Privacy Policy

Last updated: May 2026

1. Information We Collect

We collect information you provide when signing up, including your name, email address, phone number, and business details. When you connect your Google Calendar, we store OAuth tokens to access your calendar data. Call data (transcripts, recordings, metadata) is received from our telephony provider (Retell AI) when calls are made to your business.

2. How We Use Your Information

We use your information to provide the AutoFlowDesk service: answering phone calls, booking appointments on your Google Calendar, displaying call history and analytics in your dashboard, and processing payments via Stripe. We do not sell your personal information to third parties.

3. Third-Party Services

We use the following third-party services: Google (Calendar API for appointment management), Retell AI (phone call handling and transcription), Stripe (payment processing), and Supabase (database hosting). Each service has their own privacy policy governing how they handle your data.

4. Data Storage

Your data is stored securely on Supabase-hosted infrastructure. Calendar tokens are encrypted at rest. We retain your data for as long as your account is active. You may request deletion of your account and all associated data at any time by contacting us.

5. Data Security

We implement industry-standard security measures including encryption in transit (TLS), encryption at rest, row-level security policies on all database tables, and secure OAuth token handling. However, no method of electronic storage is 100% secure.

6. Your Rights

You may access, update, or delete your personal information at any time through your dashboard settings. You may disconnect your Google Calendar integration at any time, which revokes our access tokens. You may request a full export of your data by contacting us.

7. Contact

For any privacy-related questions or requests, contact us at support@getautoflow.online.