This Privacy Policy applies to 4th Wall Solutions LLC, operating as 4THWALL ("4THWALL," "we," "our," or "us"). We build AI infrastructure for trades contractors and service operators, and we operate that infrastructure on our clients' behalf. You can reach us at:
4th Wall Solutions LLC
119 Towne Street, Stamford, CT 06902
(203) 670-9477
andrew@4thwall.solutions
Security and privacy contact: security@4thwall.solutions
This policy distinguishes between two groups whose data we handle differently:
From prospects and clients: name, business name, email, phone, business type, the content of messages you send us, billing details (handled by our payment processor — we never store full card numbers), and per-client configuration you provide during onboarding (service area, hours, voice, etc.).
From end customers (on behalf of our clients): name, phone, email, address, and the content of SMS / web-chat conversations they have with the contractor's AI receptionist. This data is stored on a per-client basis and is only accessible to the contractor it belongs to.
From our website: server logs (IP, user-agent, request path, response code) generated by our hosting provider as part of normal web operations. We do not run third-party analytics, advertising trackers, or cross-site tracking pixels on 4thwall.solutions today.
By providing your phone number and checking the SMS consent box on our contact form, you expressly consent to receive recurring automated marketing and transactional text messages from 4th Wall Solutions at the phone number provided. These messages may include:
Frequency: Up to 6 messages per month. Rates: Msg & data rates may apply. Age: Our SMS program is intended for individuals 18 years of age or older.
To opt out: Reply STOP at any time to any 4th Wall Solutions message to unsubscribe. You will receive a one-time confirmation and no further SMS will be sent. Reply HELP for help or contact us at andrew@4thwall.solutions. Opting out of SMS will not affect your ability to receive our services through other channels. Consent is not a condition of purchase.
SMS opt-in information is never shared, sold, or rented to third parties beyond the carriers and platform vendors required to deliver the message itself.
No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. Information sharing to subcontractors in support services, such as customer service, is permitted. All other use case categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.
We use the following service providers to operate the 4THWALL platform. Each is contractually bound by confidentiality and data-protection terms. If a client adds an integration we don't list here (e.g., their own scheduling tool), we'll let the client know in writing.
| Provider | Purpose | Data |
|---|---|---|
| Cloudflare (US) | Worker runtime, database (D1), KV cache, cron, DNS | All operational data — client configs, conversation history, events, request logs |
| Vercel (US) | Marketing site + serverless API proxies | Inbound form submissions, server-side request logs |
| Anthropic (US) | Claude AI — drafts SMS replies, briefings, lead summaries, campaign copy | Conversation content, business context, customer messages (transient — Anthropic does not train on our API traffic) |
| GoHighLevel (US) | CRM, SMS/email delivery to end customers | End-customer contact info, conversation content, automation workflow state |
| SMS carriers via GHL (Twilio, US) | Delivers the actual SMS messages | Phone number, message body, delivery status |
| Slack (US) | Operator-facing notifications and team coordination | Operational notifications about leads, alerts, briefings; no raw end-customer PII in default messages |
| Google Workspace (US) | Email and calendar for the 4THWALL team | Email correspondence |
| Stripe (US) | Billing | Client billing contact, payment instrument tokens (we never see card numbers) |
| US Census ACS5 (US) | Optional ZIP-level demographic enrichment of inbound leads | ZIP code only — no PII sent to Census |
| OpenStreetMap Nominatim (EU/intl.) | Optional geocoding of inbound leads | Address fields only |
| US National Weather Service (US) | Storm-mode triggering | Lat/lon only — no PII |
If you'd like a Data Processing Addendum (DPA), email andrew@4thwall.solutions.
Several parts of our platform use AI (Claude by Anthropic) to draft messages and summaries. AI-generated SMS replies are intended to qualify leads, schedule appointments, and answer routine questions. The AI is configured to escalate complex, sensitive, or high-stakes questions to a human operator at the contractor's business. Pricing, contractual commitments, and final decisions are made by humans, not the AI. If you believe an automated response harmed you, contact us at andrew@4thwall.solutions and we will review.
We retain information only as long as needed to provide services and meet legal obligations. Default retention periods on the 4THWALL platform:
Clients may request shorter retention as part of their service agreement.
We do not sell, rent, or trade your personal information. We disclose information only as follows:
We use industry-standard administrative, technical, and physical safeguards: encryption in transit (HTTPS), encryption at rest at the database layer, per-client authorization secrets so one client cannot access another's data, restricted internal access, secret rotation procedures, and audit logging. No system is perfectly secure.
If we become aware of a security incident that compromises your personal information, we will notify affected individuals and applicable regulators without undue delay, and in any case no later than 72 hours after discovery where required by law.
Depending on where you live, you may have the right to access, correct, delete, or port your personal information; to limit or object to certain processing; to withdraw consent; and to not be subject to automated decisions that produce legal effects without a human review path.
To exercise any of these rights, email andrew@4thwall.solutions. We will verify your identity (using the email or phone we already have on file) and respond within 30 days. There is no cost for reasonable requests.
California residents (CCPA / CPRA): You have the right to know what personal information we collect, to delete it, to correct it, to opt out of any sale or sharing (we do neither), and to limit use of sensitive personal information. You may designate an authorized agent to make a request on your behalf.
EU/UK residents: If you are located in the EU or UK, you have rights under the GDPR / UK GDPR. We act as a processor on behalf of our clients with respect to end-customer data. To exercise your rights against the controller, contact the contractor whose website you submitted information through.
Our services are not directed to children under 13 (or under 16 in jurisdictions where that is the threshold). We do not knowingly collect personal information from children. If we learn we have, we will delete it.
Our infrastructure is operated primarily in the United States. If you access our services from outside the US, your data will be transferred to and processed in the US. We use providers who offer appropriate safeguards for cross-border transfers where required.
We may update this policy. Material changes will be communicated to active clients by email and noted with a new effective date on this page. Continued use after the effective date constitutes acceptance.
Privacy questions, data-rights requests, security reports: security@4thwall.solutions. General contact: andrew@4thwall.solutions · (203) 670-9477.