Last updated: October 29, 2026
Calyfy provides an AI phone receptionist and a dashboard for businesses. This policy explains what information we handle when someone visits our website, uses a Calyfy account, connects a calendar, or calls a business using Calyfy. A business using Calyfy decides what information to provide to its receptionist and how to follow up with its callers.
We use this information to authenticate users, configure and run the receptionist, route calls, answer questions using business-approved information, create call records and follow-up tasks, support appointments, administer subscriptions, respond to support requests, and protect and improve the service. Authorized members of a business can review information associated with that business in its dashboard.
Connecting Google Calendar is optional. When a business owner or administrator chooses to connect it, Calyfy receives the Google account email address to identify the connection and stores an encrypted credential so it can continue to work. Calyfy checks free and busy periods on the connected account's primary calendar to avoid offering occupied times. The availability check does not retrieve existing event titles or descriptions.
If the business enables booking during calls, Calyfy can create appointments on that calendar using the caller's chosen time and appointment details. It may look up, update, or cancel events managed through Calyfy when those actions are needed for the appointment workflow. Calyfy sends appointment details to Google to create or manage those events. Available time options may pass through the voice provider so the receptionist can discuss them with the caller. Booking outcomes appear in the business dashboard. We do not use Google Calendar data for advertising or sell it.
The business can disconnect Google Calendar from Scheduling rules. Disconnecting removes Calyfy's stored connection credential and stops future calendar access through that connection. It does not delete appointments already created in Google Calendar or call and appointment records already held in Calyfy. Access can also be revoked from Google Account settings.
We share information with service providers only as needed to run Calyfy: Vapi processes voice calls and related call artifacts; Firebase supports authentication and data storage; Vercel hosts the application; Polar handles checkout and subscriptions; and Resend delivers service emails when configured. Google receives calendar requests when a business connects its calendar. Providers may process information in locations outside the user's country. We may also disclose information when required by law or to protect the service and its users.
Calyfy uses a session cookie to keep users signed in and a short-lived cookie while connecting Google Calendar. We use Simple Analytics on the production website and Google Analytics when configured to understand site usage. These tools may collect technical information about visits. Browser settings can limit cookies, but disabling essential cookies may prevent sign-in or calendar connection.
We use access controls and other technical safeguards to protect service data. Google Calendar connection credentials are encrypted before storage. No online service can guarantee absolute security. We keep information while it is needed to provide the service, maintain records, resolve disputes, or meet legal obligations. Retention can differ by record and provider; we do not promise a single deletion date for all data.
Account holders can update many business details in the dashboard, disconnect Google Calendar, and request account deletion in Settings. Subscription or other outstanding obligations may need to be resolved before account deletion can finish. Some records may remain where retention is required by law or where a provider retains them under its own policy. Callers seeking access to or correction of information from a business call should first contact that business; they may also contact us for help with a Calyfy-held record.
We may update this policy as the service changes. We will change the date above when we publish an update and provide additional notice where required. For privacy questions or requests, use our contact page.
