Privacy Policy

Data Sharing and Disclosure

We do not sell your personal information, and we do not share it except as necessary to provide our service:

• With OpenAI, a third-party AI provider, which processes call audio and conversation content in real time solely to generate the AI agent's responses during a call. Calendar data (including OAuth tokens or calendar event details, described below) is never sent to or processed by OpenAI.
• With Twilio, our telephony provider, to route and connect phone calls.
• With Stripe, our payment processor, to process subscription billing.
• With the business you contacted, who can view call transcripts, bookings, and leads captured on their behalf through their dashboard.
• If a business has connected a Google Calendar or Outlook Calendar to sync bookings, calendar event data is exchanged directly with Google's or Microsoft's own APIs to create, update, and remove those events, and to check free/busy availability. This data is not shared with any other third party.

Data Protection

We use the following measures to protect your information:

• All data in transit between your browser, our servers, and connected third-party services (including Google and Microsoft) is encrypted using TLS.
• Passwords and one-time login verification codes are stored using one-way cryptographic hashing and are never stored or transmitted in plain text.
• Access to a business's data, including any connected calendar integration, is restricted to that business's own authorized team members.
• Credentials for connected calendar integrations are stored in our database, protected by the same access controls and transport encryption described above.

Data Retention and Deletion

• If a business disconnects a Google or Outlook Calendar integration, we immediately delete our stored copy of that connection's access credentials and configuration. Disconnecting through our dashboard does not automatically revoke our app's access on Google's or Microsoft's side — to fully revoke access, please visit your Google Account's or Microsoft Account's own third-party access permissions page.
• If a business account is deleted, all associated data — including any connected calendar integration's stored credentials, bookings, and call records — is deleted from our systems.
• We do not retain calendar data for any purpose beyond providing the booking-sync feature itself while a business's integration remains connected.

Google API Services User Data Policy

Our use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use data obtained through the Google Calendar API to develop, improve, or train generalized or foundational AI/ML models. Calendar data obtained through this integration (free/busy availability and the booking events we create on a business's behalf) is used solely to check appointment availability and to create, update, or cancel calendar events for confirmed bookings.