Privacy Policy

Mike Cannon ("we," "us," or "our") operates Bob AI, an AI-powered front-office service for service businesses. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information. By using Bob AI ("the Service"), you agree to the practices described here.

We collect the following categories of information:

• Account information — your name, business name, email address, and password (hashed) when you create an account.
• Payment information — billing details processed securely by Stripe. We never store full card numbers.
• Call data — recordings and transcripts of inbound calls handled by Bob AI on your behalf.
• Booking data — appointment details captured by Bob AI during calls.
• Business settings — your business hours, services, and configuration preferences.
• Google account data — if you connect Google, we access the specific data described in Section 4.

• To operate and deliver the Service — answering calls, booking appointments, managing emails.
• To authenticate your account and secure your dashboard.
• To process payments and manage your subscription.
• To improve the quality of AI responses using anonymized call data.
• To send you service-related notifications (account alerts, billing receipts).

We do not sell your data or your callers' data to any third party.

If you connect your Google account to Bob AI, we request access to the following Google services:

• Google Calendar — to check your availability and create bookings when Bob AI books appointments during calls.
• Gmail (read) — to monitor your inbox for customer inquiries that Bob AI should respond to on your behalf.
• Gmail (send) — to send replies to customer emails from your address on your behalf.

Our use of Google user data is limited to the following:

• Google Calendar data is used solely to read availability and write appointment events for your business.
• Gmail data is used solely to read and reply to customer emails. We do not read personal or unrelated emails.
• We do not use Google data to serve advertisements or for any purpose unrelated to operating the Service for your account.
• We do not share Google user data with any third party except as required to operate the Service (e.g., our AI models for composing replies).
• Google tokens are stored encrypted in our database and are used only to make API calls on your behalf.

Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We use the following third-party services to operate Bob AI:

• Stripe — payment processing. Subject to Stripe's privacy policy.
• Retell AI — voice AI infrastructure for call handling.
• Supabase — secure database hosting for account and call data.
• Anthropic / OpenAI — AI models used for response generation and call analysis. Under Anthropic's and OpenAI's standard API data use policies, data submitted via API is not used to train their models.
• Cloudflare — edge hosting and traffic routing.

• Call recordings and transcripts are retained for 90 days, then automatically deleted.
• Booking records are retained for the life of your account.
• Account information is retained until you cancel and request deletion.
• Google tokens are deleted immediately when you disconnect your Google account.

We use industry-standard security practices including encrypted storage, HTTPS for all data in transit, and hashed passwords. Access to your data is limited to systems and personnel required to operate the Service. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

You have the right to:

• Access the data we hold about your account via your dashboard.
• Request deletion of your account and associated data by emailing bob@callbobai.com.
• Disconnect your Google account at any time from Settings — this immediately revokes our access and deletes your stored tokens.
• Export your call logs and booking records from the dashboard.

Bob AI answers calls on your behalf. Callers' voices may be recorded and transcribed. You, as the business operator, are responsible for informing your callers that calls are answered by AI and may be recorded, in accordance with the laws of your jurisdiction. We process caller data solely to deliver the Service to you and do not use it for any other purpose.

The Service is intended for use by businesses and is not directed at individuals under the age of 18. We do not knowingly collect personal information from minors.

If you are a California resident, the California Consumer Privacy Act (CCPA) grants you the following rights regarding your personal information:

• Right to Know — you may request disclosure of the categories and specific pieces of personal information we have collected about you.
• Right to Delete — you may request deletion of your personal information, subject to certain exceptions.
• Right to Opt-Out of Sale — we do not sell your personal information. No opt-out is required.
• Right to Non-Discrimination — we will not discriminate against you for exercising any of your CCPA rights.

To exercise your rights, email bob@callbobai.com with the subject line "California Privacy Request." We will respond within 45 days.

In the event of a data breach that compromises your personal information, we will notify affected users in accordance with applicable state law, including Wisconsin Stat. § 134.98. Notification will be provided via email to the address on your account as promptly as reasonably possible following discovery of the breach.

We may update this Privacy Policy from time to time. We will notify account holders by email before material changes take effect. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.

Questions or data requests? Contact us at:

Mike Cannon
9343 North 85th Street
Milwaukee, WI 53224
bob@callbobai.com