Privacy Policy

Last Updated: December 25, 2024

1. Introduction

VoiceAI Admin ("we," "our," or "us") operates the VoiceAI Admin application (the "Service") at appsandwebs.store. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By using our Service, you agree to the collection and use of information in accordance with this Privacy Policy.

2. Information We Collect

2.1. Account Information

When you create an account, we collect:

Email address
Password (encrypted and stored securely)
User role (super_admin, client_admin, or viewer)
Client association (if applicable)

2.2. Google Calendar Integration

When you connect your Google Calendar account, we collect and store:

OAuth access tokens and refresh tokens (encrypted)
Calendar event data created through our Service
Appointment scheduling information

Note: We only access your Google Calendar to create and manage appointments scheduled through our Service. We do not read, modify, or delete existing calendar events unless they were created by our Service.

2.3. Call Logs and Voice Data

When using our voice AI features, we may collect:

Call transcripts and recordings
Call metadata (duration, timestamps, phone numbers)
Call outcomes and summaries
Customer information provided during calls

2.4. API Settings and Configuration

We store:

API keys and credentials (encrypted)
Webhook configurations
Voice agent settings
System prompts and customizations

2.5. Usage Data

We automatically collect:

IP address
Browser type and version
Pages visited and time spent
Date and time of access
Error logs and performance data

3. How We Use Your Information

We use the collected information for:

Service Provision: To provide and maintain our Service
Authentication: To authenticate users and manage access
Calendar Integration: To create and manage calendar appointments
Call Management: To process and store call logs and transcripts
Improvement: To analyze usage patterns and improve our Service
Communication: To send important updates and notifications
Security: To detect and prevent fraud, abuse, and security threats
Compliance: To comply with legal obligations

4. Google Calendar API Usage

Google Calendar API Scopes:

https://www.googleapis.com/auth/calendar - Create and manage calendar events
https://www.googleapis.com/auth/calendar.events - Manage calendar events

We use these scopes exclusively to create and manage appointments scheduled through our Service. We do not access, read, modify, or delete any other calendar events or data.

Limited Use Disclosure: VoiceAI Admin's use and transfer to any other app of information received from Google APIs will adhere to the Google API Service User Data Policy, including the Limited Use requirements.

5. Data Storage and Security

5.1. Data Storage

Your data is stored securely using Supabase, a cloud database service. All sensitive data, including passwords, API keys, and OAuth tokens, are encrypted both in transit and at rest.

5.2. Security Measures

We implement industry-standard security measures:

Encryption of sensitive data
Row-level security (RLS) policies
Secure authentication and authorization
Regular security audits
Access controls and role-based permissions

6. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

Service Providers: With trusted third-party service providers who assist in operating our Service (e.g., Supabase, Google Cloud)
Legal Requirements: When required by law or to protect our rights and safety
Business Transfers: In connection with a merger, acquisition, or sale of assets
With Your Consent: When you explicitly authorize us to share your information

6.1. AI Model Data Sharing

Our Service uses Vapi for voice AI capabilities to facilitate appointment scheduling. Google Calendar data is NOT shared with AI models or third-party AI service providers. Only appointment details (date, time, customer name, phone number) that you provide during voice calls are processed by our voice AI system. Your actual Google Calendar events, calendar metadata, or other calendar data are never sent to AI models or external AI services.

The voice AI processes only the information you provide during the call conversation to create appointments, and this information is stored securely in our database. Google Calendar integration is used solely to create calendar events after the appointment details are confirmed, without exposing your calendar data to AI processing.

7. Your Rights and Choices

You have the right to:

Access: Request access to your personal data
Correction: Request correction of inaccurate data
Deletion: Request deletion of your personal data
Portability: Request transfer of your data
Objection: Object to processing of your data
Withdraw Consent: Withdraw consent for Google Calendar access at any time

To exercise these rights, please contact us using the information provided in the "Contact Us" section below.

8. Data Retention

We retain your personal information for as long as necessary to provide our Service and comply with legal obligations. When you delete your account, we will delete or anonymize your personal data, except where we are required to retain it for legal purposes.

9. Children's Privacy

Our Service is not intended for users under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure that appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes.

12. Third-Party Services

Our Service integrates with third-party services, including:

Google Calendar: For appointment scheduling (see Google's Privacy Policy: https://policies.google.com/privacy)
Supabase: For database and authentication services
Vapi: For voice AI capabilities

These third-party services have their own privacy policies. We encourage you to review their privacy policies to understand how they handle your information.

13. Contact Us

If you have any questions about this Privacy Policy, please contact us:

Email: diegomt2005@gmail.com
Support Email: admin@appsandwebs.store
Website: https://appsandwebs.store

14. Consent

By using our Service, you consent to our Privacy Policy and agree to its terms. If you do not agree with this Privacy Policy, please do not use our Service.