Privacy Policy
What we collect from businesses and their callers, what we do with it, and what we never do with it.
Who this covers
Two groups: businesses that use GotItDesk, and the people who call or are contacted by those businesses. For the second group, the business is in charge of your information and GotItDesk processes it on their behalf.
What we collect
From businesses: name, contact details, business details, the configuration you build (services, prices, hours, call flow, scripts), and billing information. When you create an account we also note which website sent your first visit, the page you landed on, and your answer to “How did you hear about us?” if you give one.
From callers: phone number, what was said on the call (transcripts, and recordings where lawful and disclosed), appointment details, language, and contact preferences including opt-ins and opt-outs.
What we use it for
To answer calls, make and confirm bookings, send the messages the business switched on, honour opt-outs, keep the service secure, bill businesses, and improve the quality of calls. We do not sell personal information.
AI training, and who reads calls
GotItDesk does not use calls, transcripts or caller details to train AI models, and does not sell or share them for advertising. The AI providers below receive what is said on a call only to run that call: turning speech into text, deciding the reply and speaking it.
Every call gets an automatic quality check when it ends (was the caller understood, was anything asked twice), so we can fix problems on our side. It reads the call record; no audio is kept for it.
People at GotItDesk read a call only to fix a problem or answer a help request from the business, and each time one of us opens a call or a business’s account it is logged.
Recordings
GotItDesk does not record the calls its receptionist answers today: it keeps the written transcript. A voicemail, left when the receptionist can’t answer (minutes used up, or our service unreachable), is recorded, because that is what a voicemail is, and emailed to the business. Call recording is planned only where the law allows it, with the notice the law requires, and a business will be told before it starts. The receptionist’s opening line, that it is a virtual assistant, is a separate thing: that tells callers they are talking to AI, and is on by default everywhere.
Mobile information
No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties. Information may be shared with the providers below only to deliver the service.
Google and Microsoft calendars
If a business connects a Google or Microsoft calendar, GotItDesk reads free and busy times so it only offers open slots, and creates, updates and deletes the events for bookings GotItDesk makes. It does not read the contents of other events, and it does not use calendar data for anything else.
GotItDesk’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Calendar data is never sold, never used for advertising, and never used to train AI models.
Only an encrypted refresh token is stored. Disconnecting in your account deletes it and revokes GotItDesk’s access; you can also remove access from your Google or Microsoft account settings at any time.
Who helps us run it
Phone calls and text messages: Telnyx. Turning callers’ speech into text: AssemblyAI. Deciding what to say: Anthropic. The receptionist’s voice: ElevenLabs, which receives what the receptionist says, not the caller’s audio. The servers that run calls: Hetzner, in the United States. The website, accounts and email: Vercel, Cloudflare and Resend. Card payments for paid plans: Stripe. Notifications to a business owner’s phone, if they turn them on, pass through the push service of their phone or browser (Apple, Google or Mozilla), encrypted so that service cannot read them. Each receives only what it needs to do its part.
How long we keep it
Call records are kept for as long as the business uses GotItDesk, and deleted on request or within 90 days of the business leaving. A business that deletes its account in its dashboard deletes them at once: its setup, calendar, calls, callers and messages. Opt-out records are kept for as long as the business uses GotItDesk, because deleting them would mean contacting someone who asked us not to.
Payment records stay with Stripe, our payment processor, as tax law requires.
A business can ask us at hello@gotitdesk.com for a copy of its data (its setup, calendar, calls and messages) as a file.
Your rights
You can ask for a copy of your information, ask us to correct it, or ask us to delete it, subject to the opt-out exception above. If you are a caller, you can also ask the business you called. Residents of California, Canada (including Quebec), the UK and the EU have additional rights under their local laws, and we honour them.
Contact: hello@gotitdesk.com.