Privacy Policy

Faktia Global Technologies Limited, a company incorporated in Ireland (Company Registration Number: 760123), trading as Beeslee ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI voice receptionist service.

By using our Service, you consent to the data practices described in this policy. If you do not agree with our practices, please do not use the Service.

Account Information

When you register for an account, we collect:

• Name and email address
• Business name and contact information
• Password (encrypted)
• Billing information and payment details

Call Data and Recordings

When calls are processed through our Service, we collect:

• Call recordings and transcripts
• Caller phone numbers (ANI/Caller ID)
• Called phone numbers (DNIS)
• Call duration, timestamps, and metadata
• Information collected by AI agents during calls (appointments, inquiries)

Telecommunications Data

Through our telecommunications carrier partners, we receive and process:

• Call Detail Records (CDRs): Technical records of each call including origination, termination, duration, and routing information
• SIP Signaling Data: Technical call setup and teardown information
• Carrier Metadata: Network routing information, call quality metrics
• STIR/SHAKEN Attestation: Caller ID verification and authentication data
• Regulatory Compliance Data: Information required for telecommunications compliance (e.g., number registration, verification status)

Usage Data

We automatically collect:

• IP addresses and device information
• Browser type and operating system
• Pages visited and features used
• Time and date of visits

Payment Information

Payment processing is handled by Stripe. We do not store complete credit card numbers. We receive billing details necessary for invoicing and subscription management.

Calendar Integration Data

When you connect a calendar service (Square Appointments or Calendly) to our Service, we access the following data:

• Calendar/Location List: Names and identifiers of your calendars or business locations to allow you to select which to use for appointments
• Availability Information: Time slots when you are available for bookings
• OAuth Tokens: Secure access and refresh tokens to maintain the calendar connection

When our AI receptionist books an appointment on your behalf, we create bookings containing:

• Appointment date, time, and duration
• Customer name and contact information (as provided during the call)
• Service type (if applicable)

Important: We only query availability and create new appointments for bookings made through our Service. The specific data accessed depends on the calendar provider you connect.

We use collected information to:

• Provide the Service: Process calls, train AI agents, schedule appointments
• Improve the Service: Analyze usage patterns, develop new features
• Communicate: Send service updates, billing notices, support responses
• Ensure Security: Detect fraud, protect against unauthorized access
• Comply with Law: Meet legal obligations, respond to legal requests
• Process Payments: Bill for services, manage subscriptions

We may share your information with:

Service Providers

• Telnyx: Phone number provisioning and call routing
• Retell AI: AI voice agent processing
• Stripe: Payment processing
• Cloud hosting providers: Data storage and processing

Calendar Integrations

When you connect a calendar service (Square Appointments or Calendly), your calendar data is processed as follows:

• Retell AI: When our AI receptionist checks availability or books an appointment, calendar availability data and booking details are shared with Retell AI to enable real-time appointment scheduling during calls.
• Calendar Provider: Appointment bookings are created directly in your connected calendar service via their respective APIs. The calendar provider's handling of this data is governed by their own privacy policy.

We do not sell, share, or transfer your calendar data to any other third parties, advertising networks, or data brokers.

Telecommunications Carriers and Partners

To provide phone number services, we share data with telecommunications carriers:

• Telnyx (Primary Carrier): Receives call routing data, caller/called numbers, call metadata, and SIP signaling data necessary to complete calls. Telnyx may retain call detail records as required by telecommunications regulations.
• Upstream Carriers: Telnyx routes calls through various telecommunications networks. These carriers receive routing information necessary to complete calls.
• Regulatory Bodies: Telecommunications data may be disclosed to regulatory authorities (e.g., FCC, national telecom regulators) as required by law or in response to lawful requests.

Important: Caller phone numbers and call metadata are inherently shared with telecommunications networks to route and complete calls. This is a technical requirement of telephone services and cannot be avoided.

Legal Requirements

We may disclose information when required by law, court order, or government request, or to protect our rights and safety.

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

We do not sell your personal information to third parties.

