Privacy Policy

1. Scope

This Privacy Policy applies to BIZASSISTANT.AI LLC, which owns and operates BizAssistant (“BizAssistant,” “we,” “us,” or “our”), and covers BizAssistant.ai, our live demo, email-verification and setup flow, trial and paid service, support, billing administration, and the AI receptionist services we provide to customer businesses in our current U.S. service area. It does not replace the privacy notice of a customer business, a carrier, a calendar provider, a payment processor, or another third party.

2. Our privacy roles

2.1 Our own business activities. For our website, demo, sales, setup, account, support, security, billing, and advertising-measurement information, we generally determine the purposes and means of processing and act as the business or controller where those concepts apply.

2.2 Information handled for a customer. When the receptionist handles a customer business’s calls, messages, bookings, transfers, or related communications, the customer generally determines the business purpose and configuration. To the extent a privacy law distinguishes controllers/businesses from processors/service providers, BizAssistant ordinarily acts as a processor or service provider for that customer data, subject to the applicable facts and law.

2.3 Independent third parties. Telecommunications carriers, calendar platforms, payment processors, email providers, AI and speech providers, hosting providers, and other services may process information independently under their own terms and notices.

3. If you call a business that uses BizAssistant

• You may interact with an automated or AI-powered receptionist rather than a human employee.
• The receptionist follows the customer business’s configured information and call-handling instructions and can make mistakes.
• Call audio is necessarily processed to answer the call. Depending on the customer’s configuration and the providers used, a call may also be recorded, transcribed, summarized, classified, routed, or used to create an appointment or message.
• The customer business receives information needed to respond to the call, such as caller details, the message or summary, a booking, or transfer information.
• Questions about the business, an appointment, a purchase, a professional service, or the handling of a specific call should usually be directed to the business you called.
• BizAssistant is not an emergency service. For an emergency, contact the appropriate emergency service directly.

4. Information we collect

4.1 Website, setup, and business-contact information. Depending on how you use BizAssistant, we may collect:

• email address and email-verification status;
• business name, business phone number, website, hours, U.S. business time zone, services and service area;
• calendar preference, booking preference, urgent-call preference, written call-handling instructions, and the phone number designated for summaries or urgent transfers;
• support communications and other information you choose to provide;
• plan selection, billing frequency, talk-time usage (minutes used per billing period, used to apply included minutes and 50¢-per-minute extra charges), invoices, payment status, and limited payment-related identifiers supplied by a payment provider when paid service is arranged;
• verification, submission, activation, and operational timestamps and identifiers used to run the setup flow; and
• campaign and source information such as UTM parameters and Google attribution identifiers when present (for example, gclid, gbraid, and wbraid), referring page, and landing-page address.

4.2 Caller and service information. When we provide the receptionist for a customer business, we may process caller name, phone number, caller ID and call metadata, the caller’s request or message, appointment details, transfer information, the customer’s hours, services, prices or other approved business information, and—where enabled—call recordings, transcripts, summaries, classifications, or extracted details.

4.3 Demo information. If you call the BizAssistant demo line, we may process your phone number, call audio and metadata and, where enabled, recordings, transcripts, or summaries needed to operate, secure, test, or improve the demo.

4.4 Device, security, and website information. Our site and providers may receive IP address, browser and device information, page URL, timestamps, network and error information, approximate location derived from network information, cookies or similar identifiers, and fraud or abuse signals.

5. Sources of information

We collect information from you; from customer businesses and their personnel; from callers and message recipients; from the business information a customer gives us; from customer-selected calendars, phone systems, and integrations; automatically from our website and systems; from public business websites when needed to prepare or verify a setup; and from providers that support hosting, email, telecommunications, AI, speech, analytics, advertising, security, payments, and integrations.

6. How we use information

• to operate the website, demo, email-verification flow, saved setup, and support channels;
• to configure, test, activate, provide, maintain, troubleshoot, and secure the receptionist service;
• to answer calls, use the customer’s approved business information, route urgent calls, take messages, create bookings, and deliver call summaries where configured;
• to authenticate setup access, prevent duplicate or abusive requests, and maintain system integrity;
• to communicate about setup, activation, service, support, billing, and material changes;
• to administer subscriptions, invoices, taxes, payments, and renewals where paid service is selected;
• to measure advertising and completed setup requests as described below;
• to monitor reliability, capacity, errors, fraud, misuse, and security incidents;
• to comply with law, legal process, and contractual obligations and to establish, exercise, or defend legal claims; and
• to create aggregate or deidentified operational statistics that do not reasonably identify an individual.

