Privacy Policy

DeskBuddy provides an AI front-desk platform that answers calls and messages on behalf of businesses. When you use DeskBuddy as a customer, you are the controller of your end-customers’ data and we process it on your instructions. When you visit this website, we are the controller of the limited data described below.

Account data. Your name, email address, password hash, business name and billing details.

Conversation data. Audio recordings, transcripts and message content from the calls, SMS and WhatsApp conversations your agent handles, together with the contact records those conversations create.

Usage data. Log entries, device and browser information, IP address, and product analytics describing how the dashboard is used.

Support data. Anything you send us by email or through the contact form.

To operate the service — routing calls, generating replies, creating bookings and contact records, and delivering follow-up messages. To bill you. To provide support. To keep the service secure and detect abuse. To understand which features are used so we can improve them.

We do not sell personal data, and we do not use your conversation data to train general-purpose models.

Delivering a voice conversation needs specialist providers. We use them under contract and limit them to what the service requires:

• Twilio, Plivo — telephony, SMS and WhatsApp delivery.
• LiveKit — real-time call media and session orchestration.
• Sarvam AI, Deepgram, Soniox — speech-to-text, to hear the caller.
• Sarvam AI, ElevenLabs, OpenAI — text-to-speech, to give the agent a voice.
• OpenAI (including Azure OpenAI), Anthropic, Google — language models, to generate the agent’s replies.
• Amazon Web Services — hosting, databases and recording storage.
• Razorpay — payments and subscription billing.
• Sentry — error and performance monitoring.

Every provider above is used on a paid or business API tier whose terms prohibit training on data we submit. We update this list when it changes; questions go to support@deskbuddy.in.

If you connect a Google Calendar, DeskBuddy requests one sensitive scope — https://www.googleapis.com/auth/calendar.events — and uses it only to read your existing events so the agent knows when you are free, and to create, reschedule and cancel the appointments your agent books on your behalf. We do not request access to Gmail, Drive, Contacts, or any other Google service, and we do not read calendars other than the one you connect.

DeskBuddy’s use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Because the agent holds a spoken conversation, a narrow slice of calendar information — the free slots on a requested day, and the date, time and title of an appointment being confirmed or changed — is sent to the language model providers listed above so the agent can offer and confirm times out loud. Those providers are used on paid API tiers whose terms prohibit training on submitted data. Google user data, whether raw, aggregated or derived, is never used, transferred or sold to create, train or improve any foundational or generalised machine learning or artificial intelligence model, by us or by any provider we use.

You can withdraw calendar access at any time by disconnecting it in the dashboard, which revokes our tokens with Google, or from your Google account permissions page. Refresh tokens are encrypted at rest and are never shared with any third party.

Account data is kept while your account is open, and for a limited period afterwards to meet tax and accounting obligations. Recordings and transcripts are kept for as long as your plan provides, and you can delete individual records at any time from the dashboard.

When you close your account we delete or anonymise your data within 90 days, except where we are required to keep it for longer by law.

Depending on where you live you may have the right to access, correct, export, restrict or delete your personal data, to object to certain processing, and to withdraw consent. Residents of the EEA and UK have these rights under the GDPR; California residents have comparable rights under the CCPA, including the right not to be discriminated against for exercising them.

Most of these you can exercise yourself from the dashboard. For anything else, write to support@deskbuddy.in and we will respond within 30 days.

Recording laws differ by country and by state, and some require every party on a call to be notified or to consent. You are responsible for configuring your agent’s greeting and your recording settings so that your use complies with the law where you and your callers are located. We provide the controls; the obligation is yours.

We operate globally, and your data may be processed in countries other than your own, including the United States and India. Where we transfer personal data out of the EEA or the UK we rely on appropriate safeguards, such as the European Commission’s standard contractual clauses.

Data is encrypted in transit and at rest. Access to production systems is restricted to staff who need it and is logged. No system is perfectly secure, but if a breach affects your data we will notify you, and any regulator we are required to notify, without undue delay.

This website uses cookies that are strictly necessary to serve the site, plus privacy-preserving product analytics to count page views. The dashboard uses a cookie to keep you signed in. We do not run advertising trackers.

DeskBuddy is a business product and is not directed at children. We do not knowingly collect personal data from anyone under 16.

If we make a material change we will update the date at the top of this page and, for significant changes, notify account holders by email before it takes effect.

Questions about this policy or about your data go to support@deskbuddy.in. For anything else, get in touch.