Privacy Policy

AI Sales Employee (“AI Sales Employee,” “we,” “us,” or “our”) provides an AI-powered sales assistant for trade and home-service businesses, including lead discovery, automated outreach, an AI phone receptionist, appointment scheduling, and a customer relationship management dashboard (the “Service”). This Privacy Policy explains what information we collect, how we use it, and the choices you have. By using the Service, you agree to the practices described here.

Information We Collect

Account information. When you sign up, we collect your name, email address, and business details you provide (business name, industry, service area, business hours, and similar settings you configure in the dashboard).

Customer and lead information. To provide the Service, we store the data you and your AI employee generate about your own prospects and customers — for example, business names, contact details, addresses, service history, notes, call transcripts, and appointment records. This information belongs to you as the account holder and is used only to operate the Service on your behalf.

Phone call data. If you use the AI receptionist feature, calls are handled through our telephony provider (Twilio) and we store call metadata, recordings or transcripts where enabled, and any information callers provide (such as their name, issue, or requested appointment time) so the receptionist can act on your behalf and so you can review call history.

Payment information. If you subscribe to a paid plan, billing is handled directly by our payment processor, Stripe. We do not receive or store your full card number.

Google Account Data (Gmail and Calendar)

If you choose to connect your Google account, we request access to Gmail and Google Calendar solely to power the following user-facing features of the Service:

• Creating and sending outreach emails and email replies to your leads and customers, on your instruction or with your prior review depending on your settings.
• Reading messages within email threads you have started through the Service, so the AI can detect and summarize a prospect’s reply.
• Checking your Google Calendar’s availability, and creating, rescheduling, or cancelling calendar events (including a video-meeting link where applicable) when you or your AI receptionist books an appointment.

We access Google user data only to provide these Service features to you — never for advertising, and never to build behavioral profiles unrelated to the Service. We do not sell Google user data, and we do not share it with third parties except the sub-processors described below that are strictly necessary to run the Service. Any use of Gmail or Calendar data by AI models is limited to generating the specific email or scheduling response you requested; it is not used to train general-purpose models.

Connecting Google is optional. You can disconnect your Google account at any time from Settings → Connected Accounts, which immediately revokes the Service’s stored access. You can also revoke access directly from your Google Account’s Security & third-party access page at any time.

How We Use Information

We use the information above to: operate and improve the Service; generate AI outreach, replies, and receptionist responses on your behalf; schedule and manage appointments; provide customer support; process payments; and maintain the security and reliability of the Service. We do not sell your personal information or your customers’/leads’ information.

Third-Party Service Providers

We rely on a small number of service providers to operate the Service, each of which processes data only as needed to perform its function for us:

• Supabase — authentication and database hosting.
• Google — Gmail and Calendar access, when you connect your Google account.
• Anthropic — generates AI outreach content, replies, and receptionist responses.
• Twilio — powers inbound/outbound phone calls for the AI receptionist.
• Stripe — processes subscription payments.

These providers are contractually and technically limited to processing data on our behalf and are not permitted to use it for their own independent purposes.

Data Storage and Security

Data is stored in our Supabase database. OAuth credentials for connected Google accounts (access and refresh tokens) are encrypted at rest using AES-256-GCM application-layer encryption and are only ever decrypted server-side — they are never exposed to your browser or to any other user. We use industry-standard practices to protect information, but no method of storage or transmission is completely secure, and we cannot guarantee absolute security.

Data Retention and Deletion

We retain account, customer, and lead data for as long as your account is active, so the Service can continue to function. If you disconnect your Google account, we stop accessing Gmail and Calendar immediately and delete the stored credentials for that connection. If you close your account or request deletion, we will delete or anonymize your account data within a reasonable period, except where we are required to retain it for legal, tax, or dispute-resolution purposes.

Your Choices and Controls

You can review, update, or delete your account and business information from the dashboard at any time. You can disconnect Gmail/Calendar access at any time from Settings. To request a copy of your data or deletion of your account, contact us using the information below.

Children’s Privacy

The Service is intended for business use and is not directed to individuals under 18. We do not knowingly collect personal information from children.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes to the Service or applicable law. We will update the effective date above when we do, and for material changes we will provide reasonable notice.

Contact Us

If you have questions about this Privacy Policy or how we handle your data, contact us at tristanmlewis99@gmail.com.