Privacy Policy

To operate the service we process: (a) account information for the operator (email); (b) business information you enter to configure a receptionist; (c) calendar/booking data needed to check availability and create, change, or cancel appointments on a connected account; and (d) call records (timestamps, duration, cost, and transcripts/summaries generated by our telephony provider) used to show usage and billing.

When you connect Google Calendar, we request only the scopes needed to check free/busy and manage events you book through the service (calendar.events and calendar.freebusy). We use this access solely to read availability and to create, update, or delete the appointments handled by your receptionist. We do not sell Google user data, do not use it for advertising, and do not share it with third parties except the subprocessors below as required to provide the service. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can revoke access at any time in your Google Account’s security settings or by disconnecting the calendar in the app.

Third-party credentials (calendar and booking tokens) are encrypted at rest. Access is restricted to the operator account. Data is stored on our infrastructure providers (Supabase, Vercel) located in their respective regions.

We rely on: Supabase (database/auth), Vercel (hosting), Retell AI (telephony/voice), Anthropic (prompt generation), and the booking system you connect (Google Calendar and/or Square). Each processes data only as needed to deliver the service.

Connection tokens are kept until you disconnect the provider or delete the project. Call records are retained to support usage history and billing. To delete your data, delete the relevant project or contact us at the email above and we will remove it.

We may update this policy; material changes will be reflected by the “last updated” date above.