Privacy policy
Last updated TODO(launch): set date
Draft — not legal advice. This is a starting template, not a reviewed policy. Have a lawyer review and adapt it before launch, particularly the sections on protected health information, call recording consent, and state-by-state two-party consent rules.
What we collect
When a caller reaches an assistant we operate on behalf of a client business, we process the audio of that call, a transcript of it, and the details the caller provides in order to be helped — typically a name, a phone number, and what service they are asking about.
We also collect ordinary account information from the businesses that use our console: name, work email, and authentication credentials.
How we use it
Call data is used to answer the call, book the appointment, notify the business, and let that business review what was said. Aggregate, de-identified information may be used to improve assistant quality.
Call recording
Calls are recorded and transcribed. Recording consent requirements vary by state, and some states require all parties to consent. Client businesses are responsible for the greeting and disclosure used on their line.
TODO(launch): have counsel confirm the disclosure language and which jurisdictions you operate in before publishing this section.
Health information
Assistants operating for medical or aesthetic practices may encounter protected health information. Access is scoped to the practice the data belongs to, and administrative actions are written to an audit log.
TODO(launch): state your actual HIPAA posture here — whether you sign BAAs, and with which subprocessors. Do not publish a compliance claim you cannot evidence.
Sharing and subprocessors
We do not sell personal information. We share data with the infrastructure and model providers required to operate the service, and with the scheduling system a business has asked us to book into.
TODO(launch): list your subprocessors by name.
Retention and deletion
Recordings and transcripts are retained for as long as the client business maintains an account, unless a shorter period is agreed. A business may request deletion of its data at any time.
Your rights
Depending on where you live, you may have the right to access, correct, or delete personal information we hold about you. Contact us at hello@mayapro.ai and we will respond.
Contact
Questions about this policy can go to hello@mayapro.ai.