Privacy Policy

Current offering context

BizAssistant.ai serves businesses across industries in the 50 U.S. states and Washington, D.C., subject to technical support and workflow approval. One plan costs $299 per month and includes unlimited inbound AI receptionist calls and call minutes for one configured business and business number. There is no monthly call-minute cap, no setup fee, and no per-call or per-minute overage charge. Personal setup is included, and you can cancel anytime. The service uses approved business information to answer inbound calls, ask relevant questions, and capture messages and appointment requests. Requests require your team's confirmation by default. Direct calendar booking requires a supported connected calendar, real-time availability, and approved booking rules. Call transfers, text or email notifications, messaging automations, and reports operate only where supported and configured. A free personal demo precedes any approved live connection. Chris reviews the business information you approve before preparing the demo; preparation is typically within 24 hours after that review, subject to the completeness of your details and provider availability. Unlimited call usage, routing, acceptable use, and technical availability are described in the Terms of Service.

1. Scope

This Privacy Policy applies to BIZASSISTANT.AI LLC, which owns and operates BizAssistant.ai ("BizAssistant.ai," "we," "us," or "our"), and covers bizassistant.ai, our demos, sign-up and setup flow, trial and paid service, support, billing administration, and the AI receptionist service we provide to businesses in our U.S. service area. It does not replace the privacy notice of a customer business, carrier, calendar or business-software provider, payment processor, or another third party.

2. Our privacy roles

2.1 Our own business activities. For our website, demo, sales, sign-up, setup, account, support, security, billing, and advertising-measurement information, we generally determine the purposes and means of processing and act as the business or controller where those concepts apply.

2.2 Information handled for a customer business. When your receptionist handles a customer business’s calls, messages, bookings, transfers, or related communications, the customer generally determines the business purpose and configuration. To the extent a privacy law distinguishes controllers/businesses from processors/service providers, BizAssistant.ai ordinarily acts as a processor or service provider for that customer data, subject to the applicable facts and law.

2.3 Independent third parties. Telecommunications carriers, calendar and booking-software platforms, payment processors, email providers, AI and speech providers, hosting providers, and other services may process information independently under their own terms and notices.

3. If you call a business that uses BizAssistant.ai

• You may be talking to an automated, AI-powered receptionist. It is introduced as the business's AI receptionist.
• The receptionist follows the business's approved hours, services, prices, policies, and call-handling instructions, and can make mistakes.
• Call audio is processed to answer the call. Depending on configuration and providers, a call may also be recorded, transcribed, summarized, classified, routed, or used to create a request, message, or supported calendar entry.
• The receptionist may ask relevant questions approved by the business, such as your name, callback number, requested service, preferred time, location, and information needed to respond. The business receives those details with your message or summary.
• An appointment or quote request requires the business's confirmation unless an approved supported workflow expressly confirms it. Direct questions about prices, availability, services, or a particular call to the business you contacted.
• BizAssistant.ai is not an emergency service. Contact the appropriate emergency services directly in an emergency. Avoid giving sensitive information that is unnecessary for your request.

4. Information we collect

4.1 Website, sign-up, setup, and business-contact information. Depending on how you use BizAssistant.ai, we may collect:

• your business name and email address from the demo-request form, plus an optional business website or listing; a public listing identifier if you choose a business-search result;
• business phone number, website, hours, U.S. time zone, services and starting prices, how you book today, service area or business locations, and written policies;
• appointment-handling and calendar preferences, approved caller questions, escalation instructions, and notification preferences; a notification phone number if you request text notifications during setup;
• support communications, emails about your demo and setup, texts where separately arranged, and other information you choose to provide;
• plan and price selected when paid service is authorized, billing frequency and cycle dates, call usage records, invoices, payment status, and limited payment-related identifiers supplied by a payment provider when paid service is arranged;
• sign-up, setup-link, session, activation, and operational timestamps and identifiers used to run the setup flow; and
• campaign and source information, including UTM source, medium, and campaign parameters and a Google click identifier (gclid) when present in the page address; other website activity or advertising identifiers if separately configured.

