Privacy Policy

1. Information we collect

Depending on how the Service is used, we collect:

• Account information — name, email, business name, and authentication identifiers (via our auth provider, Clerk).
• Configuration data — your call flows, voice settings, business hours, and integration settings.
• Call data — for calls your AI agent handles: phone numbers, timestamps, call duration, and text transcripts of the conversation. We do not store call audio recordings by default.
• Payment data — when payments are taken over the phone, card details are entered directly with our payment processor (Stripe). We never receive or store full card numbers.
• Usage and device data — log data, IP address, and basic analytics needed to operate and secure the Service.

2. How we use information

• To provide, operate, and improve the Service.
• To answer and route calls, book appointments, take payments, and sync with your connected tools.
• To provide live monitoring and supervisor features to the business operating the agent.
• To meter usage and bill for call minutes.
• To secure the Service, prevent abuse, and comply with legal obligations.

3. Call recording & consent

Where enabled by a business customer, SwaraOS plays a disclosure at the start of a call (for example, "this call may be monitored or recorded for quality and training purposes") so callers are notified. Businesses are responsible for configuring disclosures appropriate to their jurisdiction, including all-party-consent requirements. Conversation transcripts may contain personal information; access to them is restricted and logged.

4. Service providers & sharing

We share data only with vendors that help us run the Service, under contractual safeguards:

• Telephony: Telnyx (call connectivity and SMS), with Twilio retained as a fallback provider.
• Speech & AI: Deepgram (speech-to-text), Google Gemini (understanding), ElevenLabs (speech synthesis).
• Payments: Stripe.
• Scheduling & POS (when you connect them): Google Calendar, Cal.com, Toast, Clover, Square.
• Infrastructure: Vercel (hosting), Neon (database), Upstash (caching), Clerk (authentication), Resend (email).

We do not sell personal information.

Your mobile information will not be sold or shared with third parties for promotional or marketing purposes. This includes text messaging originator opt-in data and consent — that information will not be shared with any third party, including affiliates and related businesses, for any purpose. We will not share your SMS opt-in or consent status with any third party except the vendors listed above that help us deliver the messages you signed up for, and only to the extent needed to deliver those messages.

5. Data retention

We retain account and call data for as long as your account is active or as needed to provide the Service, resolve disputes, and meet legal obligations. You may request deletion of your data as described below.

6. Your rights

Depending on your location, you may have rights to access, correct, export, or delete your personal information, and to object to or restrict certain processing. Businesses control caller data they collect through their agents; callers should contact the relevant business, and we will assist that business in honoring valid requests. To exercise rights, contact us at the address below.

7. Security

We use industry-standard measures including encryption in transit, encryption of stored integration secrets, access controls, and audit logging. No method of transmission or storage is perfectly secure, but we work to protect your information and continually improve our safeguards.

8. Children's privacy

The Service is intended for businesses and is not directed to children under 16. We do not knowingly collect their data.

9. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the date above and, where appropriate, by additional notice.

10. Contact

Questions about this policy or your data? Contact us at privacy@swaraos.com.