Beacon AI Privacy Policy

This Privacy Policy explains how Beacon AI ("we," "us," "our") collects, uses, and shares information when you use beaconcalls.com and the Beacon AI Service (the "Service"). This Service is B2B only and intended for business customers.

1. Information We Collect

A. Account and Business Information

• Name, email, password/auth credentials (via Clerk)
• Company/business name and related account settings

B. Customer Content and Call Data

Because the Service handles inbound calls, we process information you provide and information generated through calls, including:

• Call transcripts (we do not store call recordings)
• Call metadata (e.g., timestamps, duration, routing, outcomes)
• Lead information captured during calls (e.g., caller name, contact details, appointment intent) when provided by the caller or collected by your configured agent flow
• Customer-provided content used to configure your agent:
  • prompts, scripts, and instructions
  • knowledge base text/docs you upload or paste
  • contact lists you upload/import

C. Analytics Outputs We Generate

We generate analytics and summaries such as:

• lead generated indicators
• call summaries
• "customer attitude" / similar classifications

D. Usage and Device Data

We collect technical and usage information such as:

• IP address, device/browser type, pages/events in the dashboard
• cookies or similar technologies (to keep you logged in and improve the Service)

E. Support Communications

If you email us, we collect the contents of those emails and related information.

F. Billing Information

Payments are processed by Stripe. We do not store full payment card details. Stripe may process billing information like card details, invoices, and payment history under its own policies.

2. How We Use Information

We use information to:

• provide and operate the Service (authentication, routing calls, generating transcripts, email follow-ups, analytics)
• maintain and secure the Service (fraud prevention, debugging, logging)
• improve features and performance
• communicate with you (service updates, support responses)
• comply with legal obligations and enforce our Terms

3. Transcription and AI Processing (OpenAI)

To generate transcripts and analytics, we use service providers, including OpenAI. This may involve sending call audio/transcript content and related context to OpenAI for processing.

Model training: Beacon AI may use only anonymized/aggregated data to improve the Service (not raw identifiable customer content). We do not sell personal information.

4. Google Calendar Integration

When you choose to connect your Google Calendar to enable AI appointment booking, we access and process the following data:

• Data accessed: Event metadata for appointments created through our Service, including start/end times, titles, locations, descriptions, and attendee information
• Scope: We request only the calendar.events permission (not full calendar access), which allows us to create and manage events but not view your existing calendar contents
• Purpose: To schedule appointments on your behalf and display your connected account status
• When used: Only after you explicitly connect your Google Calendar through OAuth authentication, and only for scheduling features
• What we store: We store OAuth access tokens, refresh tokens, token expiry dates, your calendar email address, and event IDs for appointments created through our Service. We do not store full calendar contents or events not created by our Service.
• Data security: OAuth tokens are stored securely with industry-standard encryption. We implement least-privilege access and only request the minimum necessary calendar permissions (events-only access).

User control: You can disconnect Google Calendar at any time from your dashboard. When disconnected, we delete your OAuth tokens within 24 hours. Event IDs for previously created appointments may be retained for record-keeping purposes.

Data sharing: We do not sell or share your Google Calendar data with third parties except as necessary to provide the Service (e.g., Google's servers for calendar API operations). Your calendar data is not used for advertising or marketing purposes.

Retention: OAuth tokens are retained only while your Google Calendar remains connected. Appointment event IDs may be retained as part of your appointment history. You may request deletion of all Google Calendar-related data by contacting support.

5. How We Share Information

We share information only as needed to operate the Service, including with:

• Clerk (authentication)
• Stripe (payments)
• Vapi (telephony/call infrastructure)
• Resend (sending emails on your behalf via the Service)
• Vercel (hosting/infrastructure)
• OpenAI (AI processing for transcripts/analytics)
• Google (calendar integration when you connect Google Calendar)

We may also share information:

• to comply with law, legal process, or enforceable government requests;
• to protect rights, safety, and security of Beacon AI, our customers, and others; and
• in connection with a business transaction (e.g., merger, acquisition), where permitted by law.

6. Your Responsibilities (B2B; Consent and Notices)

You are responsible for ensuring you have a lawful basis to use the Service with respect to the individuals you contact or whose data you upload, including providing any legally required notices and obtaining any required consents for transcription and call handling.

7. Data Retention and Deletion

• In-app deletion: Customers can delete data in-app.
• Deletion on cancellation: Data is deleted within 24 hours of account cancellation/deletion request, except where retention is required for legal compliance, dispute resolution, security, or billing records processed/retained by Stripe.
• We may retain limited logs for security and abuse prevention for a reasonable period, even after deletion, where necessary and permitted by law.

8. Cookies and Similar Technologies

We use cookies and similar technologies to:

• keep you logged in
• enable core site functionality
• understand usage and improve the Service

You can control cookies through your browser settings, but disabling cookies may affect functionality.

9. Data Security

We use reasonable administrative, technical, and organizational measures designed to protect information. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

10. International Data Transfers

Customers may be in Canada and the United States, and some service providers may process data in different regions. Information may be transferred and processed outside your province/state/country. We take steps intended to ensure appropriate protections consistent with applicable law.

11. Children's Privacy

The Service is intended for business use and not directed to children. We do not knowingly collect personal information from children.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide notice (e.g., via email or within the Service). The "Effective Date" will be updated.

13. Contact Us

Beacon AI
Email: [email protected]