4.2 Caller and service information. When we provide a receptionist for a business, we may process caller name, phone number, caller ID and call metadata, request or message details, preferred appointment times, service location, transfer information, approved business hours, services, prices, and policies, and, where enabled, call recordings, transcripts, summaries, classifications, calendar entries, or extracted details. What is collected depends on the questions and workflows approved by that business.

4.3 Demo information. If you interact with a BizAssistant.ai demo, we may process your contact details, call audio and metadata where applicable, and information you provide to prepare, operate, secure, test, or improve the demo. Recordings, transcripts, or summaries may be processed where enabled. A demo does not connect live business calls or create real appointments. Use sample request details when testing and avoid unnecessary sensitive information.

4.4 Device, security, and website information. Our site and providers may receive IP address, browser and device information, page URL, timestamps, network and error information, approximate location derived from network information, cookies or similar identifiers, and fraud or abuse signals.

5. Sources of information

We collect information from you; from customer businesses and their staff; from callers and message recipients; from the business information a customer gives us; from customer-selected calendars, phone systems, and booking tools; automatically from our website and systems; from public business websites and listings when needed to prepare or verify a setup; and from providers that support hosting, email, telecommunications, AI, speech, analytics, advertising, security, payments, and integrations.

6. How we use information

• to operate the website, demo, sign-up and setup flow, saved setup, and support channels;
• to configure, test, activate, provide, maintain, troubleshoot, and secure the receptionist service;
• to answer calls as the business, ask approved caller questions, use approved business information, and capture messages and appointment requests; and to deliver notifications, create calendar entries, or route calls only where supported and configured;
• to authenticate setup access, prevent duplicate or abusive requests, and maintain system integrity;
• to communicate about sign-up, setup, activation, service, support, billing, and material changes, including emails and any separately arranged texts;
• to record authorized pricing, monitor call usage for service operation and reliability, and administer subscriptions, invoices, taxes, payments, and renewals where paid service is selected;
• to measure advertising and completed sign-ups as described below;
• to monitor reliability, capacity, errors, fraud, misuse, and security incidents;
• to comply with law, legal process, and contractual obligations and to establish, exercise, or defend legal claims; and
• to create aggregate or deidentified operational statistics that do not reasonably identify an individual.

7. AI, speech, telecommunications, and other providers

Providing an AI receptionist requires third-party infrastructure. We may use providers for telecommunications, speech recognition, text-to-speech, AI-model processing, messaging, email, hosting, calendars, security, analytics, advertising, and payments. They receive only the information reasonably needed for the service they provide, subject to their contracts, settings, and applicable law.

Configured onboarding uses Google Apps Script, Google Sheets, and Google email services to receive requests, keep approved setup details, and send private links or service messages. If business search is enabled, Google Maps receives your search text and selected listing information. A configured Cloudflare Turnstile security check may process browser, device, network, and challenge information to help prevent abuse. Google-hosted fonts receive technical request information when the page loads them. Voice, calendar, messaging, hosting, and payment providers depend on the supported services selected for your account.

We do not intentionally use the content of a customer business’s live receptionist calls to build advertising profiles or advertising audiences. We also do not intentionally place setup links, saved setup answers, or session tokens into our advertising conversion events. Provider logs, security review, abuse monitoring, retention, and model-related practices are governed by the provider terms and configurations applicable to the service we use, so we do not promise that every provider retains no information.

8. Customer control, call notices, and data minimization

Customer businesses control their approved information, prices, instructions, caller questions, forwarding choices, connected tools, and use of texts, emails, requests, and calendar entries. Customers are responsible for required notices and consent for call recording, transcription, automated communications, messaging, and the information they instruct us to collect. Standard setup is not intended for protected health information, payment-card data, or other regulated sensitive data; those workflows require an express written agreement, safeguards, and any required contractual terms before activation.

