Your Data, Your Control

This Privacy Policy explains how Sam ("the Service", "we", "us", or "our") collects, uses, and protects information when you use our website, dashboard, and browser-based call widget.

1. Information We Collect

We collect the information you provide directly to us, including account details, billing information, and any configuration data you enter into the dashboard. When the widget is active, we receive audio streams, transcripts, and metadata necessary to deliver the conversation to you.

2. How We Use Information

The information we collect is used to operate, maintain, and improve the Service, to provide support, and to comply with legal obligations. We may use aggregated, anonymized data to improve accuracy and reliability. We never sell customer conversation data.

3. Google User Data We Access

When you connect Google Calendar, we access Google user data you consent to, limited to calendar availability and event details needed to show free/busy slots and create or update events on your behalf. We store the Google OAuth refresh token securely to keep the connection active. We do not access Gmail, Drive, or other Google products.

4. How We Use Google User Data

We use Google Calendar data only to (a) display your available times to invitees, (b) book or edit events you approve, and (c) keep your schedule in sync. We do not use Google user data for advertising or unrelated purposes.

5. Sharing and Disclosure of Google User Data

We do not sell Google user data. We do not share or transfer Google user data to third parties except (i) to Google to perform the calendar actions you request, and (ii) to vetted infrastructure providers (hosting, databases, monitoring) acting as our processors under confidentiality and security obligations. We do not allow third parties to use Google user data for their own purposes.

6. Data Retention & Security

Conversation data, account information, and booking metadata are retained only as long as necessary to provide the Service or as required by law. We store Google OAuth tokens encrypted at rest. We implement administrative, technical, and physical safeguards designed to protect your information; however, no system can be fully secure, and we cannot guarantee absolute security.

7. International Users

If you access the Service from outside the United States and the United Kingdom, you consent to the transfer and processing of your information in the United States and the United Kingdom. Local privacy laws may differ from those in your jurisdiction.

8. Your Choices

You may update or delete your account information at any time from the dashboard. You can revoke Google Calendar access in your Google Account or by disconnecting it in Settings. If you wish to delete stored call transcripts or audio, contact support and we will assist within a reasonable timeframe.

9. Changes to This Policy

We may update this Privacy Policy to reflect operational, legal, or regulatory changes. When we do, we will revise the “Last updated” date below. Continued use of the Service after an update constitutes acceptance of the revised policy.