Privacy Policy

EMLY AI ("we," "our," or "us") respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered phone services.

We collect information that you provide directly to us, including:

• Account information (name, email, phone number, business name)
• Payment information (processed securely through Stripe)
• Call data and recordings for service delivery
• Communication preferences and settings
• Support inquiries and correspondence

We use the information we collect to:

• Provide, maintain, and improve our services
• Process transactions and send related information
• Send technical notices, updates, and support messages
• Respond to your comments, questions, and requests
• Monitor and analyze trends, usage, and activities
• Detect, investigate, and prevent fraudulent transactions

When you connect a Google Workspace account to EMLY AI, we request only the minimum OAuth scopes required to deliver the user-facing features you have chosen to enable. The specific Google data we access, how we use it, and how we protect it are described below.

• Data accessed — Google Calendar (scope: https://www.googleapis.com/auth/calendar): calendar list, event details, availability windows, and event attendees for calendars you explicitly connect. We create, update, and read events on your behalf so the voice agent can book, reschedule, and cancel appointments during live calls.
• Data accessed — Google Drive (scope: https://www.googleapis.com/auth/drive.file): only the specific Google Sheets that EMLY AI creates or that you explicitly open through EMLY AI. We do not read, list, or index any other files in your Drive. We use this access solely to append call-history rows to the sheet you connect.
• Data accessed — Google account email (scope: https://www.googleapis.com/auth/userinfo.email): your Google account email address, used only to identify which Google account is connected inside your EMLY AI workspace.
• Use — Google user data is used only to operate the user-facing features described above (scheduling and call-history export). It is not used for advertising, resale, credit or lending decisions, or any purpose unrelated to the feature you enabled.
• Transfer — We do not sell Google user data and we do not share it with third parties for their own purposes. Google user data is transmitted only between your Google account, our infrastructure hosted on Amazon Web Services in Canada (Montréal, ca-central-1), and, where required to fulfill the request you initiated (for example, generating a natural-language event title from your instructions), the model providers listed under "AI/ML Model Usage" below.
• AI/ML training restriction — Raw and derived Google Workspace user data is not used to develop, improve, or train generalized AI/ML models. Any model interactions are limited to processing the specific request you initiated and returning the result to you.
• Protection — All Google data is transmitted over TLS 1.3, encrypted at rest with AES-256, scoped to your workspace, and accessible only to authenticated members of that workspace and to authorized EMLY AI personnel on a need-to-know basis.
• Retention and deletion — Access tokens and Google-linked identifiers are retained while the connection is active. You can disconnect a Google integration at any time from the EMLY AI dashboard, which revokes our stored tokens; you can additionally revoke our access at https://myaccount.google.com/permissions. When you delete your EMLY AI workspace, all Google-linked identifiers and tokens for that workspace are deleted within 30 days.

EMLY AI uses large language models from Anthropic (Claude) and OpenAI to power voice agent reasoning, transcription, and summarization. These models are used strictly to process user-facing requests and are not used to train generalized models on your data. EMLY AI's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

• Anthropic and OpenAI process data via their commercial APIs and, per their published terms, do not use API inputs or outputs to train their foundation models.
• Google Workspace user data (Calendar and Drive) is never sent to any third-party AI/ML service that would use that data to train its own models.
• EMLY AI does not train, fine-tune, or improve any generalized AI/ML model using raw or derived Google Workspace user data.

We implement industry-standard encryption and security measures to protect your personal information, including TLS 1.3 in transit, AES-256 at rest, role-based access controls, and multi-factor authentication for administrative access. However, no method of transmission over the Internet or electronic storage is 100% secure. We strive to use commercially acceptable means to protect your personal data.

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements.

• Call recordings are retained for 90 days unless otherwise specified in your plan.
• Call transcripts and structured call metadata are retained for the life of your workspace or until you delete them.
• Google OAuth access and refresh tokens are retained while the connection is active and are deleted within 30 days of you disconnecting the integration or deleting your workspace.
• You can request full deletion of your workspace and associated personal data at any time by contacting info@emlyai.ca; deletion is completed within 30 days of a verified request.

We share your information only with third-party service providers who perform services on our behalf, and only to the extent necessary to deliver the feature you have enabled. Current providers include Amazon Web Services (Canada, ca-central-1) for hosting and storage; Stripe for payment processing (we never store full card numbers); Retell AI for real-time voice telephony and transcription; Anthropic and OpenAI for large language model inference used to power voice agent reasoning; Google (Calendar and Drive) only when you explicitly connect a Google Workspace account and only for the features described in the "Google User Data" section above; and optional CRM integrations such as Attio, HubSpot, and Follow Up Boss only when you explicitly connect them. These providers are contractually obligated to protect your information and are not permitted to use it for their own advertising or model-training purposes.

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Withdraw consent at any time, including by disconnecting Google or other integrations from the EMLY AI dashboard, or by revoking EMLY AI's access at https://myaccount.google.com/permissions
• Export your data in a portable format

This policy complies with the Alberta Personal Information Protection Act (PIPA) and the federal Personal Information Protection and Electronic Documents Act (PIPEDA). We are committed to ensuring your personal information is handled in accordance with applicable Canadian privacy laws.

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us at Contact Us.