Privacy Policy

What Aurelia AI does

Aurelia AI is an AI phone receptionist for appointment-driven service businesses. When a business connects its phone line to Aurelia, we answer calls on that business's behalf, help callers book appointments, take messages, and notify the business about what happened. This policy explains what information we handle to make that work, and how we treat it.

Information we collect

• Caller information. When you call a business that uses Aurelia, we collect your phone number and a recording and transcript of the call, along with details you share during the call — such as your name, the service you're asking about, and the appointment time you'd like.
• Appointment details. Bookings, reschedules, and cancellations made through a call, including the service, provider, date, and time.
• Business account information. When a business signs up, we collect the owner's name and email, the business name, hours, services, staff names, and phone settings. Payments are processed by Stripe; we do not store full card numbers.
• Usage information. Call counts and durations, used for billing and to operate the service.

How we use it

We use this information for one purpose: providing the receptionist, booking, and notification service. That means answering and handling calls, creating and managing appointments, sending appointment confirmations and operational notifications, showing businesses their own call history and transcripts, billing, customer support, and troubleshooting.

We share information only with the service providers we need to run Aurelia — telephony carriers, AI voice processing, cloud hosting, and payment processing — and only as needed to deliver the service, or when the law requires it. We do not sell personal information.

Text messaging and mobile information

No mobile information or opt-in data is shared with third parties or affiliates for marketing or promotional purposes.

Phone numbers and text-messaging consent are used solely to send the appointment confirmations and operational notifications described in our Terms. Text messaging originator opt-in data will not be shared with any third party for any purpose other than delivering those messages.

Message frequency varies.

Message and data rates may apply.

How we protect it

Sensitive information is protected with specific technical and organizational measures:

• Encryption in transit. All connections to Aurelia — the website, the dashboard, and our APIs — use TLS (HTTPS).
• Encryption at rest. Our databases are encrypted at rest by our hosting providers. Calendar access credentials (OAuth tokens) are additionally encrypted at the application level before they are stored, so they are never kept in plain text.
• Access controls. Every business's data is isolated to that business: only the account owner and the team members they authorize can see their calls, appointments, clients, and calendar. Administrative access is limited to what is required to operate and support the service.
• Payment isolation. Card details are collected and stored by Stripe, our payment processor. Full card numbers never touch our systems.
• Retention limits and deletion. We keep information only as described in "How long we keep it" below, and honor deletion requests.

Connected Google Calendar data and AI

When a business connects its Google Calendar, Aurelia accesses the calendars the owner selects in order to list them, check availability, and create, update, or cancel appointment events. This Google user data is used solely to provide the scheduling features the business asked for. It is never used for advertising, never sold, and never used to determine creditworthiness or for lending purposes.

Aurelia's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. The use of raw or derived user data received from Workspace APIs will adhere to the Google User Data Policy, including the Limited Use requirements.

Aurelia uses an AI voice provider (xAI) to conduct calls. During a call the assistant may reference scheduling information — such as whether a time slot is free — that is derived from the business's connected calendar. Per xAI's API policy, xAI does not train its models on API inputs or outputs. We do not use Google user data — raw, aggregated, or derived — to create, train, or improve any machine-learning or artificial-intelligence models, and we do not transfer it to any third party for that purpose.

A business can disconnect its Google Calendar at any time from the dashboard, which revokes Aurelia's access; access can also be removed from the business's own Google Account security settings.

How long we keep it

Call recordings, transcripts, and appointment records are kept while the business's account is active, so the business can review its own call history. When an account is closed, or when we receive a valid deletion request, we delete the associated records within a reasonable time, except where we're required to keep them (for example, billing records).

Your choices

If you'd like to access, correct, or delete information about you — whether you're a business customer or someone who called a Aurelia-answered line — email us at chasemoffett5@gmail.com and we'll help.

Changes and contact

If we make material changes to this policy, we'll update this page and the date at the top. Questions about privacy go to chasemoffett5@gmail.com.