Privacy that respects your callers and your business.

Dextel AI (“Dextel,” “we,” “us”) operates an AI agent platform that answers calls, books appointments, and routes conversations on behalf of businesses. This Privacy Policy explains what we collect, why we collect it, and the choices you have.

We act as a data processorfor your business's callers and customers, and as a data controller for the account you create with us. Where laws conflict, we follow the stricter standard.

We collect three categories of data:

• Account data — your name, email, organization, billing address, and authentication metadata when you sign up.
• Call & message data — audio recordings, transcripts, AI summaries, message bodies, tool invocations, and timestamps generated when our agent handles a call or chat. This may include personal information about your callers.
• Operational data — usage logs, device and browser data, and crash reports needed to keep the service running and secure.

We use the data we collect to:

• Provide the service — answering calls, booking, routing, and reporting.
• Improve voice quality, accuracy, and latency of the agent.
• Detect fraud, abuse, and security incidents.
• Send service announcements, billing notices, and (optionally) product updates.

We do notsell your data or your callers' data. We do not use call content to train shared third-party AI models.

The agent runs on top of large language and speech models from providers such as OpenAI, Anthropic, and Google. When the agent generates a response, we send only the data required for that response. We have contractual commitments with each provider that your data is not used to train their public models.

We publish a current list of sub-processors on request. Email support@dextelai.com for the latest version.

If you connect a Google account from Settings → Integrations, Dextel accesses Google user data only to provide the user-facing features you turned on, and for no other purpose:

• Google Calendar— we read your existing events to find busy times so appointments booked through Dextel never overlap them, and we create, update, and cancel the calendar events for those appointments.
• Google Sheets— we read the rows of the single spreadsheet you select with the Google Picker so your AI agent can look up information in it when answering a caller or chat. We only read that sheet; we do not write to it, and we cannot see any other file in your Drive.
• Google account email— shown on the Integrations page so you know which account is connected.

Dextel's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, we do not use Google user data for advertising, we do not sell it, we do not transfer it to third parties except as necessary to provide the features above (for example, sending sheet rows to the AI model that answers a question), to comply with law, or as part of a merger or acquisition with prior notice, and no human at Dextel reads it unless you give explicit permission, it is needed for security or to comply with law, or it has been aggregated and anonymized.

The use of raw or derived user data received from Workspace APIs will adhere to the Google User Data Policy, including the Limited Use requirements. We do not use Google user data — raw, aggregated, or derived — to create, train, or improve generalized or foundational machine learning or artificial intelligence models. Sheet rows and calendar events are sent to the AI model only to generate the specific answer or booking requested in that moment and are not retained by the model provider for training.

Access tokens are encrypted at rest. Calendar events and sheet rows are fetched live when needed and are not stored beyond what is required to complete that request. Disconnecting Google from Settings → Integrations, or revoking Dextel at myaccount.google.com/permissions, immediately stops all access and deletes the stored tokens.

By default we keep call recordings and transcripts for 12 months, after which they are deleted from primary storage. Account billing records are retained as required by tax and accounting laws (typically 7 years).

You can shorten retention or purge specific records at any time from the dashboard, or by emailing us.

Depending on your jurisdiction, you may have the right to access, correct, port, or delete the personal information we hold about you. You can exercise these rights from inside the product or by emailing support@dextelai.com. We respond within 30 days.

If you are a caller and want a business to delete or correct what its Dextel agent collected about you, please contact that business directly. They control the agent and the data.

Data is encrypted in transit (TLS 1.2+) and at rest (AES-256). Access to production systems requires SSO with hardware-key 2FA and is audited continuously. Security documentation describing our practices is available to customers on request.

No system is perfectly secure. If you believe you've found a vulnerability, please email support@dextelai.com.

We are headquartered in the United States and process data on US-based cloud infrastructure by default. EU data residency is available on request. Cross-border transfers rely on Standard Contractual Clauses where applicable.

Dextel is built for businesses and is not directed at children under 13. We do not knowingly collect personal information from children. If you believe we have, contact us and we will delete it.

We may update this Policy as our product evolves. Material changes will be announced via email and on this page at least 30 days before they take effect.

Mail us at Dextel AI, Inc., San Francisco, CA, or email support@dextelai.com for any privacy-related question.