Privacy Policy

This Privacy Policy applies to bookedoncall.com, the BookedOnCall customer app, setup and contact forms, AI-assisted call handling, connected tools, support, billing, and related operations.

This policy does not replace a separate written customer agreement, Data Processing Addendum, or other contract. If a separate agreement governs a specific processing relationship, that agreement controls to the extent of any conflict.

For website visitors, prospects, account administration, billing, security, fraud prevention, and legal compliance, BookedOnCall generally acts as an independent business or controller. For personal information that a customer routes through the Service for that customer's business, BookedOnCall generally acts as a service provider or processor on the customer's behalf.

If you are a caller or end customer of a business that uses BookedOnCall, that business is usually responsible for deciding why and how your information is processed. You may contact that business directly for questions about its services, notices, appointments, prices, or legal basis for contacting you.

We may collect or receive these categories of information:

• Contact and account details: names, business names, email addresses, phone numbers, billing contacts, login details, account roles, and support contacts.
• Business setup information: trade, services offered, service areas, hours, emergency rules, escalation paths, pricing guidance, dispatch preferences, fallback contacts, calendars, connected tools, and caller instructions.
• Call and message information: caller names, callback numbers, job addresses, requested services, job details, urgency signals, call metadata, recordings if enabled, transcripts, summaries, outcomes, notes, and follow-up status.
• Connected-tool metadata: calendar availability, scheduling identifiers, CRM references, message delivery status, authentication status, integration settings, and related workflow records.
• Billing and commercial records: plan, subscription status, invoices, payment processor metadata, usage records, included minutes, overage data, taxes, credits, and support records.
• Website, device, and security data: IP address, browser and device details, pages viewed, referring pages, timestamps, form submissions, cookies or similar technologies, logs, error reports, abuse signals, and security telemetry.

We collect information directly from you, automatically from your use of the website or Service, and from sources such as:

• customers, callers, leads, and message recipients who interact with configured workflows,
• customer-authorized calendars, CRMs, schedulers, phone systems, messaging systems, and other connected tools,
• payment processors, authentication providers, telephony providers, AI and speech providers, hosting providers, and support tools, and
• public or business sources that help us respond to sales, support, security, or legal requests.

We use information to:

• provide, operate, secure, monitor, troubleshoot, and support the Service,
• answer calls, disclose assistant behavior, capture job details, summarize conversations, and route next steps,
• support callback, owner-review, scheduling, messaging, and connected-tool workflows selected by customers,
• maintain accounts, authentication, billing, subscriptions, usage limits, and customer support,
• detect abuse, investigate incidents, debug failures, prevent fraud, enforce agreements, and protect rights and safety,
• improve reliability, product quality, analytics, training, and operational processes, and
• comply with law and respond to lawful requests.

Where applicable law requires a legal basis, we generally rely on performance of a contract, legitimate interests, legal obligations, consent where required, and documented customer instructions for processor activities.

BookedOnCall is built around AI-assisted call handling. Information provided by owners, callers, and connected systems may be processed by telephony, speech, AI, scheduling, messaging, hosting, analytics, support, and security systems needed to provide the selected workflow.

We use human review, redaction, logs, and support processes where appropriate, but automated classifications, transcripts, summaries, and suggested next steps may be incomplete or incorrect. Customers remain responsible for notices, consent, configuration, business decisions, and human review appropriate to their business.

If a customer authorizes BookedOnCall to access Google Calendar or other Google Workspace data, we use that access only for the disclosed Service purpose, such as checking availability, supporting configured scheduling workflows, displaying account status, troubleshooting setup, and maintaining security or audit records.

BookedOnCall's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements, where those requirements apply. We do not sell Google user data, use Google user data for advertising, or use Google user data to train general AI models.

Customers may disconnect connected accounts or revoke permissions through the provider account controls or by contacting support. Some workflows may stop working if the connected account is removed.

