Privacy Policy
Last updated: September 28, 2026
General
Your privacy is important to us. It is PersonaAI's policy to respect your privacy and comply with any applicable law and regulation regarding any personal information we may collect about you, including via our app and its associated services.
Personal information is any information about you which can be used to identify you. This includes information about you as a person (such as name, address, and date of birth), your devices, and even information about how you use an app or online service.
Information We Collect
Information we collect falls into one of two categories: "voluntarily provided" information and "automatically collected" information.
Log Data
When you access our servers via our app, we may automatically log the standard data provided by your device. It may include your device's Internet Protocol (IP) address, your device type and version, your activity within the app, time and date, and other details about your usage.
Personal Information
- Name
- Phone/mobile number
- Business details (business name, description, logo)
User-Generated Content
We consider "user-generated content" to be materials (text, image and/or video content) voluntarily supplied to us by our users. All user-generated content is associated with the account or email address used to submit the materials.
Collection and Use of Information
We may collect personal information from you when you:
- Register for an account
- Sign up to receive updates from us via email
- Use a mobile device or web browser to access our content
- Contact us via email or social media
We use information for the following purposes:
- To provide you with our app's core features and services
- To enable you to customize or personalize your experience
- To contact and communicate with you
- For analytics, market research, and business development (this never includes data received from Google APIs)
- For security and fraud prevention
These purposes do not apply to data we receive from Google APIs. Google user data is used only as described in the "Google User Data" section below.
Google User Data
If you choose to connect a Google account, PersonaAI accesses Google user data only to provide the features you enable. This section describes what we access and how it is used.
Depending on the features you connect, we may access:
Google Calendar (calendar.readonly, calendar.events): the events on the calendars you connect, their times and busy/free status, and the ability to create, update and cancel events.
Google Business Profile (business.manage): your business locations, the reviews customers leave on them, and the ability to post replies to those reviews.
Basic Google account information (openid, email, profile): your name and email address, used only to show which Google account is connected.
We use this data only to:
- Show your Google Calendar events inside PersonaAI and check availability so that appointments are not booked at times you are busy
- Add, update and cancel the appointments booked through PersonaAI in your Google Calendar
- Show the reviews of your business locations, alert you about new reviews, and publish the replies you approve or have set to publish automatically
- Draft suggested replies to your reviews with AI, which you can edit before they are published
PersonaAI's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. The use of raw or derived user data received from Google Workspace APIs (including Google Calendar) will adhere to the Google User Data Policy, including the Limited Use requirements.
How AI is used with Google user data: PersonaAI uses an AI model (Google Gemini) only to draft suggested replies to your Google reviews, and its booking assistant uses the free time slots worked out from your Google Calendar so that it does not offer times you are busy. Only the data needed for that request is sent (the review, or the available slots). The titles, descriptions and attendees of your calendar events are never sent to an AI model. We do not use, transfer or sell Google user data, whether raw, aggregated or derived, to create, train or improve foundational or generalized AI or machine-learning models.
In particular, we do not:
- Use Google user data for advertising, including personalized, retargeted or interest-based advertising
- Sell Google user data, or use it for any purpose other than providing or improving the user-facing features described above
- Use Google user data to develop, improve or train generalized or non-personalized AI or machine-learning models
- Use Google user data to determine creditworthiness or for lending purposes
- Transfer Google user data to third parties, except as necessary to provide or improve the features above (for example, our hosting provider and the AI service that drafts review replies), to comply with applicable law, or as part of a merger or acquisition with your notice
- Allow humans to read Google user data, unless you give us permission for a specific message or event, it is necessary for security purposes such as investigating abuse, or it is required to comply with applicable law
You can disconnect Google Calendar or Google Business Profile at any time from your PersonaAI settings, or revoke access at https://myaccount.google.com/permissions. When you disconnect, we stop accessing your Google data and delete the stored access tokens, and for Google Calendar the events we had synced. You can ask us to delete the Google data we have stored by contacting us.
Third Party Integrations
When you connect external services (such as Shopify, WhatsApp, Instagram, Facebook), we may access the following information:
- Product information (name, price, image, inventory)
- Order details (for tracking and customer service)
- Customer details (for chat and communication purposes)
- Messages and conversations (to operate the AI agent)
We use this information solely to operate the service and do not share it with unnecessary third parties.
Disclosure of Personal Information to Third Parties
We may disclose personal information to:
Third-party service providers for the purpose of enabling them to provide their services (including IT service providers, data storage, hosting and server providers, analytics). Google user data is never shared with analytics providers; see "Google User Data" above.
Third parties we currently use:
- Google Analytics
- Google Gemini AI
- Meta (WhatsApp, Instagram, Facebook)
Security of Your Personal Information
When we collect and process personal information, and while we retain this information, we will protect it within commercially acceptable means to prevent loss and theft, as well as unauthorized access, disclosure, copying, use or modification.
- SSL/TLS encryption for all communications
- Database encryption
- Daily backups
- Strict access controls
How Long We Keep Your Personal Information
We keep your personal information only for as long as we need to. If you have provided us with personal information as part of creating an account with us, we may retain this information for the duration your account exists on our system. If your personal information is no longer required for this purpose, we will delete it or make it anonymous.
Children's Privacy
We do not aim any of our products or services directly at children under the age of 13 and we do not knowingly collect personal information about children under 13.
Your Rights
Right of Access: You may request a copy of the personal information we hold about you
Right to Rectification: If personal data is inaccurate or out of date, you have the right to correct it
Right to Erasure: In certain circumstances, you can ask for your personal data to be erased
Right to Object: You have the right to object to processing of your personal information
Right to Portability: You have the right to get some of your personal data in an accessible format
Changes to This Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page. You are advised to review this Privacy Policy periodically for any changes.