theFurnace AI — Privacy Policy

Effective date: 2026-09-22

This policy explains how Capital Commission Management, LLC, doing business as theFurnace.ai ("theFurnace," "we," "us"), handles personal information. It covers two very different groups of people, so it's organized that way: our clients (insurance agents who buy our service), and the consumers our clients ask us to contact.

1. If you are a client

What we collect.

• Signup and intake: name, email, phone, business name and address, timezone, licensed states.
• Compliance registration: the business details required for A2P/10DLC texting registration, such as EIN, state of formation, and business address as registered with the IRS, and supporting documents you upload (for example an IRS SS-4 or CP-575 letter).
• Billing: your plan, transactions, and payment status. Card payments are processed by Stripe; we never see or store full card numbers.
• Service data: your lead files, your calendar connection, messages sent and received through your account, booked appointments, and usage records.
• Communications: emails, texts, and support conversations with us.
• Scrub Service: if you use our DNC + Litigator Scrub, the files you upload and the results we produce. The Scrub Privacy Addendum at dnc.thefurnace.ai/privacy explains how we handle them and controls for that product.

Where it lives. We run the service on established platforms, each holding what it needs to do its job: Stripe (payments), GoHighLevel (CRM, contacts, calendars), SignalHouse (text message delivery), our AI conversation provider (message handling), Supabase (our database), Google Workspace (spreadsheets, documents, email), Resend (transactional email), Discord (internal team coordination), and, for the Scrub Service, website hosting and compliance data providers (do-not-call, litigator, and phone-number data, used to run scrubs). All are U.S.-based services and data is processed in the United States.

How we use it. To provide and improve the service, register your business for compliant texting, bill you, support you, send you service notices, and meet legal obligations. We may analyze message and booking data across accounts to improve CHLOE's performance.

What we never do. We don't sell your personal information, and we don't share it with third parties except the service providers above, professional advisers, or when the law requires it.

2. If you are a consumer we texted

Our clients are licensed insurance agents. When CHLOE texts you, it's on behalf of the agent named in the message, using contact information that agent provided or arranged, about products you inquired about. For that data, the agent decides why you're being contacted; we process it as their service provider.

• We keep records of the messages, your replies, and any appointment you book.
• Reply STOP at any time and messaging to you stops immediately. We also honor do-not-call and known-litigator scrubbing before campaigns start.
• To ask about the data behind an outreach, contact the agent named in the message, or contact us at support@thefurnace.ai and we'll route your request to the right client and help them honor it.

3. Website visitors

Our sites collect standard technical data (IP address, browser, pages viewed) for security and analytics. We may also use advertising cookies and pixels (for example Meta or Google) to measure our ads and reach people who visited our pages. Where those tools count as "sharing" personal information under a state privacy law, you can opt out using your browser's controls, the platform's ad settings, or by emailing us at support@thefurnace.ai.

4. Retention

We keep client account data for as long as the account is active plus the period needed for legal, billing, and dispute purposes. Files uploaded to our Scrub Service and their results are kept as described in the Scrub Privacy Addendum: no set expiration while the account is open, and deleted within 30 days of a verified deletion request. Message logs and consent/opt-out records are kept longer because texting law requires proof of compliance. We delete or anonymize data when it's no longer needed.

5. Security

Data is encrypted in transit, access is limited to people and systems that need it, and payment credentials live only with our payment processor. No system is perfectly secure; if a breach affects your data, we'll notify you as the law requires.

6. Your rights

Depending on your state, you may have rights to access, correct, delete, or get a copy of your personal information, and you won't be discriminated against for using them. Email support@thefurnace.ai and we'll respond within the time the law sets. If we hold your data as a client's service provider, we'll route the request to that client. We do not sell personal information. If advertising pixels on our sites count as "sharing" under your state's law, Section 3 explains how to opt out.

7. Children

Our services are for business use by adults. We don't knowingly collect information from anyone under 18.

8. Changes

We'll post updates here with a new effective date and notify clients of material changes by email.

9. Contact

Capital Commission Management, LLC d/b/a theFurnace.ai 1600 E 8th Ave, STE A200 Tampa, FL 33605 Email: support@thefurnace.ai Phone: 813-358-8389