Privacy Policy

The short version

DeskLeo runs an AI receptionist for your business. To do that we store your account details, the business information you teach the bot, and the conversations it has with your customers. We don't sell your data, we don't use it to train public AI models, and you can export or delete everything whenever you want.

What we collect

• Account data — name, email and login credentials, handled by our authentication provider (Clerk).
• Business data you provide — services, prices, FAQs, documents, website content and photos you use to train your bot.
• Conversations — chats between your bot and your customers (including names and contact details customers share), so you can see your leads and we can make the bot answer correctly.
• Connector credentials — API keys or sign-in tokens for tools you connect (e.g. calendars, payments, spreadsheets). These are encrypted at rest and never shown to anyone, including us, in plain text.
• Usage analytics — anonymous page-view and session data to improve the product.

How we use it

Only to run the service: generating your bot's replies (business data and conversations are sent to our AI processing partner solely to produce responses), booking appointments, alerting you about leads, and billing. We never sell personal data and never use your data to train publicly available AI models.

Who touches the data (sub-processors)

• Microsoft Azure — application hosting
• Supabase — database and file storage (India / Mumbai region)
• Clerk — authentication
• Google (Gemini API) — AI response generation
• Cashfree Payments — subscription billing
• Meta — only if you connect WhatsApp or Instagram channels
• Providers you explicitly connect (e.g. Cal.com, Google Sheets, Razorpay) — only for the actions you enable

Google user data

If you connect a Google service (such as Google Sheets), DeskLeo's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We access only the specific data needed for the feature you enabled (e.g. appending lead rows to the one spreadsheet you chose), never read unrelated data, and you can disconnect at any time — which deletes the stored credentials immediately.

Retention & deletion

Data is kept while your account is active. Disconnecting a connector destroys its stored credentials immediately. Deleting your account removes your business data, knowledge base, and conversations within 30 days. Email us anytime for a full export or deletion.

Your customers' data

You (the business) are the controller of conversations your bot has; we process them on your behalf. Please make sure using an AI assistant complies with commitments you make to your own customers.

Opting out of messages

Anyone can reply STOP to a bot to stop receiving updates and offers from that business. Replying STOP ALL goes further: we keep a platform-wide list of phone numbers we will not deliver to on behalf of any business using DeskLeo. That list is our own delivery decision, not a consent record shared between businesses, and it holds only the contact, the date, and the message you sent us. Replying START to any DeskLeo bot removes it again.

Contact

Questions, exports, deletions: prateekpatel712@gmail.com. We reply within 48 hours.