Privacy Policy

Last Updated: September 26, 2025

Welcome to Beltroni AI. Your privacy and the security of your data are critically important to us. This Privacy Policy explains how we collect, use, and protect your information when you use our services.

1. Information We Collect

We collect several types of information to provide and improve our service:

• Account Information: When you sign up, we collect personal details such as your name, email address, and password to create and manage your account.
• Payment Information: We collect payment details when you subscribe to a plan. All payments are processed by our secure third-party provider, Stripe, and we do not store your full credit card information on our servers.
• Training Data: To train your AI Agent, you must upload documents such as FAQs, manuals, and other business knowledge (`PDF`, `DOCX`, `TXT`) through the "Onboarder" tab. This content is stored securely and used exclusively to build your agent's knowledge base.
• Conversation Data: We store the transcripts of conversations between your AI Agent and your customers to allow you to review them in the "Conversations" tab and to analyze performance in the "Analyzer" tab.
• Usage and Analytics Data: We collect information about how you interact with our application, such as which features you use, to improve our services and user experience.
• Third-Party Integration Data: If you connect external tools, such as Google Calendar or Microsoft Outlook, we will store authentication tokens and access data necessary to provide the requested service (e.g., scheduling appointments).
  • Google Calendar Integration: When you connect your Google Calendar, we request access to view, create, and manage calendar events. We use this access to:
    • Check availability in your calendar to suggest appointment times
    • Create calendar events when customers book appointments through your AI Agent
    • Send calendar invitations to meeting attendees
    • Update or cancel events as needed
    We store OAuth tokens (access tokens and refresh tokens) securely in our database to maintain your calendar connection. We only access calendars you explicitly authorize and never share your calendar data with third parties. You can disconnect your Google Calendar at any time from your dashboard settings, which will immediately revoke our access and delete stored tokens.

2. How We Use Your Information

Your information is used for the following purposes:

• To provide, maintain, and improve our AI Agent services.
• To train your specific AI Agent based on the documents you provide.
• To process your subscription payments securely through Stripe.
• To enable integrations with third-party services like Google and Microsoft calendars for scheduling.
• To provide you with analytics and insights into your agent's performance.
• To communicate with you about your account, updates, and support inquiries.

3. Data Security

We are committed to protecting your data and have implemented robust security measures.

• Data Storage: We use Supabase Row-Level Security (RLS) to ensure that your data is isolated and can only be accessed by you.
• Agent Deployment: Your AI Agent is secured on your website using JSON Web Tokens (JWT) to prevent unauthorized use.
• Google Calendar Tokens: OAuth tokens for Google Calendar are encrypted and stored securely in our database. Access tokens are automatically refreshed before expiration to maintain seamless calendar integration. We never log or expose your calendar data in plain text.

4. Data Retention and Deletion

We retain your data as follows:

• Account Data: Retained while your account is active and for a reasonable period after account closure for legal and operational purposes.
• Google Calendar Tokens: Stored only while your calendar integration is active. When you disconnect Google Calendar or delete your account, all associated tokens are immediately deleted from our systems.
• Conversation Data: Retained according to your subscription plan settings. You can delete conversation history at any time from your dashboard.
• Training Data: Retained while your AI Agent is active. Deleted when you remove documents or delete your account.

5. Third-Party Services

We use the following third-party services:

• Google Calendar API: Used to provide calendar integration features. Subject to Google's Privacy Policy.
• Stripe: Used for payment processing. Subject to Stripe's Privacy Policy.
• Supabase: Used for secure data storage. Subject to Supabase's Privacy Policy.

6. Cookies

Our website uses cookies to enhance functionality. Cookies are small text files stored on your device. We use them for essential purposes like keeping you logged in and for analytics to understand how our site is used. You have the option to accept, reject, or manage cookies through your browser settings.

7. Your Rights

You have rights over your personal data. Depending on your location, you may have the right to access, correct, or delete your personal information. You can disconnect third-party integrations like Google Calendar at any time from your dashboard. Please contact us for any data-related requests.