1. About AutoFlowDesk

AutoFlowDesk is an AI phone receptionist and appointment scheduling service for salons, studios, and other service businesses. This policy explains how we handle information about business users and callers, including data accessed when a business connects Google Calendar.

2. Information We Collect

We collect account and business information you provide, such as your name, email address, phone number, business name, services, staff, and booking rules. We process authentication and account verification information. When customers call a connected business, we receive call metadata and, where enabled, recordings and transcripts from Retell AI, including the contact and appointment details callers provide.

3. Google Calendar Data and Permissions

When you authorize Google Calendar access, we process Google account identity information, OAuth access and refresh tokens, calendar identifiers, names, time zones and access roles, availability, and appointment events. Event data may include titles, descriptions, start and end times, attendee details, and booking identifiers. We use this data to let you select calendars, display appointments, check availability, and create, reschedule, or cancel bookings. Where you use staff calendar management, we also create and manage calendars and their sharing permissions. Calendar access is used to deliver the scheduling features you request; it is not required merely to browse our public website.

4. How We Use and Share Information

We use account, call, and appointment information to operate the receptionist, manage scheduling, display call history and activity, troubleshoot failures, secure accounts, and administer subscriptions. Google processes calendar requests. Retell AI and its voice-processing providers process calls and the scheduling information needed to respond to callers, such as available appointment times and booking confirmations. We do not send Google OAuth credentials to the voice agent. Stripe processes payments and billing information, and Resend processes recipient email addresses, account verification messages, and service requests containing the name, business name, email, and phone number you submit to our support team. Social media audit requests also include the social profile links or handles and business goals you provide. Our hosting providers process service data on infrastructure used to run AutoFlowDesk. We may disclose information when required by law or necessary to protect the service and its users. We do not sell personal information or use Google user data for targeted advertising.

5. Google API Limited Use

Our handling of information received from Google APIs is subject to the Google API Services User Data Policy, including its Limited Use requirements. AutoFlowDesk uses Google user data for user-facing scheduling functionality and does not use it to develop, improve, or train generalized or non-personalized AI or machine-learning models.

6. Storage and Security

AutoFlowDesk stores application data in PostgreSQL on infrastructure operated for the service. Google OAuth credentials are encrypted before they are stored in the application database. We use HTTPS for public website and Google API connections and enforce authenticated, business-scoped access to application data. These protections do not mean every stored record or backup is encrypted, and no service can guarantee absolute security.

7. Retention, Disconnection, and Deletion

We retain account, calendar configuration, call, and booking records while needed to operate your account, support the business, investigate failures, and meet applicable recordkeeping obligations. Disconnecting a calendar stops its use by AutoFlowDesk; calendars assigned to active staff may need to be unassigned first. When a Google credential is no longer used by any connected calendar, we disable it locally and attempt to revoke it with Google. You can also revoke AutoFlowDesk access directly in your Google Account settings. Disconnection does not automatically erase historical call or booking records, or delete events already stored in Google Calendar. To request deletion of your AutoFlowDesk account or stored personal data, email support@getautoflowdesk.com. We verify the request and explain any records that must be retained for legal, billing, security, or backup purposes; provider-held data is also subject to the relevant provider’s retention processes.

8. Your Choices and Contact

You can review and update available account and business settings in the dashboard. For access, correction, export, or deletion requests, or questions about Google Calendar data, contact support@getautoflowdesk.com. Callers may also contact the business they called about its appointment and call-handling practices. We update this policy when our practices change and revise the date above.

Privacy Policy