Privacy Policy

1. Who we are

1n1.ai is operated by Techalyst Software Inc., a software company based in Vancouver, British Columbia, Canada. When we say "we," "us," or "1n1.ai" in this policy, we mean Techalyst Software Inc.

2. What we collect

Information you give us

• Account information: name, email address, password, and any profile details you add.
• Social sign-in information: if you choose to sign in with Google or Apple, we receive a stable provider identifier, your name (on first sign-in only, for Apple), and an email address. If you use Apple's private email relay, we only receive the relay address (a @privaterelay.appleid.com address) and Apple forwards mail through to your real address. Using Google or Apple Sign-in is also subject to the respective provider's terms and privacy policy. You can disconnect a social account at any time from your account settings.
• Agent configuration: the descriptions, prompts, settings, and files you upload to build your agents, and for Front Desk the business details you enter (name, hours, services, prices, address, the questions you want asked).
• Schedule and client information: names, email addresses, and notes for clients you invite to scheduled 1on1s.
• Website content: the text, images and contact details you publish on the website we host for you.
• Phone details: the number we assign you and, if you use ring-first, the phone number you want rung before the receptionist answers.
• Billing information: handled by Stripe. We don't see or store full card numbers, only the last four digits, expiry, and a Stripe customer ID.
• Support messages: anything you send through the contact form or by email.

Information generated when you use the service

• Voice call audio: recordings of conversations between your agent and the people who talk to it.
• Transcripts: text records of those conversations.
• Summaries: written recaps generated after each call. Calls you answer yourself on ring-first are not recorded or transcribed; we keep only the time and length.
• Lead and intake data: names, emails, phone numbers, and custom fields that your agent captures from callers during conversations.
• Usage data: minutes used, calls completed, agent counts, and similar plan-level metrics needed to apply your subscription limits.
• Technical data: IP address, browser type, device type, and timestamps, for basic security, fraud prevention, and debugging.

3. How we use it

• To operate 1n1.ai: host your agents, route their calls, store transcripts and summaries, send emails on your behalf.
• To enforce subscription limits and bill you correctly.
• To send you transactional emails (call summaries, invoices, password resets, scheduled call reminders, trial and plan notices).
• To respond to support requests.
• To detect and prevent abuse, fraud, or harm to other users.
• To comply with legal obligations.

We don't use the content of your calls, transcripts, or uploaded files to train AI models. Aggregated, fully anonymized usage statistics may be used to understand product trends.

If you called a business that uses 1n1.ai

The business you called is responsible for your information; we process it on their behalf. Our receptionist is instructed to announce at the start of a phone call that the call is recorded, and to say it is a voice assistant if you ask. We capture the audio, a transcript, a summary and whatever you choose to share, such as your name and callback number, and deliver it to that business. To access or delete it, contact the business first. You can also reach us at legal@1n1.ai and we will help.

4. Who we share it with

We only share data with third parties when it's necessary to deliver the service, comply with the law, or protect 1n1.ai and its users.

