Privacy Policy

1. Introduction

TalkAndText.ai ("we," "us," or "our") is operated by XROI LLC d/b/a Talk and Text. This Privacy Policy explains how we collect, use, disclose, and protect information when you use our platform, website, and services (collectively, the "Service").

By using TalkAndText.ai, you agree to the collection and use of information in accordance with this policy.

2. Who We Are

TalkAndText.ai provides AI-powered appointment booking via voice and SMS. We give local businesses ("Merchants") a dedicated phone number that their customers can call or text to schedule appointments. We are the service provider — Merchants are our direct customers, and their end customers ("End Users") interact with our AI on the Merchant's behalf.

3. Information We Collect

3.1 Information from Merchants (Business Owners)

When you sign up for a TalkAndText.ai account, we collect:

• Name and email address
• Business name, type, and contact information
• Payment information (processed securely by our payment provider)
• Calendar data (when you connect Google Calendar, iCal, Outlook, Fantastical, or Calendly)
• Business hours, service types, and booking preferences
• Account login credentials

3.2 Information from End Users (Your Customers)

When a customer contacts a Merchant's TalkAndText.ai number, we may collect:

• Phone number
• The content of SMS messages or voice calls (to process the booking request)
• Appointment details (service requested, date, time)
• Booking history associated with that phone number

3.3 Automatically Collected Information

When you visit our website, we may collect:

• IP address and browser type
• Pages visited and time spent on the site
• Device information
• Cookies and similar tracking technologies

4. How We Use Your Information

We use the information we collect to:

• Provide, operate, and improve the TalkAndText.ai Service
• Process and confirm appointment bookings
• Send SMS and voice confirmations, reminders, and cancellation notices
• Sync bookings with connected calendar services
• Process payments and manage billing
• Respond to support requests
• Comply with legal obligations
• Detect and prevent fraud or abuse

We do not sell your personal information to third parties.

We do not use your information for advertising purposes.

Data obtained through Google APIs (Google Calendar) is used only to provide the appointment-scheduling features described in Section 7 below. Notwithstanding the general "improve the Service" purpose above, Google user data is not used to improve or develop other products or services, and is not used to train artificial intelligence or machine learning models. See Section 7 (Google User Data and Limited Use).

5. SMS Messaging

TalkAndText.ai sends SMS messages on behalf of Merchants. By texting a Merchant's TalkAndText.ai number, End Users consent to receive SMS replies related to their appointment request, including:

• Booking confirmations
• Appointment reminders
• Cancellation and reschedule notices
• Message frequency varies based on your appointment activity.

Message and data rates may apply. End Users can opt out at any time by replying STOP to any message. For help, reply HELP.

Consumer mobile information will not be shared with third parties or affiliates for marketing or promotional purposes.

6. How We Share Your Information

We may share your information with:

• Service Providers: Third-party vendors who help us operate the platform (e.g., Twilio for SMS delivery, calendar integration partners, payment processors). These providers are contractually obligated to protect your data.
• Merchants: End User booking data is shared with the applicable Merchant to fulfill the appointment.
• Legal Authorities: When required by law, court order, or to protect the rights, property, or safety of TalkAndText.ai, our users, or the public.

We do not share your information with any other third parties without your consent.

7. Google User Data and Limited Use

TalkAndText.ai connects to Google Calendar so that Merchants can automate appointment scheduling. This section describes how we access, use, store, and protect data obtained through Google APIs ("Google user data").

7.1 Scopes We Request

• Google Calendar events (https://www.googleapis.com/auth/calendar.events) — to create, view, update, and cancel the appointment events that TalkAndText.ai books on the Merchant's behalf.
• Google Calendar free/busy (https://www.googleapis.com/auth/calendar.events.freebusy) — to read availability so we only offer open time slots to End Users.

We request the minimum scopes necessary to provide the scheduling feature. We do not request access to read the full contents of your calendar.

7.2 How We Use Google User Data

We use Google user data solely to provide the appointment-scheduling features of the Service to the Merchant who granted access — namely, checking free/busy availability and creating, updating, or canceling appointment events on the connected calendar. We do not use Google user data for any other purpose.

7.3 Limited Use Disclosure

The use and transfer of raw or derived user data received from Google Workspace APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically, we do not:

• Sell Google user data.
• Use or transfer Google user data for serving advertisements.
• Transfer or disclose Google user data to third parties, except as necessary to provide or improve the Service for the Merchant who granted access, to comply with applicable law, or as part of a merger or acquisition with appropriate notice.
• Use Google user data to develop, improve, or train generalized and/or non-personalized artificial intelligence (AI) and/or machine learning (ML) models. Where AI features are used to process a booking request, they operate only to deliver the requested feature to the Merchant and their End Users in real time; Google user data is not retained for, or used in, the training of any AI/ML model.
• Allow humans to read Google user data, unless (a) we obtain the Merchant's affirmative agreement to view specific data, (b) it is necessary for security purposes such as investigating abuse, (c) it is required to comply with applicable law, or (d) the data has been aggregated and anonymized and is used for internal operations.

7.4 Storage, Retention, and Revocation

We store the Google OAuth tokens and the minimum calendar data required to operate the Service. Merchants can disconnect Google Calendar at any time from their dashboard settings, and can revoke TalkAndText.ai's access directly through their Google Account permissions page. Upon disconnection or account deletion, we delete the stored Google tokens and associated Google calendar data in accordance with our Data Retention practices described in Section 8 below.

8. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. If you cancel your account, we will delete or anonymize your data within 90 days, unless we are required to retain it by law.

Booking and conversation records may be retained for up to 12 months for service quality and dispute resolution purposes.

9. Security

We implement industry-standard security measures to protect your information, including encryption in transit (TLS) and at rest. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

10. Your Rights

Depending on your location, you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate data
• Request deletion of your personal information
• Opt out of certain data processing activities
• Data portability

To exercise any of these rights, contact us at privacy@talkandtext.ai.

11. Children's Privacy

TalkAndText.ai is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us immediately.

12. Third-Party Links and Services

Our Service integrates with third-party calendar and communication services. This Privacy Policy does not apply to those third-party services. We encourage you to review their privacy policies before connecting them to your account.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a new effective date. Continued use of the Service after changes constitutes your acceptance of the updated policy.

14. Contact Us

If you have any questions about this Privacy Policy, please contact us at: