Privacy policy.

415 Creative is a digital agency and software platform based in California. We provide marketing services and a multi-tenant communications platform that lets our clients — primarily healthcare practices and service businesses — send and receive appointment reminders, confirmations, follow-ups, review requests, and other transactional and conversational messages with their patients, leads, and customers.

When you receive a message from a 415 Creative client (for example, a medical practice using our platform), 415 Creative is acting as a service provider to that client. The client is the owner of the relationship with you and the controller of your information for the purposes of that messaging program.

We collect the following categories of information:

Information you provide directly

• Contact information you submit through forms on 415creative.com or through our chatbot widget, including name, email address, phone number, and any message content
• Account information if you log in to a 415 Creative product (email, password hash, role, organization)
• Information you provide when you reply to an SMS sent through our platform

Information we collect automatically

• Web analytics: pages visited, referring URL, browser and device information, approximate location (city/region) derived from IP address
• Cookies and similar technologies (see Section 8)
• Log data: IP address, timestamps, request paths, error events

Information collected on behalf of our clients

When you interact with one of our clients through their website, chatbot, or messaging program, we may collect on their behalf: your name, email address, mobile phone number, opt-in status and timestamp, the consent disclosure you saw, and the content of messages you exchange with the client. This information is collected for and controlled by that client; we process it as the client’s service provider.

We use the information we collect to:

• Operate, maintain, and improve our website, products, and Services
• Respond to your inquiries and provide customer support
• Send you transactional communications about our Services
• Deliver messages on behalf of our clients to recipients who have opted in to receive them
• Detect, prevent, and respond to fraud, abuse, and security incidents
• Comply with our legal obligations

If you opt in to receive SMS messages — either from 415 Creative or from a 415 Creative client through our platform — your mobile phone number, opt-in status, and the content of messages you exchange are used solely to deliver the messages you consented to receive.

We do not share mobile information (phone number and opt-in status) with third parties or affiliates for their own marketing or promotional purposes. Mobile information is shared only with our SMS delivery subcontractor (Twilio) for the purpose of delivering messages, and, where applicable, with the specific 415 Creative client whose program you opted in to.

For full details about our SMS programs — including message types, frequency, costs, and how to opt out — see our SMS Terms.

You can stop receiving SMS messages at any time by replying STOP to any message you receive. You can request help by replying HELP, by emailing us at the address in Section 12, or by calling the practice or business that sent the message.

We share information as follows:

• Subprocessors and service providers that help us operate the Services, including:
  • Twilio, Inc. — SMS and voice delivery
  • Resend, Inc. — transactional email delivery
  • Supabase, Inc. — database and authentication infrastructure
  • Vercel, Inc. — web application hosting
  • Anthropic, PBC — AI assistant features used inside our products

  Each subprocessor is bound by contract to use information only to provide services to us.

• Our clients, when the information was collected on their behalf (for example, a lead submitted through their contact form or chatbot)
• Legal and safety reasons, when we reasonably believe disclosure is necessary to comply with law, enforce our terms, or protect the rights, property, or safety of any person
• Business transfers, in the event of a merger, acquisition, or sale of assets, in which case we will provide notice before your information is transferred

We do not sell personal information, and we do not share personal information for cross-context behavioral advertising as those terms are defined under California law.

Some of our clients are healthcare practices. Our platform is configured so that no medical, prescription, treatment, diagnosis, or other Protected Health Information (“PHI”) under HIPAA is included in any SMS message sent through our Services. Messages identify the practice by name and may reference appointment dates, locations, and generic follow-up content, but do not include PHI.

If you are a patient of a 415 Creative healthcare client, the client’s own privacy practices govern your medical record and any clinical communications outside of our SMS platform.

We retain personal information for as long as is necessary to provide the Services, comply with our legal obligations, resolve disputes, and enforce our agreements. Opt-in and opt-out records are retained per TCPA guidelines (typically four years from the last interaction). You may request deletion of information we hold about you as described in Section 9.

We use cookies and similar technologies to keep you signed in to our products, remember your preferences, and measure how our website is used. You can disable cookies in your browser settings; some features of our Services may not work without them.

We do not use third-party advertising cookies or pixels for cross-site behavioral advertising on 415creative.com.

If you are a California resident, you have the right under the California Consumer Privacy Act (CCPA) to:

• Know what personal information we have collected about you
• Request a copy of your personal information
• Request deletion of your personal information
• Correct inaccurate personal information
• Opt out of the “sale” or “sharing” of personal information (we do not sell or share)
• Be free from discrimination for exercising these rights

To exercise these rights, email us at the address in Section 12. We will verify your request and respond within the timelines required by law.

If your information was collected on behalf of one of our clients, your request may be forwarded to that client for action.

Our Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.

We may update this Privacy Policy from time to time. The “Last updated” date at the top reflects the most recent version. Material changes will be highlighted on our website.

Questions about this Privacy Policy or about your information?