Privacy Policy

FrontDesk ("FrontDesk", "we") provides an AI phone receptionist for businesses. This policy explains what we collect and how we use it. It is a plain-language summary and not legal advice.

What we collect

• Account data: your email and a hashed password.
• Business configuration: business name, hours, greeting, the knowledge you provide (typed, uploaded, or imported from your website), your phone number and forwarding choice, and any calendar you connect.
• Call data: for calls your receptionist handles, we and our voice provider process call audio, transcripts, caller phone numbers, and the actions taken (messages, bookings).
• Billing data: handled by Stripe; we store only a customer/subscription reference, never card numbers.

How we use it

• To operate your receptionist — answer calls, book appointments, and notify you.
• To show you your call history and account.
• To provide support, prevent abuse, secure and debug the service, and improve its quality, accuracy, and reliability, including tuning our own prompts and configuration. We do not use data obtained through Google Workspace APIs (including Google Calendar data) to develop, train, or improve any generalized or foundational artificial-intelligence or machine-learning models, and we do not transfer it to any third party for that purpose. Where we use call content (audio and transcripts) to improve our service, we take reasonable steps to minimize and de-identify personal information, and you may contact us to opt your account out.
• To meet legal, safety, and compliance obligations.

We do not sell your data or your callers' data.

Service providers (subprocessors)

We share data only as needed with the providers that power the service:

• ElevenLabs — voice AI (speech, language model, call handling).
• Twilio — telephony and SMS.
• Google Calendar — availability and booking, when you connect a calendar.
• Stripe — subscription billing.
• Cloudflare and our hosting — delivery and infrastructure.

Call recording & disclosure

Your receptionist can disclose at the start of a call that it is an AI assistant and that the call may be recorded. Recording laws vary by location; you are responsible for configuring disclosure appropriately for the jurisdictions you operate in. You can adjust or disable the disclosure in your settings.

Retention & your choices

• We keep call and account data while your account is active. You can permanently delete your account and all associated data yourself, at any time, from Settings → Danger zone in your dashboard — this removes your receptionist, phone number, call history, bookings, and requests, cancels your subscription, and cannot be undone. You can also contact us to request deletion.
• Disconnecting a calendar or releasing your number stops further processing for that resource. Disconnecting Google Calendar revokes our access and deletes the stored authorization token.

Security & data protection

We protect your data, including sensitive data such as authorization tokens, with layered safeguards:

• Encryption in transit: all traffic to and from the service uses TLS/HTTPS.
• Encryption at rest for sensitive credentials: sensitive secrets — including your Google OAuth refresh token — are encrypted with AES-256-GCM before they are stored; other secrets are held in a protected configuration store.
• Access control: production data is accessible only to authorized personnel who need it to operate the service, over authenticated, least-privilege channels.
• Data minimization: for calendar booking we read only free/busy time ranges — never your events' titles, descriptions, guests, or contents — and we write only the booking events your receptionist creates.
• Isolation & deletion: each account's data is logically separated, and you can permanently delete it yourself at any time (see Retention above).

Google user data & Limited Use

When you connect Google Calendar, FrontDesk requests only the access needed to book appointments during calls:

• See when you are free or busy — to find open times so your receptionist offers only genuinely available slots. We query only free/busy time ranges; we never read your events' titles, descriptions, attendees, or contents.
• Create and manage booking events — to place the appointments your receptionist books on your calendar.

FrontDesk's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We use Google Calendar data only to provide the appointment-booking feature you requested.
• We do not use Google Workspace data — raw, aggregated, anonymized, or derived — to develop, train, or improve generalized or foundational AI/ML models, and we do not transfer it to any third party for that purpose.
• We do not sell Google user data or use it for advertising.
• Human access to Google user data is limited to the narrow cases the policy permits (for example, with your consent, for security, or to comply with law).

Text messages (SMS)

If you provide your mobile number in FrontDesk (when verifying your mobile during setup, or in your dashboard notification settings), you agree to receive account text messages from us: one-time verification codes and order, booking, and request alerts. This is a transactional service to the account owner's own number — we do not send marketing texts.

• No sharing or selling of mobile data: FrontDesk does not share or sell your mobile information — including your phone number and SMS/text-messaging opt-in consent — with any third parties or affiliates for marketing or promotional purposes, and does not share it with any third party for their own purposes. The telecom provider that transmits these texts acts solely as our service provider to deliver your account messages on our instructions and may not use your number for any other purpose.
• Message frequency varies — for example, a verification code when you set up or contact support, and one alert per booking.
• Message and data rates may apply.
• Reply STOP to any message to opt out at any time, or HELP for help. You can also manage or remove your number in your dashboard settings.

Contact

Questions or deletion requests: contact us.