring a forgotten person back.
• Stop messages: reply STOP to any text, say so on a call, use the unsubscribe link in any email, or tell the chat. The opt-out applies on every channel.
• Client staff: an owner can export the workspace from Settings › Your data. Other people's private items stay out, even of the owner's export.
• Your rights. Depending on where you live (for example California, Colorado, Connecticut, Texas, Virginia and other states), you may have the right to know and get a copy of your personal data, to correct it, to delete it, to opt out of the sale or sharing of it, targeted advertising and profiling (we do none of these), and to appeal if we refuse. You will not be treated worse for using these rights.
  • How to ask: if you are a client's customer, ask that business; we help it answer.
  • To request access to, correction of, or deletion of your personal information, or to exercise other applicable privacy rights, email help@digitalminions.co. We may need to verify your identity. We respond without undue delay and within 45 days of receiving your request, or sooner if applicable law requires.
  • How we verify you: we match the request to the account email by sending a one-time confirmation to it, or, for a text request, we ask you to reply from the mobile number concerned. We never ask for a Social Security number or card number. An authorized agent may ask for you; we may ask for proof of their authority. There is no charge, unless requests are clearly excessive or repeated.
  • If we say no: you can appeal by replying to our answer, and we answer the appeal within 45 days. If you are still not satisfied, you can contact your state attorney general.

10. Security

The security measures are listed in the Data Processing Addendum (Annex 2). They include:

• credentials encrypted with AES-256-GCM;
• single-use sign-in links and server-side sessions;
• signature checks on every webhook;
• a tamper-evident audit log;
• treating outside content as data, never as instructions.

To report a vulnerability, see /security/disclosure.

If we become aware of a personal data breach affecting your personal information, we will notify you without undue delay and within 72 hours of becoming aware of it, unless applicable law requires earlier notification or legally restricts notification. We will share the information available at that time and provide material updates as our investigation continues.

For personal data we hold for a client, the Data Processing Addendum (section 8) also sets out what we tell the client. The client decides how to tell its own customers and regulators.

11. Children

The service is for businesses and isn't directed to children under 13. We don't knowingly collect personal information from a child under 13 for our own purposes. If you think a child has given us personal information, write to help@digitalminions.co and we will delete it.

12. Cookies

The app uses only the cookies it needs to work, and no advertising or analytics trackers. See /legal/cookies.

13. Changes

We will post changes here and update the date. For material changes, we will email clients at least 30 days before they take effect, unless the law or an urgent security need requires a change sooner, in which case it applies when posted. The text messages section and the SMS Terms carry their own version and effective date; the version you agreed to is kept with your sign-up.