The sign-up and setup forms are designed for receptionist configuration, not secrets. Do not enter passwords, authentication codes, full payment-card numbers, bank-account credentials, Social Security numbers, or other information that is unnecessary for ordinary receptionist setup. Calendar setup should not require you to send us a calendar password in the setup form.

9. How we disclose information

• Customer business: information handled for that customer may be provided to the customer and its authorized staff, through configured email or text notifications, supported calendar entries, and available reports.
• Service providers: providers supporting telecommunications, AI, speech, hosting, email, messaging, calendars, security, analytics, advertising, payments, and support.
• Customer-selected integrations: calendars and other services a customer chooses to connect or use for bookings, messages, call routing, or other functions.
• Professional advisers and transactions: advisers, insurers, lenders, investors, or counterparties involved in a financing, reorganization, acquisition, merger, sale, or similar transaction, subject to appropriate confidentiality arrangements.
• Legal, safety, and enforcement purposes: when reasonably necessary to comply with law or legal process, protect rights or safety, investigate fraud or abuse, enforce agreements, or respond to a security incident.

10. Website storage, Google Ads measurement, and attribution

10.1 Necessary browser storage. The demo-request and setup flow uses session storage for a private access token and keeps pending request information in page memory. Emailed private links are designed to expire after 24 hours, and access through a saved token is subject to the same token expiry or revocation. Clearing browser storage, closing a browser session, changing browsers, or using another device may require the emailed link or a fresh one.

10.2 Advertising attribution and optional measurement. When you submit a demo request, the page can attach UTM source, medium, and campaign values and a Google click identifier (gclid) from the page address to that request. We use this information to understand how people find BizAssistant.ai and whether advertising leads to demo requests. The page also emits interaction events, such as a demo request being accepted, for measurement tools configured by the site operator. Those page events contain an event name; they do not contain your email address, approved setup answers, call content, or private access token. Separately configured Google Ads or other measurement tools may collect page activity, cookies, identifiers, or conversion information according to their deployed settings. Required choices and applicable opt-outs must be respected in those settings.

10.3 Third-party collection. Google and other website-platform or network providers may independently collect technical identifiers, IP address, browser or device information, and cookie or similar data under their own policies. We do not control a browser, carrier, website platform, or third party’s independent collection.

11. Sale, sharing, and targeted advertising

We do not sell personal information for money. We do not use call content, caller messages, recordings, transcripts, request details, or appointment details to build advertising audiences. Our use of Google Ads and related website measurement may involve disclosure of website identifiers, campaign information, page activity, or conversion information that some privacy laws define as “sharing,” “targeted advertising,” or a “sale” even when no money changes hands.

Where an applicable privacy law gives you a right to opt out of such activity and applies to BizAssistant.ai, you may submit that request at [email protected]. We honor browser opt-out preference signals such as Global Privacy Control (GPC) for sale, sharing, or targeted advertising where applicable law requires us to do so. Privacy choices are specific to the browser, device, service, and information involved. You may also email us directly about an opt-out or privacy concern; do not include unnecessary call content or sensitive information in that request.

12. Retention

We keep information only as long as reasonably necessary for the purposes described in this Policy, taking account of the customer relationship, service configuration, provider capabilities, security needs, disputes, legal requirements, and recordkeeping obligations. Different records have different lifetimes.

13. Deletion and account end

A customer business may contact us to request deletion of information we control or, for service information, to request assistance with deletion from active systems where reasonably supported. We may retain information that is needed for billing, tax, security, fraud prevention, legal claims, legal holds, compliance, or other lawful purposes. Information in backups can persist until normal backup expiration. Information already delivered into a customer’s own phone, email, messaging, calendar, or booking software is controlled by that customer and those providers.

14. Security

We use administrative, technical, and organizational measures designed to protect the information we handle, including link- and session-based setup access and measures intended to reduce unauthorized changes to saved setup information. No internet, telecommunications, AI, or storage system is completely secure. We do not claim a security certification unless we expressly state one in writing.