• AI providers (Google Gemini, OpenAI, Anthropic Claude, Telnyx, Groq, and others we may add over time): to power real-time voice conversations and generate summaries. A session may be routed through one of these depending on availability and the use case. Audio and text are sent to the active provider during a session, governed by that provider's terms.
• Stripe: to process payments. Card data is collected by Stripe directly; we never see it.
• Resend: our email delivery provider, used to send transactional emails (call summaries, invoices, password resets, scheduled call reminders, trial and plan notices) on our behalf.
• DigitalOcean: our cloud hosting and storage provider, used to run the application and store your data (database, transcripts, recordings, and uploads) securely.
• Telnyx: our telephony provider, used to provision phone numbers and to route inbound and outbound calls between callers and your AI agent.
• Google and Apple (only if you choose to sign in with one of them): used to verify your identity at sign-in. We receive only the data described in section 2 above; sign-in never shares your call data, leads, or account content back to these providers.
• Google Calendar (only if you connect a Google account for booking from Tools & Apps): so your receptionist can book appointments. We ask for calendar permissions only. We receive the email address of the Google account you connect, to show you which account is linked, and we read the list of calendars you own so you can choose which one to book into. We read when your chosen calendar is busy, not the details of your events, so the receptionist only offers free times. When a caller books or asks for a time, we create an appointment event in that calendar (name, phone number, reason, and a link to the call), and move, update or cancel that same event when the caller asks. We never change events we did not create. We keep a record of each booking (time, name, phone number and reason) in your 1n1.ai account so your receptionist can find and change it when the caller rings back; it is kept while your account is active, like your call records. Access tokens are stored encrypted and used only for this feature. You can disconnect at any time from Tools & Apps, which revokes our access with Google unless another 1n1.ai connection still uses the same Google account; any events already created stay in your calendar. 1n1.ai's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
• Google Sheets (only if you connect a Google account for the call sheet from Tools & Apps): a separate connection with its own permission, which lets us create and edit only the files 1n1.ai makes. We receive the email address of the Google account you connect, to show you which account is linked. When you switch the call sheet on, we create one spreadsheet in your Google Drive and add a row for each call (date, time, caller, phone, reason, outcome, booking, minutes, and a link to the call). We cannot see or open any other file in your Drive. Access tokens are stored encrypted and used only for this feature. You can disconnect at any time from Tools & Apps, which revokes our access with Google unless another 1n1.ai connection still uses the same Google account; the spreadsheet stays in your Drive and is used again if you reconnect. The Google API Services User Data Policy linked above applies to this connection too.
• Microsoft 365 and Outlook calendars (only if you connect a Microsoft account from Tools & Apps): so your receptionist can book appointments into your calendar. We receive the email address of the Microsoft account you connect, to show you which account is linked, and we read the list of calendars you can book into so you can choose one. We read only the start time, end time and busy or free status of the events in the calendar you choose, never their titles or details, so the receptionist only offers free times. When a caller books or asks for a time, we create an appointment event in that calendar (name, phone number, reason, and a link to the call), and move, update or cancel that same event when the caller asks. We never change events we did not create, and we do not read your email, contacts or files. We keep a record of each booking (time, name, phone number and reason) in your 1n1.ai account so your receptionist can find and change it when the caller rings back; it is kept while your account is active, like your call records. Access tokens are stored encrypted and used only for these features. You can disconnect at any time from Tools & Apps, which deletes the access we hold; you can also remove 1n1.ai from the apps with access to your Microsoft account in your Microsoft account settings. Any events already created stay in your calendar.
• Excel on OneDrive (only if you connect a Microsoft account for the call workbook from Tools & Apps): a separate connection with its own permission, limited to the 1n1.ai folder in your OneDrive; we cannot see or open files outside that folder. We receive the email address of the Microsoft account you connect, to show you which account is linked. When you connect, we create one workbook in a 1n1.ai folder in your OneDrive (under Apps) and add a row for each call (date, time, caller, phone, reason, outcome, booking, minutes, and a link to the call). We do not read your other files, your email or your contacts. Access tokens are stored encrypted and used only for this feature. You can disconnect at any time from Tools & Apps, which deletes the access we hold; you can also remove 1n1.ai from the apps with access to your Microsoft account in your Microsoft account settings. The workbook stays in your OneDrive and is used again if you reconnect.
• Law enforcement or regulators: only when legally required (subpoena, court order, valid legal process).

We do not sell your personal information, your call content, or your captured leads to anyone.

5. Where data is stored

Our application, database, and file storage (including transcripts, recordings, and uploads held in DigitalOcean Spaces object storage) are hosted on DigitalOcean in their Toronto, Canada data center. Some processing (e.g. voice and AI inference via our AI providers, including Google Gemini, OpenAI, Anthropic Claude, Telnyx, Groq, and others we may add over time) may take place in regions outside Canada under the data-protection terms of those vendors. If you have specific data-residency requirements, contact us before subscribing.

6. How we protect your data

This applies to everything we hold about you, and in particular to the data we receive from Google and Microsoft when you connect a calendar, a sheet or a workbook.

