Privacy Policy

1. Who We Are

TeleThinker ("we", "us", "our") provides AI-powered phone answering agents for businesses. This policy explains how we collect, use, store, and protect personal data when you use our platform at telethinker.com and related services.

2. Information We Collect

Account Information

When you create an account, we collect your name, email address, phone number, company name, and billing information.

Call Data

When your AI agent handles calls, we process call metadata (duration, timestamps, phone numbers), call transcripts, AI-generated summaries, and call outcomes (appointments booked, messages taken, leads captured). If call recording is enabled by the account owner, we also store audio recordings.

Caller Information

Information provided by callers to your AI agent — such as names, phone numbers, email addresses, and messages — is collected on your behalf and stored in your account.

Usage Data

We collect standard usage analytics: pages visited, features used, call volumes, and performance metrics.

Payment Information

Payment processing is handled by our payment processor partners. We do not store full credit card numbers. We retain billing customer and subscription IDs needed for account billing management.

3. How We Use Your Information

• Providing and operating the AI phone agent service
• Processing calls and delivering transcripts, summaries, and leads to your account
• Forwarding call data to your configured integrations when you have explicitly consented
• Billing and subscription management through payment processing providers
• Sending service-related emails (account alerts, billing notifications)
• Sending marketing emails (product updates, tips) — you can unsubscribe at any time
• Improving our AI models and service quality
• Detecting and preventing fraud and abuse

4. Categories of Service Providers

We use categories of third-party processors to operate TeleThinker, including:

• Cloud infrastructure providers — application hosting, uptime, and operations
• Database and authentication providers — secure account access and data storage
• Telephony and voice processing providers — phone numbers, call routing, voice handling, and related call services
• Payment processors — subscription billing, invoices, and payment method handling
• Email delivery providers — transactional and marketing email delivery
• Workflow/integration providers — forwarding approved event data to your connected business tools

We select providers based on reliability, security, and product requirements, and may update providers over time.

5. Call Recording Disclosure

Call recording is disabled by default. When an account owner enables call recording, our AI agents will inform callers at the beginning of each call that the call may be recorded for quality and training purposes. Recordings are stored securely and subject to our data retention policy.

6. Data Forwarding & Integrations

When you connect a workflow/integration webhook, call data (including caller PII such as names, phone numbers, and email addresses) may be forwarded to your configured workflows. This integration requires your explicit consent before any data is sent. You can revoke consent at any time in your account settings.

7. Data Retention

We retain call data (recordings, transcripts, leads) for a default period of 90 days, after which it is automatically purged. Account owners can adjust their retention period in account settings. Account information is retained for as long as your account is active. Upon account deletion, all associated data is permanently removed within 30 days.

8. Your Rights

Depending on your jurisdiction, you may have the following rights:

• Access — Request a copy of the personal data we hold about you
• Deletion — Request deletion of your personal data
• Correction — Request correction of inaccurate data
• Portability — Request your data in a machine-readable format
• Opt-out — Unsubscribe from marketing communications at any time

To exercise any of these rights, submit a request through your account dashboard or email us at privacy@telethinker.com. We will respond within 30 days.

9. Security

We implement industry-standard security measures including encrypted data in transit (TLS), encrypted data at rest, row-level security policies on our database, and regular security audits. Access to production systems is restricted to authorized personnel.

10. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of material changes via email or a prominent notice on our website. Your continued use of TeleThinker after changes constitutes acceptance of the updated policy.

11. Contact

For privacy-related questions or requests, contact us at privacy@telethinker.com.

12. SMS Privacy

If you opt in to receive SMS from TeleThinker, we process your mobile number and message delivery metadata to provide account notifications, customer-care updates, and related transactional messaging. Message frequency may vary. Message and data rates may apply.

You can opt out at any time by replying STOP, and request help by replying HELP.

No mobile information will be sold, rented, shared, or disclosed to third parties or affiliates for their own marketing or promotional purposes. We only share mobile data with service providers required to deliver messaging services on our behalf (for example, telecommunications and messaging infrastructure providers).

13. Third-Party Calendar Integrations

When you connect a calendar service (such as Google Calendar or Microsoft Outlook) to TeleThinker, we access the following data from your calendar account:

• Calendar event data — We read your calendar's free/busy information to check appointment availability in real time during phone calls handled by your AI agent.
• Event creation — When a caller books an appointment through your AI agent, we create a calendar event on your behalf with the appointment details (attendee name, phone, email, service type, date/time, and notes).
• Account email — We store the email address associated with your calendar account to display which calendar is connected.

How we store calendar credentials

• OAuth access tokens and refresh tokens are encrypted at rest using AES-256-GCM encryption before being stored in our database.
• We do not store your calendar password. Access is granted through industry-standard OAuth 2.0 authorization.
• Tokens are automatically refreshed as needed and old tokens are overwritten.

How to disconnect

• You can disconnect your calendar at any time from the Integrations page in your TeleThinker dashboard.
• Disconnecting immediately revokes TeleThinker's access to your calendar. Stored tokens are deactivated.
• Calendar booking records created prior to disconnection are retained per our standard data retention policy (Section 7).

Google API Services User Data Policy

TeleThinker's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We only use Google Calendar data to provide and improve the TeleThinker phone agent service you have requested.
• We do not sell Google user data to third parties.
• We do not use Google user data for advertising purposes.
• We do not allow humans to read your Google Calendar data unless (a) you give explicit consent, (b) it is necessary for security purposes, (c) it is required by law, or (d) the data has been aggregated and anonymized for internal operations.