Privacy Policy
Last updated November 14, 2026
Telavar is an AI phone receptionist operated by [Company legal name] ("Telavar", "we", "us"). This policy explains what information we handle, why, and the choices you have. It covers two groups of people: businesses that use Telavar (our customers), and callers who phone a business that uses Telavar.
Information we collect
- Business account details: name, email address, password (stored only as a secure hash), business details you enter such as services, hours, prices and instructions, and phone numbers you give us for call forwarding and notifications.
- Call information: the caller's phone number, what is said on the call (converted to text), the conversation transcript, call time and length, and any appointment details given during the call, such as name, service needed and preferred time.
- Text message information: the phone numbers we text, message content, delivery status, and whether a caller agreed to receive texts.
- Calendar information (only if a business connects Google Calendar or Outlook): busy and free times used to offer open slots, and the appointment events we create. We store an access token to keep the connection working; the business can disconnect at any time.
- Early-access requests: if you ask for early access, the name, business, email, phone number, trade and note you send us, used only to contact you about Telavar.
- Technical information: a sign-in cookie that keeps you logged in, and IP addresses used for security and to prevent abuse.
How we use information
- To answer calls on a business's behalf, answer questions using the details the business provided, take messages and book appointments.
- To send texts: call summaries to the business owner, and appointment confirmations and updates to callers who agreed to receive them.
- To show a business its call history, transcripts and appointments.
- To keep the service secure, prevent abuse, fix problems and provide support.
We do not sell personal information, and we do not use callers' information for our own marketing.
Service providers we share information with
We use trusted providers to run Telavar, and share only what each needs to do its job:
- Twilio: phone calls, speech-to-text and text messages.
- Anthropic: the AI that understands callers and writes replies and call summaries. Conversation text is sent to it to produce each response.
- Google or Microsoft: only when a business connects its calendar.
- Our hosting provider: [hosting provider], which stores the service's data.
We may also disclose information if the law requires it, or to protect the rights and safety of our users or the public.
Text messaging. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties, except the aggregators and providers that deliver the text messages.
Callers
When you call a business that uses Telavar, we handle your information on that business's behalf, so it can respond to you and manage your appointment. The business can see your phone number, the call transcript and any appointment details. For questions about how a business uses your information, contact that business directly. You can also contact us at [contact email].
How long we keep information
We automatically delete call transcripts and past appointment records 1 year after the call or appointment. Businesses can choose a shorter period, and can delete individual calls or all of their call history at any time from their dashboard. We keep account details for as long as the business's account is active, or until the business asks us to delete them, unless the law requires us to keep them longer. Short-lived data used during a live call is cleared after the call ends. Database backups are encrypted and are replaced on a rolling basis.
Security
We use reasonable safeguards designed to protect information: it travels over encrypted connections (HTTPS), passwords are stored as one-way hashes, backups are encrypted, servers receive automatic security updates and are firewalled, call transcripts are deleted automatically after the retention period above, and access to customer data is limited to what's needed to run and support the service. No system is perfectly secure, and we can't guarantee that information will never be accessed without authorization.
If a security incident happens. If we learn that personal information in our systems was accessed or acquired without authorization, we will investigate, take steps to contain it, and notify affected business customers without undue delay. Where the law requires it, we or the business will also notify affected individuals and regulators. Business customers are responsible for keeping their own sign-in details and devices secure; tell us right away at [contact email] if you suspect someone has accessed your account.
Your choices
- Texts: reply STOP to any Telavar text to stop receiving texts from that number, or HELP for help. Business owners can also turn off call summaries in their dashboard.
- Access and deletion: to ask for a copy of your information, or for it to be corrected or deleted, email [contact email]. Callers may be referred to the business they called.
- Calendars: businesses can disconnect Google Calendar or Outlook from the dashboard at any time.
Children
Telavar is a service for businesses and is not directed to children under 13. We do not knowingly collect information from children.
Changes to this policy
If we change this policy, we'll update the date above, and for significant changes we'll let business customers know by email or in the dashboard.
Contact
[Company legal name] · [contact email] · [mailing address]