15. Calls, recordings, texts, and email

15.1 Calls. Calls handled by your AI receptionist are processed by automated systems. Recording, transcription, summarization, and related features may be enabled depending on configuration and providers. The customer business is responsible for legally required notices and consent for its calls.

15.2 Text messages. Where supported and enabled, the service may send administrative and service-related texts, such as request details or call recaps, to the phone number you designate. Optional approved missed-call responses or review requests operate only if separately configured on the business's behalf. The business is responsible for lawful content, required consent, and honoring opt-outs. Message and data rates may apply. The demo-request form does not enroll you in marketing newsletters; any marketing texts require the consent applicable to that activity. Do not rely on text or email as a secure channel for highly sensitive information.

15.3 Email. We send requested private links, demo and setup updates, support replies, and service or billing messages to the designated email address. Call summaries and other customer notifications are delivered only through supported configured workflows. Email providers process delivery information and message content to provide those communications. A private demo link is intended for the recipient and authorized staff; keep it private.

16. Children

The BizAssistant.ai website and service are directed to businesses and adults acting for them. We do not knowingly use the website to solicit personal information directly from children under 13. A caller may mention a child in the ordinary course of a business request; the customer business controls that purpose and should minimize information collected.

17. Privacy rights and requests

Depending on where you live and which law applies, you may have rights to request access to or a copy of personal information, correction, deletion, portability, or information about processing; to opt out of certain sale, sharing, targeted advertising, or profiling; to limit certain uses of sensitive information; to appeal a privacy decision; and to receive non-discriminatory treatment for exercising a privacy right.

For information BizAssistant.ai controls, email [email protected] with “Privacy Request” in the subject line and explain the request. We may need to verify your identity and authority before acting. If the request concerns a call handled for a customer business, contact the business you called when possible; if you contact us, identify that business so we can route or assist with the request as appropriate.

18. California notice

This section applies to the extent the California Consumer Privacy Act, as amended (“CCPA”), applies to BizAssistant.ai as a business for the information at issue. The categories we may collect include identifiers; customer-record information; commercial information; internet or network activity; audio or electronic information; professional or business information; and inferences or classifications generated from service activity. We collect and use these categories for the purposes in Section 6, disclose them to the categories in Section 9, and retain them as described in Section 12.

California residents may have rights to know/access, delete, correct, opt out of sale or sharing, limit certain uses of sensitive personal information, and not be discriminated against for exercising CCPA rights. We do not knowingly sell or share the personal information of consumers under 16. Caller and service information that we process only as a service provider for a customer business is generally handled under that customer’s instructions, and the customer may be responsible for the consumer-facing response.

19. Other U.S. state privacy laws

Residents of other states may have similar or additional privacy rights where a state comprehensive privacy law applies to BizAssistant.ai and the information at issue. We will process a valid request as required by applicable law. If a law gives you a right to appeal our decision, you may reply to our response and state that you are appealing.

20. International processing

BizAssistant.ai is currently offered only to businesses in the 50 U.S. states and Washington, D.C., and is run from the United States. Our providers may still process information in the United States and other countries where they or their subprocessors operate. Those countries can have different privacy laws. We do not promise that all processing occurs only in the United States.

21. Third-party sites and integrations

Links, phone carriers, calendars, business and appointment software, messaging services, payment services, AI services, and other integrations are controlled by third parties. Their privacy practices are governed by their own notices and agreements. Connecting a third-party service authorizes the data exchange reasonably needed for the requested integration.

22. Changes to this Policy

We may update this Privacy Policy as our service, providers, features, or legal obligations change. The version posted at bizassistant.ai/privacy will show its “Last Updated” date. If applicable law requires additional notice or consent for a material change, we will provide it as required.

23. Contact

For privacy questions or requests, email [email protected]. BizAssistant.ai is owned and operated by BIZASSISTANT.AI LLC, and is run from San Diego, California.