Privacy Policy

Last updated: 15 May 2026

Atendica ("we", "us", "our") provides an AI phone receptionist service. This policy explains what personal data we process, why, and the rights you have.

1. What we collect

When you create an account we collect your name, email, business details, and the phone number you connect to our service. When your AI receptionist takes a call we record the caller's number, the call's transcript, the audio for quality review, and any appointment or contact information mentioned during the call.

2. Why we process it

• To answer phone calls on your behalf and book appointments.
• To maintain a CRM and call log for your business.
• To send confirmation and reminder emails or SMS to your clients.
• To bill you for usage and prevent abuse.
• To improve the service (only with de-identified, aggregated data).

3. Who we share it with

Sub-processors that make the service work: Google (Gemini Live for AI), Telnyx (phone calls), Resend (email), Vercel (web hosting), Hostinger (VPS hosting). Each handles a specific function and is bound by a data processing agreement.

4. Google Calendar data

Google Calendar access is optional and begins only after you explicitly connect your Google Account. Atendica reads the list of calendars available to your account so you can choose where appointments are saved. It creates and updates appointment events in the calendar you select and reads changes to those events so cancellations stay synchronized with Atendica.

We store the selected calendar identifier, the connected account email, Google event identifiers, and encrypted OAuth tokens needed to maintain the connection. We do not sell Google user data, use it for advertising, or use it to train AI models. Google user data is handled in accordance with the Google API Services User Data Policy, including its Limited Use requirements. You can revoke access at any time by disconnecting Google Calendar in Atendica settings or through your Google Account permissions.

5. How long we keep it

Call recordings: 90 days. Transcripts and CRM entries: as long as your account is active. Account data: deleted within 30 days of account closure.

6. Your rights

Under GDPR you can request access, correction, deletion, or export of your data at any time. Email hello@atendica.com and we will respond within 30 days.

7. Security

Data is encrypted in transit (TLS) and at rest. Passwords are hashed with bcrypt. Access to production systems is restricted to authorized personnel.

8. Contact

For any privacy question: hello@atendica.com.