7. AI, speech, telecommunications, and other providers

Providing an AI receptionist requires third-party infrastructure. We may use providers for telecommunications, speech recognition, text-to-speech, AI-model processing, messaging, email, hosting, calendars, security, analytics, advertising, and payments. They receive only the information reasonably needed for the service they provide, subject to their contracts, settings, and applicable law.

We do not intentionally use the content of a customer’s live receptionist calls to build advertising profiles or advertising audiences. We also do not intentionally place authentication credentials, verification links, saved setup answers, or session tokens into our advertising conversion events. Provider logs, security review, abuse monitoring, retention, and model-related practices are governed by the provider terms and configurations applicable to the service we use, so we do not promise that every provider retains no information.

8. Customer control, call notices, and data minimization

Customer businesses control what business information and instructions they provide, which calls they forward, which calendar they connect, and how they use the resulting messages, summaries, and appointments. Customers are responsible for giving legally required notices and obtaining legally required consents for call recording, transcription, automated communications, messaging, and the information they instruct us to collect.

The setup form is designed for receptionist configuration, not secrets. Do not enter passwords, authentication codes, full payment-card numbers, bank-account credentials, Social Security numbers, or other information that is unnecessary for ordinary receptionist setup. Calendar setup should not require you to send us a calendar password in the setup form.

9. How we disclose information

• Customer business: information handled for that customer may be provided to the customer and its authorized personnel.
• Service providers: providers supporting telecommunications, AI, speech, hosting, email, messaging, calendars, security, analytics, advertising, payments, and support.
• Customer-selected integrations: services a customer chooses to connect or use for bookings, messages, call routing, or other functions.
• Professional advisers and transactions: advisers, insurers, lenders, investors, or counterparties involved in a financing, reorganization, acquisition, merger, sale, or similar transaction, subject to appropriate confidentiality arrangements.
• Legal, safety, and enforcement purposes: when reasonably necessary to comply with law or legal process, protect rights or safety, investigate fraud or abuse, enforce agreements, or respond to a security incident.

10. Website storage, Google Ads measurement, and attribution

10.1 Necessary browser storage. The current verified setup flow can use browser storage to keep an authenticated setup session and a pending verification attempt. Verification links expire after about 30 minutes. An authenticated build session is designed to expire after about 7 days. Clearing browser storage, changing browsers, or using another device can require a fresh verification link.

10.2 Google Ads measurement and browser opt-out signals. The current homepage is configured to load its own Google Ads tag when the advertising conversion setting is enabled and the browser is not sending a Global Privacy Control (“GPC”) signal. When the homepage detects GPC, its own optional Google Ads tag and conversion events are suppressed for that page view. Otherwise, the homepage can provide the page location and advertising attribution identifiers and can report a completed-build conversion using a public build event identifier as the transaction identifier. The current page code is designed not to put the visitor’s email address, saved setup answers, verification link, or authenticated session token into that conversion event. Tracking independently configured by a hosting, site-builder, browser, network, or other third party may be governed by that party’s separate configuration and policies.

10.3 Third-party collection. Google and other website-platform or network providers may independently collect technical identifiers, IP address, browser or device information, and cookie or similar data under their own policies. We do not control a browser, carrier, website platform, or third party’s independent collection.

11. Sale, sharing, and targeted advertising

We do not sell personal information for money. We do not use customer call content, caller messages, recordings, transcripts, or appointment details to build advertising audiences. Our use of Google Ads and related website measurement may involve disclosure of website identifiers, campaign information, page activity, or conversion information that some privacy laws define as “sharing,” “targeted advertising,” or a “sale” even when no money changes hands.

Where an applicable privacy law gives you a right to opt out of such activity and applies to BizAssistant, you may submit that request at [email protected]. The current homepage also detects GPC and suppresses its own optional Google Ads measurement when that signal is present. Because browser, device, hosting, and platform behavior can differ, an email request remains a direct way to reach us about an opt-out or a privacy concern.

12. Retention

We keep information only as long as reasonably necessary for the purposes described in this Policy, taking account of the customer relationship, service configuration, provider capabilities, security needs, disputes, legal requirements, and recordkeeping obligations. Different records have different lifetimes.

