This policy explains what Deskli collects when a business uses our app and AI receptionist, and when someone calls a business that uses Deskli.
Who this covers
- Business users: owners and team members who sign in to the Deskli app.
- Callers: people who call a business number answered by Deskli. The business decides how it uses call information; we process it on the business's behalf.
What we collect
- Account details: your name and email address, from Sign in with Apple, Sign in with Google or an email sign-in code, and the businesses you belong to.
- Business information: the hours, services and answers to common questions you add for the assistant.
- Call information: the caller's phone number, call times and status, the conversation transcript and any message the caller leaves.
- Bookings: the service, time, customer name, phone number and notes for appointments the assistant books.
- Contacts: customer details you enter, save from a call, or pick from your iPhone. Only the people and fields you choose are copied; we never read your full address book.
- Device information: your device's push notification token, so the app can notify you.
Call recording is off and we do not store call audio. During a call, the caller's voice is streamed in real time to Twilio and Google (Gemini) to run the conversation.
Google Calendar
If you connect a Google account to take bookings, Deskli can:
- list the account's calendars, so you can choose which ones to use;
- read busy and free times on the calendars you choose, but not event titles, descriptions or guests;
- create an event on the calendar you pick for appointments, with the service, customer name, phone number and notes. Events are created without guests, so Google sends no invitations;
- notice when you move or delete an appointment Deskli booked, by reading only the times and status of events on the appointments calendar, so the booking in Deskli stays correct.
We use this access only to offer open times and book appointments for your business. Google access tokens stay on our servers, encrypted, and are never sent to the app, the AI model or our logs. We do not sell Google data, use it for advertising or use it to train AI models. Disconnecting in the app deletes the stored tokens and revokes our access; you can also remove access in your Google account settings.
We share, transfer or disclose Google user data only with the following, and only to provide these features:
- People in your business on Deskli: the owners and team members you add see the connected Google account's email address, its calendar names, the busy times and the appointments Deskli booked.
- Your callers: the receptionist tells a caller which times are open, worked out from your busy times, over the phone call that Twilio carries. Callers never hear event titles or details.
- Google (Gemini API): the AI receptionist receives only the open times it may offer, never event titles, descriptions or guests.
- Supabase and Google Cloud: store and process the data for us, as our database and servers, and may use it only to run Deskli.
- When the law requires it: if we must answer a valid legal request.
We do not share Google user data with anyone else, including advertisers and data brokers, and it is never used to train AI models.
Deskli's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Outlook (Microsoft) calendars
If you connect a Microsoft account (Microsoft 365 or Outlook.com) to take bookings, Deskli can:
- list the account's own calendars, so you can choose which ones to use. Calendars other people share with you are not shown;
- read the start and end times and busy status of events on the calendars you choose, but not event titles, descriptions, locations or attendees;
- create an event on the calendar you pick for appointments, with the service, customer name, phone number and notes. Events are created without attendees, so Microsoft sends no invitations;
- get a notice from Microsoft when an event on the appointments calendar changes. Deskli then reads the times and status of that event only if it is an appointment Deskli booked, so the booking in Deskli stays correct.
Microsoft describes the permission Deskli asks for as full access to your calendars, because the same permission is needed to add appointments. Deskli uses it only as described above.
We use this access only to offer open times and book appointments for your business. Microsoft access tokens stay on our servers, encrypted, and are never sent to the app, the AI model or our logs. We do not sell Microsoft data, use it for advertising or use it to train AI models. Disconnecting in the app deletes the stored tokens and stops change notices. Microsoft doesn't let an app withdraw its own access, so to remove Deskli completely, also remove it from the apps with access to your Microsoft account; for a work account, your IT administrator may manage this.
We share Microsoft data only as we share Google data above: with the people in your business on Deskli, with your callers as open times, with the AI receptionist as open times only, with Supabase and Google Cloud to store and process it for us, and when the law requires it. We do not share it with anyone else, including advertisers and data brokers.
How we use it
To answer calls for your business, book appointments, take messages, show you calls and transcripts, keep your contacts, secure your account and run the service. We do not sell personal information or use it for advertising.
Service providers
We use these providers to run Deskli. They handle it under their own terms, which limit how they may use it.
- Twilio: phone numbers and call connection.
- Google (Gemini API, Google Cloud and Google Calendar): the AI that speaks with callers, hosting for our servers, and the calendars you connect.
- Microsoft: the Outlook calendars you connect.
- Supabase: our database and sign-in.
- Apple: Sign in with Apple and app notifications.
- Resend: the emails that send your sign-in codes.
How long we keep it
We keep your business's data while your account is active. When you delete your account, we delete your data except what we must keep by law. Copies held by our providers and in backups are removed on their own schedules. See how to delete your account.
Security
Each business's data is kept separate, and in the app only its team can see it. Data is encrypted in transit. Transcripts and contact details are kept out of our general logs.
Children
Deskli is a tool for businesses and is not directed at children.
Your choices and rights
You can view and edit your data in the app and ask us for a copy or deletion. If you called a business that uses Deskli, contact that business first; we will help them with your request.
Contact
Questions: support@deskli.app
