Privacy Policy

Who we are

FrontDesk AI is an AI phone receptionist for small businesses — restaurants, trades, clinics and property managers. When we say "you" below we mostly mean the business that signed up. Where a section is about the people who call a business, it says so.

What we collect, and why

We collect only what the product needs to answer a business's phone and keep its book:

• Business account details. Name, email, business name, address, hours, services and settings — everything entered at sign-up or in Settings, used to run the receptionist for that business.
• Calls. Calls answered by the AI may be recorded and transcribed. We store the recording, transcript, summary and outcome of each call so the business can see who called and what was agreed.
• Caller details. A caller's name, phone number, and what they book or report (a reservation, a service visit, a work order) are stored in that business's account so returning callers are recognized and bookings can be honored.
• Text messages. Confirmation and follow-up texts we send, and replies we receive (such as CANCEL), with delivery metadata.
• Billing. Payments are processed by Stripe. We store Stripe's identifiers and subscription status; card numbers never touch our servers.

Connected Google Calendars

A business can optionally connect a Google Calendar. If it does, here is exactly what happens — this section covers all data received from Google APIs:

• What we access. The list of calendars on the connected Google account (names only, to offer a picker), events on the one calendar the business chooses (to add, update and remove the events that mirror its bookings, and to read busy times), and the Google account's email address (shown in Settings so the business can see which account is connected).
• What we do with it. Bookings made through FrontDesk AI are written to the chosen calendar, and existing events on that calendar are treated as busy time so the AI does not double-book. That is the entire use.
• What we never do with it. Google Calendar data is never sold, never used for advertising, never shared with third parties except as needed to provide this one feature, and never read by humans except with the business's explicit permission (for support), for security, or where the law requires it.
• No AI training. We do not use any data received from Google APIs to develop, improve or train generalized artificial-intelligence or machine-learning models.
• Storage and revocation. Google access tokens are stored encrypted (AES-256-GCM) and used only server-side over TLS. Disconnecting in Settings deletes our copy of the tokens and asks Google to revoke them; access can also be revoked any time at myaccount.google.com/permissions.

FrontDesk AI's use and transfer to any other application of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Who processes data for us

We use a small set of service providers, each only for what it says on the tin:

• Twilio — phone numbers, calls and SMS delivery.
• Retell — real-time voice AI on calls (audio and transcripts pass through it to power the conversation).
• Stripe — payments and subscriptions.
• Vercel — application hosting.
• Neon — the database, encrypted at rest.
• Google — only when a business connects its calendar, as described above.

We do not sell personal information, and we do not share it with anyone for advertising.

Retention and deletion

Data is kept while the business's account is active, because a booking history is the product. Deleting the account deletes its data — calls, customers, bookings, messages and any Google connection — and cancels billing. Callers who want their details removed from a specific business's records should contact that business, or contact us and we will help.

Cookies

We set a session cookie to keep you signed in. There are no advertising or analytics cookies.

Children

FrontDesk AI is a business tool and is not directed at children under 13. We do not knowingly collect their information.

Changes and contact

If this policy changes materially we will note the new effective date here. Questions, or a deletion request: ssaibusiness101@gmail.com.