We retain your information for as long as necessary to:

• Provide the Service and maintain your account
• Comply with legal obligations
• Resolve disputes and enforce agreements

Retention Periods

• Account data: Retained while account is active, plus 30 days after deletion
• Call recordings: Retained for 90 days by default (configurable)
• Call transcripts: Retained for the same period as recordings
• Call detail records (CDRs): Retained for 24 months for service quality and dispute resolution
• Billing records: Retained for 7 years for tax and legal compliance
• Usage logs: Retained for 12 months

Carrier Data Retention

Our telecommunications carrier partners (Telnyx and upstream carriers) maintain their own data retention policies as required by telecommunications regulations. This data may be retained independently of our retention periods and is subject to their respective privacy policies.

Calendar Integration Data Retention

• OAuth tokens: Retained while your calendar integration remains active. Deleted immediately upon disconnection.
• Calendar availability: Queried in real-time and not stored. No historical availability data is retained.
• Appointment records: Booking confirmations are retained as part of your call records (see "Call recordings" retention above). The appointments themselves are stored in your calendar service and governed by the provider's retention policies.

If you are in the European Economic Area (EEA), you have the following rights:

• Access: Request a copy of your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data ("right to be forgotten")
• Portability: Request your data in a portable format
• Objection: Object to processing based on legitimate interests
• Restriction: Request limited processing of your data
• Withdraw Consent: Withdraw consent at any time where processing is based on consent

To exercise these rights, contact us at privacy@beeslee.com. We will respond within 30 days.

Legal Basis for Processing (GDPR):

• Contract: Processing necessary to provide the Service
• Legitimate Interests: Improving the Service, security, fraud prevention
• Consent: Marketing communications, optional features
• Legal Obligation: Compliance with laws and regulations

Calendar Integration Access

You can manage your calendar connections at any time:

• Disconnect from Beeslee: Go to Settings → Integrations in your Beeslee dashboard to disconnect any calendar service. This immediately revokes our access and deletes stored OAuth tokens.
• Revoke via Provider: You can also revoke access through your calendar provider's account settings or app permissions page.
• Delete appointment data: Contact us to request deletion of appointment records created through any calendar integration.

Disconnecting an integration does not delete appointments previously created in your calendar service. You must delete those directly in the calendar provider if desired.

Your information may be transferred to and processed in countries outside your country of residence, including the United States, where data protection laws may differ.

For transfers from the EEA, we use:

• Standard Contractual Clauses approved by the European Commission
• Appropriate safeguards as required by GDPR

Telecommunications Data Flows

Phone calls are routed through global telecommunications networks. Call data (including caller numbers and call metadata) may transit through networks in multiple countries as part of standard call routing. This is a technical requirement of international telecommunications and is governed by international telecommunications agreements and regulations.

Our primary telecommunications carrier (Telnyx) processes data in the United States and may use sub-carriers in various jurisdictions to complete calls.

We implement appropriate technical and organizational measures to protect your information:

• Encryption of data in transit (TLS) and at rest
• Access controls and authentication
• Regular security assessments and monitoring
• Employee training on data protection
• Incident response procedures

Telecommunications Security

• SIP/TLS Encryption: Voice calls are encrypted using TLS for SIP signaling
• SRTP: Call audio is encrypted using Secure Real-time Transport Protocol where supported
• STIR/SHAKEN: Caller ID authentication to prevent spoofing
• SIP Credential Security: Unique authentication credentials per tenant, securely stored and managed

While we strive to protect your information, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

The Service is not intended for children under 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Service at least 30 days before they take effect.

The "Last updated" date at the top of this page indicates when the policy was last revised.

For questions about this Privacy Policy or our data practices, contact us:

• Company: Faktia Global Technologies Limited
• Registered Address: Unit 2, 2 Bridge Street, Athlone, Westmeath, Ireland N37 F1W4
• Company Registration: 760123 (Ireland)
• Email: privacy@beeslee.com
• Data Protection Officer: dpo@beeslee.com

If you are in the EEA and believe we have not addressed your concerns, you have the right to lodge a complaint with your local supervisory authority. The lead supervisory authority for Faktia Global Technologies Limited is the Irish Data Protection Commission.