Privacy Policy

1. Information we collect

Depending on how the Service is used, we collect:

• Account information: name, email, business name, and authentication identifiers (via our auth provider, Clerk).
• Configuration data: your call flows, voice settings, business hours, and integration settings.
• Call and message data: for the calls, text messages and web chats your AI agent handles, we collect phone numbers, timestamps, call duration, text transcripts of the conversation, and what the caller asked for (an appointment, an order, a message for the business).
• Call audio: we do not record calls. The audio is streamed to our speech-recognition provider to be transcribed as the call happens, and we do not keep it. When a caller leaves a voicemail, that recording is stored privately so the business can play it back, and our copy is deleted with the message, including when the business erases that caller's data. The telephony provider that took the message keeps its own copy under its own retention terms.
• Payment data: card details are never taken over the phone. A customer pays on our payment processor's (Stripe's) checkout page, from a link we text them or from the business's online store. We never receive or store full card numbers.
• Inquiries: if you ask for access on swaraos.com, the name, email address, phone number and business type you give us, so that we can reply.
• Usage and device data: log data, IP address, and basic analytics needed to operate and secure the Service. Our website sets a cookie to remember the language you chose, and measures page speed with Vercel Speed Insights. We use no advertising or cross-site tracking cookies.
• Website analytics, only if you allow it: our website asks before it uses Google Analytics. If you choose "Allow", Google Analytics sets cookies on swaraos.com (their names start with _ga) to count visits and see which pages are read, and Google receives your IP address, your browser and device details, and the pages you view. We switch off Google's advertising features and Google signals for it. If you choose "No thanks", do not answer, or your browser sends a Global Privacy Control signal, nothing is sent to Google. Your answer is kept in your browser, and you can change it at any time from "Cookie settings" at the bottom of every page; taking it back deletes those cookies. Our app and the online stores of the businesses we serve do not use Google Analytics.
• Visits to the pages we host for businesses: when someone opens a business's online ordering, booking or chat page that SwaraOS hosts, we count the visit for that business without a cookie: which page, what kind of link or website it came from, and whether it was a phone or a computer. We keep daily totals, never your IP address; the address and your browser's details are used only to tell visitors apart within one day and to stop abuse. Those pages set no cookies of their own, and load nothing from Google unless the guest signs in with Google or opens a chat the business has set to require it. After a guest orders or books, the page remembers their name and phone number on their own device for 90 days so they need not type them again.

2. How we use information

• To provide, operate, and improve the Service, including automated review of conversation quality so the agent can be corrected.
• To answer and route calls, book appointments, take payments, and sync with your connected tools.
• To provide live monitoring and supervisor features to the business operating the agent.
• To bill for the plan and to measure usage.
• To secure the Service, prevent abuse (for example, recognizing a spam caller across the platform from a one-way hash of the number, never the number itself), and comply with legal obligations.

3. Call recording & consent

At the start of every call, SwaraOS tells the caller that they are speaking with an AI assistant (unless the business's own greeting already says so) and, by default, that the call may be monitored or recorded. A business can change the wording of that notice or turn it off, and businesses are responsible for configuring disclosures appropriate to their jurisdiction, including all-party-consent requirements. Conversation transcripts may contain personal information; access to them is restricted and logged.

4. Service providers & sharing

We share data only with vendors that help us run the Service, under contractual safeguards:

• Telephony & messaging: Telnyx (call connectivity and SMS), with Twilio retained as a fallback provider. URLMitra shortens the links in the texts we send.
• Speech & AI: AssemblyAI, Deepgram and Inworld (speech-to-text); Inworld, ElevenLabs and Google Gemini (speech synthesis); Google Gemini (understanding the conversation, summaries). A business's agent may instead run on a language model from Anthropic, OpenAI, xAI or OpenRouter when its plan uses one. Transcripts are reviewed for quality by TypeSafe or through the Vercel AI Gateway.
• Payments: Stripe.
• Website analytics: Google Analytics, on swaraos.com only and only for visitors who allow it.
• Tools a business connects (only when it connects them): Google Calendar, Cal.com, Square, Clover, Follow Up Boss, Slack, an insurance-eligibility service (clinics), DoorDash Drive (delivery), and webhooks the business sets up. Sign-in with Google, when a business offers it to its guests.
• Infrastructure: Vercel and Fly.io (hosting), Neon (database), Upstash (caching), Backblaze (file storage and backups), Cloudflare (DNS and media delivery), Clerk (authentication), Resend (email), Sentry (error monitoring, with phone numbers and email addresses removed first). Browser push services (Google, Apple, Mozilla) deliver notifications a guest has turned on.

We do not sell personal information.

Your mobile information will not be sold or shared with third parties for promotional or marketing purposes. This includes text messaging originator opt-in data and consent. That information will not be shared with any third party, including affiliates and related businesses, for any purpose. We will not share your SMS opt-in or consent status with any third party except the vendors listed above that help us deliver the messages you signed up for, and only to the extent needed to deliver those messages.

5. Data retention

A business can set how long its call, text and chat transcripts, messages and voicemail are kept; after that they are deleted automatically. Otherwise we retain account and call data for as long as the account is active or as needed to provide the Service, resolve disputes, and meet legal obligations. Records of text-message consent and opt-outs are kept as evidence of them. When a business closes its account, we erase its data; copies in our backups expire within 45 days. You may request deletion of your data as described below.

6. Your rights

Depending on your location, you may have rights to access, correct, export, or delete your personal information, and to object to or restrict certain processing. Businesses control caller data they collect through their agents; callers should contact the relevant business, and we will assist that business in honoring valid requests. To exercise rights, contact us at the address below.

7. Security

We use industry-standard measures including encryption in transit; encryption at rest of conversation transcripts, messages, other sensitive fields, and integration secrets; access controls; and audit logging. No method of transmission or storage is perfectly secure, but we work to protect your information and continually improve our safeguards.

8. Where data is stored

We store data in the United States.

9. Children's privacy

The Service is intended for businesses and is not directed to children under 16. We do not knowingly collect their data.

10. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the date above and, where appropriate, by additional notice.

11. Contact

Questions about this policy or your data? Contact us at privacy@swaraos.com.