Privacy Policy
What this service does
We provide an AI receptionist and CRM to businesses (our clients). When you call, text or chat with a business that uses our service, an AI assistant answers on that business's behalf. The business decides how your information is used; we process it for them.
Information we process
- Contact details you give: name, phone number, email, and what you need.
- Call audio and transcripts, AI summaries, text messages, chat messages and appointment details.
- Technical data: phone number you call from, time zone, time of contact.
How it is used
- To answer you, book or change appointments, and send confirmations and reminders.
- To let the business follow up with you.
- We do not sell your information and do not use it for advertising.
Service providers
We use Google Firebase (hosting and database), ElevenLabs (voice AI), Twilio (calls and texts), Resend (email), DeepSeek (chat AI), Cloudflare (web hosting) and, where the business connects it, their own CRM or calendar. Each processes data only to provide its part of the service.
Google and Microsoft calendar data
When a business connects a Google Calendar or Outlook/Microsoft 365 calendar, we request only: its email address, the free/busy times of that calendar, and permission to create, change and delete the appointment events we book. We use this only to offer open times and to put appointments booked through the service (with an optional video meeting link) into that calendar. We do not read the content of other events, sell this data, use it for advertising, or use it to train AI models. People at our company cannot read it except for security, legal compliance, or with the business's permission to fix a problem. Access tokens are stored encrypted and are deleted when the business disconnects the calendar; access can also be removed at any time from the Google or Microsoft account settings.
Our use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Recording and AI
The assistant tells you it is an AI. Calls may be recorded and transcribed so the business can follow up; you are told this at the start of the call unless the business has turned the notice off where the law allows.
Text messages
Reply STOP to any text to stop receiving texts, and HELP for help. Message and data rates may apply.
Your choices
You can ask the business, or us at hello@h2m.marketing, to access, correct or delete your information. On a verified deletion request we remove your contact record, calls, transcripts, messages and appointments.
Retention and security
Data is kept while the business is our client. When a business's subscription or free plan ends, the AI assistant stops, its CRM stays usable for a short period and then becomes read-only, and the business can sign in to view and export its data at any time. We keep the data for at least 3 months after the plan ends so the business can come back or take its data with it; after that it may be deleted at any time without further notice. Archived copies may be kept for up to 12 months after the plan ends for security, legal and account-recovery purposes, and are then deleted. Business phone numbers are released 2 months after a plan ends. Data is deleted earlier on a verified request.
Data of each business is kept separate from every other business, access is limited to that business's team, and data is encrypted in transit and at rest.
Contact
H2M Marketing, hello@h2m.marketing.