We may use cookies, tags, pixels, local storage, analytics tools, and similar technologies to operate the website, remember preferences, understand traffic, measure marketing performance, secure the Service, and improve user experience.

You can use browser settings to limit cookies. Some website or Service features may not work properly if cookies or similar technologies are blocked.

We may disclose information:

• to service providers and subprocessors that help with hosting, security, authentication, payments, communications, AI processing, analytics, and support,
• to customer-authorized tools such as calendars, schedulers, CRMs, messaging systems, or billing systems,
• to customers and authorized users of an account, including call summaries, caller details, setup status, and support records,
• to comply with law, legal process, regulator requests, subpoenas, or lawful public authority requests,
• to enforce agreements, recover amounts owed, investigate abuse, respond to claims, or protect rights, property, safety, and security, and
• in connection with financing, merger, acquisition, reorganization, bankruptcy, or sale of assets, subject to reasonable safeguards.

We do not sell customer service data for money. We also do not disclose customer service data to unrelated third parties for their own independent marketing use. If future advertising or analytics practices require an opt-out under applicable law, we will provide the required notice and control.

We retain information for as long as reasonably necessary to provide the Service, maintain security and audit records, support customers, resolve disputes, comply with law, enforce agreements, and support backup or disaster recovery. Retention periods vary by data type, account status, product configuration, customer agreement, and applicable law.

Unless a customer agreement or product setting says otherwise, our default goal is to keep normalized call records, summaries, and workflow history only as long as needed for customer review and service operation; keep raw provider payloads and temporary support artifacts for shorter periods where practical; and retain limited billing, security, audit, deletion, and legal records as needed for compliance and dispute protection.

We use administrative, technical, and organizational measures designed to protect information appropriate to the nature of the data and the risks presented. Measures may include access controls, authentication, encryption in transit, logging, monitoring, redaction, vendor review, backups, and incident response processes.

No method of transmission, storage, or processing is completely secure, and we cannot guarantee absolute security.

Depending on your location and relationship to the information, you may have rights to request access, correction, deletion, portability, restriction, objection, opt-out of certain processing, or appeal of a denied request. You may also be able to opt out of marketing communications or text messages by following instructions in those messages.

We may need to verify your identity, authority, account relationship, and request scope before acting. Some requests may be limited where information is needed to provide the Service, protect security, comply with law, honor another person's rights, complete a transaction, maintain audit records, or establish, exercise, or defend legal claims.

To make a request, contact the privacy email below and describe the request type, the account or business involved, your role, and how we can reach you. If applicable law gives you an appeal right after a request is denied, you may appeal by replying to the decision email or contacting the privacy email with "Privacy Appeal" in the subject line.

A deletion, correction, or restriction request may be narrowed, delayed, or denied when a legal hold, security investigation, billing dispute, required recordkeeping obligation, active service need, or other legal limit applies. When that happens, our goal is to keep the retained scope as narrow as reasonably practical.

Some U.S. state privacy laws provide additional rights and notice requirements. We use the categories above to describe the personal information we collect, the sources of that information, the purposes of use, and the categories of recipients.

You may submit privacy requests using the contact below. We will not discriminate against you for exercising rights that apply to you. Authorized-agent requests must include proof of authority and may require direct verification with the individual.

BookedOnCall is designed for trades and home-service business workflows, not for protected health information, payment-card data, government identification numbers, children's data, or other sensitive regulated data unless a separate written agreement expressly permits that processing and the required safeguards are in place.

BookedOnCall and its service providers may process information in the United States and other countries where we or our providers operate. Those locations may have data protection laws that differ from those in your jurisdiction.

Where required, we use contractual, technical, and organizational safeguards designed to support lawful cross-border processing.

The Service is designed for business use and is not directed to children. We do not knowingly collect personal information from children in circumstances where such collection is prohibited by law.

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above. Material changes may also be communicated through the website, customer app, or other reasonable means.

Privacy questions, rights requests, and service data inquiries can be sent to bookedoncall@bookedoncall.com.