Privacy Policy

1. Information We Collect

• Account information: name, email address, and authentication details (including Google sign-in where used).
• Organization data: agents, knowledge base content, phone numbers, and configuration you create.
• Conversation data: transcripts, recordings, messages, and lead records generated by your agents' calls and chats.
• Usage and device data: log data, IP address, and analytics about how the Service is used.

2. How We Use Information

We use the information we collect to:

• provide, operate, and maintain the Service;
• deploy and run your AI agents, including processing calls, chats, and knowledge base retrieval;
• authenticate users and secure accounts;
• process billing and prevent fraud and abuse;
• communicate with you about the Service;
• improve and develop new features.

3. Sharing and Sub-processors

We share information with service providers that help us run the Service, including infrastructure, telephony, speech, and large language model providers (for example, Convex, Twilio, Pipecat, Resend, Cloudflare, and LLM providers). These providers process data on our behalf under contractual obligations. We do not sell your personal information. We may disclose information if required by law or to protect rights and safety.

4. AI Processing

Content you submit, and the conversations your agents handle, may be processed by third-party large language model and speech providers to generate responses. We send only the data needed to provide the feature. You are responsible for not submitting data you are not permitted to share.

5. Call Recording and Consent

The Service can record and transcribe calls. You are responsible for providing any disclosures and obtaining any consents required by the laws applicable to you and the people your agents contact.

6. Data Retention

We retain information for as long as your account is active or as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. You may request deletion of your data as described below.

7. Security

We use technical and organizational measures to protect information, including encryption in transit and access controls scoped to each organization. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Your Rights

Depending on your location, you may have rights to access, correct, export, or delete your personal information, and to object to or restrict certain processing. To exercise these rights, contact support@connectlabs.ai. Organization data is controlled by the organization owner, whom you may also need to contact.

9. International Transfers

Your information may be processed in countries other than your own. Where required, we use appropriate safeguards for cross-border transfers.

10. Children's Privacy

The Service is not directed to children under 18, and we do not knowingly collect personal information from them.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide notice through the Service or by email.

12. Google User Data & Limited Use

When you connect a Google account to enable the Google Sheets integration, we request the spreadsheets scope (https://www.googleapis.com/auth/spreadsheets) to read the tab names of the spreadsheet you select and to append a row of lead/conversation data each time one of your agents completes a call or chat. We do not read other cell contents, browse your Drive, or modify any spreadsheet other than the one you choose.

ConnectLabs' use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use Google user data only to provide the Google Sheets feature you enabled. We do not sell this data, do not use it for advertising, and do not use it to develop, improve, or train generalized AI/ML models. Human access is limited to the cases permitted under Limited Use (your explicit consent, security, abuse or legal compliance, or aggregated/anonymized operations).

Refresh tokens are stored encrypted at rest and access tokens are minted on demand and never persisted. You can revoke access at any time from your Google Account permissions page or by deleting the integration in your dashboard.

13. Contact

Questions about this Privacy Policy can be sent to support@connectlabs.ai.