Privacy Policy

9.1 Information We Collect via Google APIs

When you choose to connect your Google Account to the Tradecall Pro platform via OAuth for calendar integration, our application requests two limited calendar permissions: calendar.events and calendar.readonly. For availability checks, we read only your free/busy status. When a customer confirms a booking, we create a new calendar event containing the appointment details from that booking, such as the caller's name, phone number, and requested time. We never create, delete, or administer calendars themselves, and we never change calendar sharing settings.

9.2 How We Use Your Google Data

We use this data strictly to power our core scheduling and booking features. This includes:

• Conflict Checking: Reading your calendar availability in real-time to prevent overlapping or double-booked client appointments.
• Event Creation: Automatically creating a new event on your Google Calendar when a customer books a time. Rescheduling or canceling through the assistant is not currently available; existing appointments are changed directly in Google Calendar.

We only access, process, or transmit this data when explicitly authorized or initiated by you to execute these scheduling actions.

9.3 Google API Limited Use Disclosure

Tradecall Pro's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We strictly enforce the following protections:

• We do not use your Google user data to serve advertisements.
• We do not use your Google user data to train machine learning or artificial intelligence models.
• We do not transfer, sell, or disclose your Google user data to third parties unless it is absolutely necessary to provide or improve our application's core scheduling features, comply with applicable law, or as part of a merger/acquisition with explicit notice to you.

9.4 Gmail (Send Only)

If you connect a Google Account that includes Gmail, our application also requests the gmail.send permission. This lets us send emails from your connected address, such as appointment confirmations, new-booking notices, quotes, invoices, payment receipts, review requests, campaign emails, lead notifications, and contact emails. We do not send appointment reminders.

The data involved is the recipients, subjects, and bodies of the emails we send on your behalf. We do not read, search, or store the contents of your mailbox, and the send-only permission does not allow us to. The Limited Use protections in Section 9.3 apply to this data exactly as they do to your calendar data.

9.5 AI Service Providers

When our AI phone assistant handles a call for your business, the availability and booking details drawn from your Google Calendar are processed by Retell AI, our voice agent platform. Retell runs the phone assistant, including speech recognition, conversation handling, and speech output, using its built-in OpenAI GPT-4.1 model. We do not contract with OpenAI directly; the model is reached only through Retell's integration. Retell bills per minute of usage, with no plan tier that changes how data is handled.

These services receive open time slots derived from your calendar's busy/free status, plus the booking details a caller gives during the call, such as name, phone number, and requested time. They do not receive your calendar event titles, descriptions, or guest lists.

Retell processes call data as our service provider under a signed Data Processing Addendum (executed September 19, 2026). The DPA limits Retell to processing customer data only on our instructions and only for the specified purpose of running the voice assistant, and it prohibits Retell from using, selling, sharing, or combining that data for any other purpose, including model training. Retell binds its own subprocessors to the same terms. The OpenAI GPT-4.1 model itself is accessed only through Retell's integration, and OpenAI does not use API data to train its models.

Retell stores call recordings, transcripts, and call logs for our agents for 180 days. After 180 days they are automatically and permanently deleted.

Our Claude-based Chip AI backend is not involved in calendar or Gmail data.

9.6 Data Processor (Nylas)

Google account connections are handled through Nylas, our integration provider. Nylas processes your Google calendar and Gmail data only to carry out the scheduling and email-sending actions described in this section, under the same Limited Use protections in Section 9.3.

9.7 Google Analytics (Read-Only)

If you connect a Google Analytics 4 property to the Tradecall Pro Client Portal, our application requests two permissions: analytics.readonly, which gives read-only access to Google Analytics data, and userinfo.email, which gives us the email address of the Google account you connect so the Portal can show which account is linked. We cannot edit, delete, or change anything in your Google Analytics account.

From the one property you select, we pull summary website statistics for the last 7 and last 30 days: visitor counts, top traffic source, most-viewed page, key actions taken, top visitor location (city or region), mobile versus desktop share, busiest day of the week, and new versus returning visitors. These are aggregate figures. We do not receive or store data about individual visitors.

We use this data only to show you your own website statistics in your Client Portal. It is refreshed once a day and is never shown to any other client. The Limited Use protections in Section 9.3 apply to this data exactly as they do to your calendar data, and no AI service processes it.

We store the summary figures in our database, which is hosted by Supabase, and keep your Google connection token encrypted. You can disconnect at any time from the Web Statistics tab in your Client Portal or from your Google Account's third-party access settings. When you disconnect through the Portal, we revoke our access with Google, delete the stored token, and permanently delete your stored website statistics right away. We keep the connected account's email address and the connection date as a record.

9.8 Data Retention and Deletion

We retain cached Google Calendar tokens and event identifiers only for as long as your account is active and connected to our system. You maintain full control over this integration. You can disconnect your calendar at any time directly through your Tradecall Pro dashboard or by revoking permissions via your Google Security Settings page. Upon disconnection, all associated Google authentication tokens and synced calendar data are permanently purged from our servers within 30 days.