Skip to content

Privacy Policy

Last Updated: September 11, 2026

At TelBuddy ("we", "us", "our"), protecting your data is not just a requirement. It is the foundation of our architecture. This Privacy Policy explains how we collect, use, and safeguard your information when you use our platform to interface with your chosen carrier's API services, whether that is Twilio or Telnyx.

1. Information We Collect

  • Account Information: When you register, we collect your name, email address, company name, and billing details.
  • API Credentials: To function, our system requires the credentials for your own carrier account: a Twilio Account SID and Auth Token, or a Telnyx API key. These are encrypted and stored solely to authorize API calls on your behalf.
  • Usage Data: We collect metadata on how you use the system (e.g., number of messages sent, minutes used) for billing and analytics purposes.

2. Your Data & Your Carrier (BYOC Model)

TelBuddy operates on a "Bring Your Own Carrier" model. This means:

  • You Retain Ownership: You own 100% of your phone numbers, contact lists, and message logs stored within your own Twilio or Telnyx account.
  • No Data Selling: We never sell, rent, or trade your contact lists or message contents to third parties.
  • AI Privacy: AI voice and text interactions are processed within your isolated instance. We do not use your proprietary customer conversations to train global/public AI models.

3. How We Use Your Information

We use your data strictly for the following purposes:

  • To authenticate and execute commands via the Twilio or Telnyx API (e.g., sending an SMS you composed).
  • To process subscription payments and calculate usage credits.
  • To send you important system alerts, security notifications, or invoice receipts.
  • To prevent fraud and ensure compliance with our Terms of Service.

4. Data Security

We implement enterprise-grade security measures to protect your information:

  • Encryption: All sensitive data (including API keys and passwords) is encrypted at rest using AES-256 encryption. Data in transit is protected via SSL/TLS.
  • Access Control: Access to your account data is strictly restricted to authorized personnel who require it for support or maintenance.

5. Third-Party Sharing

We do not share your personal data with third parties, except as necessary to provide the Service:

  • Your carrier (Twilio or Telnyx): As an interface, we transmit your commands to whichever carrier holds the number. Their use of that data is governed by the Twilio Privacy Policy or the Telnyx Privacy Policy respectively.
  • Payment Processors: We use secure third-party payment gateways (e.g., Stripe) to process transactions. We do not store your full credit card number on our servers.

6. Cookies & Tracking

We use session cookies to keep you logged in and ensure the platform functions correctly. We may use anonymous analytics tools to monitor system performance, but we do not use invasive tracking cookies for advertising purposes.

7. Your Rights

Depending on your location, you may have rights regarding your data, including the right to request access to, correction of, or deletion of your personal information. To exercise these rights, please contact our support team.

8. Google Calendar Integration (Optional)

If you choose to connect a Google Calendar so your AI assistant can book real appointments, here's exactly what that involves:

  • You choose the calendar. When you connect, Google shows you every calendar on your account and you pick exactly one. We never guess or default to a calendar you didn't select.
  • We check availability, not content. To find an open time slot, we ask Google only whether a time range is free or busy. We do not read the titles, descriptions, attendees, or any other details of your existing calendar events.
  • We only create events your AI assistant books. The only new data we write to your calendar is the appointment itself: customer name, time, and any notes captured during the call.
  • Only your own account can use it. Your connected calendar is never shared with, visible to, or usable by any other TelBuddy customer. Access is used exclusively by the automated booking system for your own account. It is not manually reviewed by TelBuddy staff as part of normal operation.
  • No training, no selling. Consistent with the rest of this policy, calendar data is never used to train AI models, and never sold, rented, or shared with third parties beyond what's required to operate the booking feature itself.
  • You can revoke access at any time. Disconnecting from your Appointments settings immediately revokes TelBuddy's access on Google's side, not just our local record of it. You can also review or remove TelBuddy's access directly from your Google Account at myaccount.google.com/permissions at any time.

How this data reaches our AI provider. To tell a caller what times are open, our AI voice assistant is told the result of the Google Calendar free/busy check described above, never your calendar's raw event titles, descriptions, or attendees, just whether a given time is open. This is processed by OpenAI, via OpenAI's standard API (the Realtime API), directly, with no intermediary aggregator, gateway, or model hub in between. We do not operate any self-hosted or offline AI model as part of this feature.

Limited Use Compliance Statement. TelBuddy's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Data obtained through Google Calendar is used solely to provide and improve the appointment-booking feature described above, is not used to create, train, or improve any generalized or foundational AI/ML model, and is not sold, rented, or shared with third parties for advertising or unrelated purposes. Our AI provider's standard API terms likewise state that data submitted through their API is not used to train or improve their models by default.

9. Opt-in Messaging for Text Alerts

If you opt in to SMS, we may send you transactional messages related to your TelBuddy account, such as security/2FA codes, billing/subscription notices, and support communications. Message frequency varies. Message & data rates may apply. Reply STOP to opt out and HELP for help. We do not sell or share your mobile number with third parties for their marketing purposes. We do not send marketing or promotional SMS.

Contact Us: If you have questions about this Privacy Policy, please contact us at privacy@telbuddy.com.