There is a distinction that matters throughout this policy. Data about you, our customer, we control. Data about your contacts — the people your agents talk to — you control, and we process it on your instructions.

This site has no analytics scripts, no advertising trackers, and no cookies of our own. Contact links open your own mail or phone app; nothing is submitted to us.

The pricing page loads PayPal’s checkout script when you reach it. PayPal sets its own cookies and handles payment data under its own privacy policy — we never see your card details.

The site is hosted on Vercel, which records standard server logs including IP addresses for security and reliability.

Your name, email, phone number, and business details. Your subscription status from PayPal. The credentials you give us for your own provider accounts, and your agent configurations. Support correspondence.

We use it to provide the service, set your account up, take payment, and contact you about the service. We do not sell it or share it for advertising.

Running an agent means processing personal data about the people it talks to: phone numbers, names, message and call content, transcripts, appointment details, and conversation scores.

That data is yours. You decide what to upload, who to contact, and how long it is kept. We process it to operate the service and for no other purpose — we do not use your contacts’ data to train models, and we do not use it for our own marketing.

You are responsible for having a lawful basis to hold and use it, and for honouring the rights your contacts have over it.

Only the providers needed to deliver the service, each acting on the configuration you set:

• Twilio — phone calls and SMS
• Meta — messages sent through the WhatsApp Business API
• ElevenLabs — voice synthesis and call handling
• Anthropic, OpenAI, or Google — generating agent replies, per your choice
• Google Calendar — availability and bookings, if you connect it
• Supabase — the database holding your account and conversation records
• Vercel — hosting
• PayPal — subscription payments

Message content is sent to your chosen AI provider to generate replies. Their data-handling terms apply to that processing, and they differ between providers — worth reading before you choose one.

When someone replies STOP, unsubscribe, or cancel on any channel, we record that phone number on a permanent opt-out list and close any open conversation. The record is kept precisely so it can be honoured — deleting it would let the same number be contacted again.

Account data for as long as you have a subscription, then up to 12 months. Conversation records until you delete them — sessions can be cleared per agent at any time. Opt-out records indefinitely, for the reason above. Payment records for as long as tax law requires.

Data is encrypted in transit. Provider credentials are held in the database rather than in code, and database access is restricted to the service. No system is perfectly secure; if a breach affects your data we will tell you promptly.

Depending on where you live you may have the right to access, correct, export, or delete your personal data, and to object to processing. Email us and we will act within 30 days.

If you are one of our customers’ contacts rather than a customer, your request goes to them — they decide what happens to their data. Tell us and we’ll pass it on.

Privacy questions: info@dialflowbot.com or 631-530-9911.