Privacy Policy

1. Who we are

Schedlit ("Schedlit", "we", "us") provides an AI phone receptionist for service businesses. It answers a business's calls, books appointments and shows the business owner what happened in a dashboard. This policy covers our website at schedlit.tech, the Schedlit app at app.schedlit.tech and the receptionist that answers calls. It explains what information we collect, how we use, store and share it, and the choices you have.

2. Information we collect

• Account information: your name, email address, phone number and password or sign-in provider (for example Google or Microsoft), handled through our authentication provider, Clerk.
• Business information: business name, address, opening hours, services, team members and the instructions you give your receptionist.
• Billing information: your plan and subscription status. Card payments are processed by Stripe through Clerk Billing; we do not receive or store full card numbers.
• Call information: when someone calls a business that uses Schedlit, we process the caller's phone number, the call audio to understand and answer them, the call transcript and summary, and the details the caller gives to book an appointment (such as name, phone number, email address and requested time).
• Google Calendar data: only if you connect Google Calendar. See section 4.
• Technical information: IP address, browser and device type, and server logs we need to run and secure the service.

We use cookies that are needed to sign you in and keep you signed in. We do not use advertising cookies and we do not sell personal information.

3. How we use information

• To provide the service: answer calls, book, change and cancel appointments, and show calls, transcripts and appointments in your dashboard.
• To run your account and subscription, and to send service messages such as verification codes and account notices.
• To provide support when you contact us.
• To keep the service secure, prevent abuse and fix problems.
• To meet legal obligations.

4. Google user data (Google Calendar)

Connecting Google Calendar is optional. A business owner can connect it from the Integrations page of the Schedlit app so that the receptionist books into their calendar. This section explains exactly what happens to Google user data.

4.1 What we access

When you connect, Google asks you to allow the permission https://www.googleapis.com/auth/calendar (see, edit, share and permanently delete the calendars you can access). With it, Schedlit:

• reads the busy and free time ranges of your calendar (free/busy information), and
• creates, updates and deletes the calendar events for appointments booked through Schedlit.

Schedlit does not read the titles, descriptions, attendees or other contents of events it did not create, and it does not access your Google contacts, email or files.

4.2 How we use it

• Free/busy times are used only to offer callers appointment times when you are free, so the receptionist does not double-book you.
• When an appointment is booked, changed or cancelled through Schedlit, we create, update or delete the matching event in your calendar. The event contains the appointment's service, time and the details the caller gave for that booking (such as name, phone number and email address).

We do not use Google user data for any other purpose.

4.3 What we store

• The OAuth access and refresh tokens Google issues, so Schedlit can reach your calendar while it is connected.
• The Google event ID of each appointment we put in your calendar, so we can update or remove that event later.

We do not keep a copy of your calendar or of your free/busy times; they are read when a caller asks for a time and then discarded.

4.4 How we share it

We do not sell, rent or share Google user data. It is not shared with advertisers, data brokers or other users, and it is not sent to AI model providers: the AI receptionist only receives the list of open appointment times. Google user data is processed only by Google and by the infrastructure that runs Schedlit (our hosting and database providers, acting on our instructions), or when we are required to by law.

4.5 How we protect it

All traffic between your browser, Schedlit and Google is encrypted with HTTPS (TLS). OAuth tokens are kept only on our servers, are never sent to your browser, and are used only by the server code that talks to Google Calendar. Access to production systems is limited to the people who operate Schedlit.

4.6 Retention and deletion

• We keep the OAuth tokens only while Google Calendar is connected.
• Choosing Disconnect on the Integrations page deletes the stored tokens immediately and stops all access to your calendar. Events that Schedlit already created stay in your calendar, because they are your appointments; you can delete them in Google Calendar at any time.
• You can also remove Schedlit's access at any time from your Google Account at myaccount.google.com/permissions.
• Deleting your Schedlit account deletes the tokens and the stored event IDs together with your business data.
• You can ask us to delete any Google user data we hold by emailing privacy@schedlit.tech.

4.7 Limited Use

Schedlit's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular, we use Google user data only to provide the user-facing calendar features described above, and we do not:

• use it for advertising, including targeted or personalized advertising;
• sell it, or transfer it to data brokers or information resellers;
• use it to determine credit-worthiness or for lending purposes;
• allow humans to read it, unless you ask us to (for example for support), it is needed for security or to comply with law, or it has been aggregated and anonymized;
• use it to develop, improve or train generalized or non-personalized AI and/or ML models.

5. How we share information

We share personal information only with service providers that help us run Schedlit, under contracts that limit their use of it:

• Clerk for sign-in, accounts and organizations, and Stripe (through Clerk Billing) for payments.
• Hosting and database providers that run our servers and store our data.
• Telephony carriers that connect phone calls to the receptionist.
• AI processing that transcribes calls and generates the receptionist's replies, run on our infrastructure or by our AI providers acting on our instructions. Google user data is never part of this (section 4.4).

We may also disclose information if the law requires it, to protect the rights and safety of our users and the public, or as part of a merger or acquisition, in which case this policy continues to apply to it.

6. Retention

• Account and business information is kept while your account is active.
• Calls, transcripts and appointments are kept until you delete them, or until the retention period you set for your organization ends.
• When you delete your account, your account and business data, including calls, transcripts, appointments and Google tokens, are deleted from our systems. Backup copies, where they exist, are removed as backups expire.
• We keep limited records longer only where the law requires it, such as billing records.

7. Your choices and rights

You can view and update your account and business details in the app, disconnect Google Calendar at any time, and delete your account. Depending on where you live, you may also have the right to access, correct, export or delete your personal information, or to object to how we use it. Email privacy@schedlit.tech and we will respond within 30 days.

If you call a business that uses Schedlit, that business decides how your call information is used; please contact the business, or us, and we will help.

8. Security

We use HTTPS for all traffic, keep secrets and tokens on our servers only, separate each business's data, and limit who can access production systems. No system is perfectly secure, but we work to protect your information and will notify you of a breach that affects it as the law requires.

9. International transfers

Our providers may process information in countries other than yours. Where required, we use legally recognized safeguards for those transfers.

10. Children

Schedlit is a service for businesses and is not intended for children under 13. We do not knowingly collect their personal information.

11. Changes to this policy

We will post any change on this page and update the date above. If we change how we use Google user data, we will tell connected users before the change takes effect and ask for consent where required.

12. Contact us