13. Deletion and account end

A customer may contact us to request deletion of information we control or, for service information, to request assistance with deletion from active systems where reasonably supported. We may retain information that is needed for billing, tax, security, fraud prevention, legal claims, legal holds, compliance, or other lawful purposes. Information in backups can persist until normal backup expiration. Information already delivered into a customer’s own phone, email, messaging, or calendar systems is controlled by that customer and those providers.

14. Security

We use administrative, technical, and organizational measures designed to protect the information we handle, including authenticated setup access and measures intended to reduce unauthorized changes to saved setup information. No internet, telecommunications, AI, or storage system is completely secure. We do not claim a security certification unless we expressly state one in writing.

15. Calls, recordings, texts, and email

15.1 Calls. Calls handled by BizAssistant are processed by automated systems. Recording, transcription, summarization, and related features may be enabled depending on configuration and providers. The customer business is responsible for legally required notices and consent for its calls.

15.2 Text messages. The service may send administrative or service-related texts, such as call summaries, booking information, or setup communications, to numbers designated for those purposes. Where a customer business enables them, the service can also send a text-back to a caller whose call was not answered and a review-request message to a customer after a completed appointment; those messages are sent on the customer business’s behalf from a number associated with that business, and the customer business is responsible for the lawfulness of sending them and for honoring opt-out requests. Message and data rates may apply. Marketing texts, if any, require the consent applicable to that marketing activity. Do not rely on text or email as a secure channel for highly sensitive secrets.

16. Children

The BizAssistant website and business service are directed to businesses and adults acting for businesses, not to children. We do not knowingly use the website to solicit personal information directly from children under 13. A caller to a customer business may mention a minor in the ordinary course of that business; in that situation, the customer controls the business purpose and should minimize what it asks us to collect.

17. Privacy rights and requests

Depending on where you live and which law applies, you may have rights to request access to or a copy of personal information, correction, deletion, portability, or information about processing; to opt out of certain sale, sharing, targeted advertising, or profiling; to limit certain uses of sensitive information; to appeal a privacy decision; and to receive non-discriminatory treatment for exercising a privacy right.

For information BizAssistant controls, email [email protected] with “Privacy Request” in the subject line and explain the request. We may need to verify your identity and authority before acting. If the request concerns a call handled for a customer business, contact the business you called when possible; if you contact us, identify that business so we can route or assist with the request as appropriate.

18. California notice

This section applies to the extent the California Consumer Privacy Act, as amended (“CCPA”), applies to BizAssistant as a business for the information at issue. The categories we may collect include identifiers; customer-record information; commercial information; internet or network activity; audio or electronic information; professional or business information; and inferences or classifications generated from service activity. We collect and use these categories for the purposes in Section 6, disclose them to the categories in Section 9, and retain them as described in Section 12.

California residents may have rights to know/access, delete, correct, opt out of sale or sharing, limit certain uses of sensitive personal information, and not be discriminated against for exercising CCPA rights. We do not knowingly sell or share the personal information of consumers under 16. Customer service information that we process only as a service provider for a customer business is generally handled under that customer’s instructions, and the customer may be responsible for the consumer-facing response.

19. Other U.S. state privacy laws

Residents of other states may have similar or additional privacy rights where a state comprehensive privacy law applies to BizAssistant and the information at issue. We will process a valid request as required by applicable law. If a law gives you a right to appeal our decision, you may reply to our response and state that you are appealing.

20. International processing

BizAssistant is currently offered only to businesses in the 50 U.S. states and Washington, D.C., and is run from the United States. Our providers may still process information in the United States and other countries where they or their subprocessors operate. Those countries can have different privacy laws. We do not promise that all processing occurs only in the United States.

21. Third-party sites and integrations

Links, phone carriers, calendars, messaging services, payment services, AI services, and other integrations are controlled by third parties. Their privacy practices are governed by their own notices and agreements. Connecting a third-party service authorizes the data exchange reasonably needed for the requested integration.

22. Changes to this Policy

We may update this Privacy Policy as our service, providers, features, or legal obligations change. The version posted at bizassistant.ai/privacy will show its “Last Updated” date. If applicable law requires additional notice or consent for a material change, we will provide it as required.

23. Contact

For privacy questions or requests, email [email protected]. BizAssistant is owned and operated by BIZASSISTANT.AI LLC and is run from San Diego, California.