• Encrypted in transit: every connection between your browser, our servers, and Google or Microsoft uses HTTPS (TLS). Our site enforces HTTPS on every request.
• Encrypted at rest: the access and refresh tokens that let us reach your Google or Microsoft account are stored encrypted in our database with a key that is kept outside the database. They are never shown in your dashboard, never returned by our API, and never written to logs.
• Least access: we ask only for the permissions a feature needs (calendar access for booking; files 1n1.ai creates for the call sheet; a single app folder for the workbook), and we use them only for that feature. Access to our production systems is limited to the people who operate the service and is used only for support, security and debugging.
• Not sold, not used for ads, not used for training: data we receive from Google or Microsoft, including calendar availability, bookings and call-sheet rows, is never sold, never used for advertising, and never used to train or improve any AI or machine-learning model, ours or anyone else's.
• Deleted when you say so: disconnecting a calendar, sheet or workbook from Tools & Apps deletes the tokens immediately. Deleting your account deletes every connection with it. The booking records we keep in your account follow the retention rules in section 7 and can be erased on request.
• If something goes wrong: if we become aware of a breach affecting your personal information, we will notify affected users and the relevant authorities as required by PIPEDA and PIPA BC.

7. How long we keep it

• Call audio recordings: automatically deleted from storage 730 days after the call ends. Earlier deletion can be requested.
• Call transcripts, recap text, and conversation metadata: retained while your account is active for billing accuracy, recap delivery, audit, and dispute resolution. Subject to manual deletion request.
• Leads: you can delete any lead from your dashboard at any time; dashboard deletion is immediate.
• Clients, Agents, Bookings, and website pages: archivable from your dashboard. Archived items are hidden from the active view and recoverable. Permanent erasure is by request.
• Phone numbers: a number we take back when a trial or plan lapses, or that you release, is no longer tied to your account and may be assigned to someone else. Your call history stays in your account.
• Account data: retained while your account is active. Closed accounts are retained in our records for billing reconciliation, dispute resolution, fraud prevention, and statutory compliance.
• Billing records: retained for at least 7 years as required by Canadian tax law (Income Tax Act recordkeeping), even after account closure.
• Logs: short-term retention (days to weeks) for security and debugging, then purged.
• Google and Microsoft connections: the access and refresh tokens for a connected calendar, sheet or workbook are kept only while that connection is active and are deleted the moment you disconnect it or close your account. The free-time list we read from your calendar is cached for at most 15 minutes and then discarded. Booking records created from calls are kept like call records above. The rows we add to your sheet or workbook live in your Google or Microsoft account, not on our servers, and stay there after you disconnect.

For the complete retention table and the formal deletion-request process, see our PIPEDA & PIPA BC Compliance page.

8. Your rights

Depending on where you live, you may have the right to:

• Access the personal information we hold about you.
• Correct inaccurate information.
• Request deletion of your account and the data tied to it, subject to legal and business retention exceptions (such as billing records, fraud-prevention reviews, open law enforcement or regulatory requests, and other applicable statutory obligations).
• Receive a copy of your data.
• Object to or restrict certain uses.

To exercise any of these rights, email legal@1n1.ai. We review every deletion request before processing to ensure it does not conflict with a legal or business retention obligation, and we complete confirmed deletions within 30 business days. See our PIPEDA & PIPA BC Compliance page for the full process.

9. Children

1n1.ai is built for businesses. Account holders must be at least 18. We don't knowingly collect personal information from children under 13. If you believe a child has signed up or provided information to us, contact us and we'll remove it.

10. Cookies and similar technologies

We use a small number of strictly-necessary cookies and local-storage entries to keep you signed in and to remember your preferences (like dark mode). We don't currently use third-party advertising or tracking cookies on the marketing site.

11. Changes to this policy

If we make meaningful changes, we'll update the "Last updated" date at the top of this page and, where appropriate, send a notice by email. Continued use after the change date constitutes acceptance of the updated policy.

12. Contact

Privacy questions, data requests, or anything that doesn't fit a checkbox:
Techalyst Software Inc.
Suite 1047, 1055 West Georgia Street, Unit 220, Vancouver, BC V6E 3P3, Canada
legal@1n1.ai