Privacy Policy

1. Information We Collect

2. How We Use Information

• Provide the Service: operate AI agents, process communications, manage leads, schedule appointments, and deliver analytics.
• Improve the Service: analyze usage patterns, diagnose technical issues, and develop new features.
• Personalize experiences: tailor AI agent behavior, conversation history, and dashboards to your business context.
• Communicate with you: send transactional emails, service alerts, billing notifications, and (with your consent) marketing communications.
• Comply with legal obligations: respond to lawful requests, enforce our terms, and protect against fraud.

We do not sell your personal information to third parties. We do not use your business data or conversation content to train AI models.

3. Third-Party Services

The Service integrates with third-party providers to deliver core functionality. When you use these features, your data is shared with the relevant provider in accordance with their privacy policies:

• Anthropic — AI language model processing for agent conversations and content generation.
• Twilio — SMS, voice calls, and WhatsApp messaging.
• ElevenLabs — AI voice synthesis for phone interactions.
• Nylas — email and calendar integration.
• Brevo — transactional and marketing email delivery.
• Late — social media content scheduling and publishing.
• Composio — third-party application integrations (e.g., Zoom).
• Supabase — database hosting and authentication.
• Cloudflare — content delivery, DNS, and network security.

We select providers that maintain industry-standard security practices. However, we are not responsible for the privacy practices of third-party services. We encourage you to review their privacy policies.

4. Data Storage & Security

Your data is stored on infrastructure hosted in the United States, primarily in the AWS us-east-1 region and Supabase cloud. We implement reasonable technical and organizational safeguards including:

• Encryption in transit (TLS 1.2+) and at rest for sensitive data.
• Secrets and API keys stored in AWS Secrets Manager, never in source code or database tables.
• Multi-tenant data isolation — each tenant's data is logically separated and inaccessible to other tenants.
• Role-based access controls within the platform dashboard.
• Webhook signature verification and timing-safe secret comparisons.
• Rate limiting and input sanitization on all public-facing endpoints.

While we take reasonable measures to protect your information, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.

5. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. Specifically:

• Account data: retained for the duration of your subscription and for a reasonable period afterward for legal and operational purposes.
• Conversation history: retained to maintain context for AI agents and improve service quality. Available for deletion upon request.
• Audit logs: retained for up to 90 days for operational monitoring and troubleshooting.
• Upon account termination: we will delete or anonymize your data within 30 days of a written request, except where retention is required by law.

6. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Access: request a copy of the personal data we hold about you.
• Correction: request that we correct inaccurate or incomplete data.
• Deletion: request that we delete your personal data, subject to legal retention requirements.
• Portability: request your data in a structured, machine-readable format.
• Opt-out: unsubscribe from marketing communications at any time.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

7. Children's Privacy

The Service is designed for business use and is not directed at individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 18, we will promptly delete it. If you believe a child has provided us with personal information, please contact us at [email protected].

8. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will notify you of material changes by posting the updated policy on this page and updating the "Effective Date" above. For significant changes, we may also notify you via email or through the dashboard. Your continued use of the Service after any changes constitutes acceptance of the revised policy.

9. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, contact us at: