Privacy Policy

1. Who We Are

Ask Janice is the legal business name of the seller and operator of this service ("Ask Janice", "we", "us", "our"). Ask Janice provides an AI virtual receptionist service. You can reach us at hello@askjanice.net. This policy covers (a) account data from our customers ("you") and (b) caller data from end users interacting with your AI receptionist.

Our role: Ask Janice is the data controller for personal data relating to our customers and their accounts (for example, your name, email, business details, billing records and usage data). For caller and website visitor data processed by your AI receptionist, Ask Janice acts as a data processor on your behalf, and you are the controller of that data.

2. What We Collect

From customers: name, email, business name, business details and FAQs you provide, payment information (processed by Stripe), and usage activity.

From callers / website visitors: phone number, name, email when provided, call audio recordings, transcripts, chat messages, IP address, and any information they share with the AI.

3. How We Use Data

• Operate the AI receptionist (answer calls, transcribe, capture leads, book appointments).
• Display leads and transcripts in your dashboard.
• Send SMS follow-ups when you enable them.
• Improve the Service (debugging, abuse prevention). We do not train third-party foundation models on your data.
• Send service-related emails. We do not sell personal data.

4. Call Recording

Calls are recorded and transcribed. The default greeting discloses recording. You are responsible for ensuring the greeting complies with the call-recording laws of every state in which your callers are located, including two-party-consent jurisdictions.

5. Legal Basis for Processing

Where the GDPR, UK GDPR or similar laws apply, we rely on the following legal bases (Art. 6 GDPR):

• Performance of a contract — creating and managing your account, providing the AI receptionist, processing your subscription and providing support.
• Legitimate interests — securing the Service, preventing fraud and abuse, debugging and improving our product, and basic service analytics.
• Legal obligation — tax, accounting, and responding to lawful requests from authorities.
• Consent — optional marketing communications, non-essential cookies, and any optional integrations you choose to connect. You may withdraw consent at any time.

For caller and visitor data processed on your behalf, you are responsible for establishing the appropriate legal basis (including call-recording consent).

6. Data Sharing

We share data only with the sub-processors required to run the Service:

• Twilio — phone numbers, SMS, call audio transport.
• ElevenLabs — AI voice generation and conversation.
• Google — Calendar integration and (optional) OAuth sign-in.
• Lovable Cloud / Supabase — database, authentication, storage.
• Resend — transactional email delivery (transcript and notification emails).
• Stripe — payment processing, subscription management, tax calculation, and invoicing (when billing is enabled).

These providers process data only on our instructions and under their own data-protection agreements. We do not sell or rent personal data, and we do not share personal data for cross-context behavioral advertising. We disclose data when required by law or to protect our rights.

6A. Google User Data

Ask Janice lets a business owner connect their own Google Calendar so the AI Receptionist can book appointments for their customers. When you connect Google, we request only these permissions:

• openid, email and profile — to identify which Google account you connected, so bookings go to the correct calendar.
• Google Calendar events (calendar.events) — to read existing events on your calendar to find open time slots, and to create appointment events when your customers book by phone or website chat.

We use Google user data only to provide these user-facing features. We do not sell Google user data, use it for advertising, use it to build user profiles, or allow humans to read it except with your explicit consent, for security purposes, or to comply with the law. We do not use Google user data to develop, improve or train generalized AI or machine-learning models.

Ask Janice does not generate, edit or process images. We never use Google APIs or Google user data to create AI-generated imagery of any kind, including non-consensual intimate imagery (NCII).

Ask Janice's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Google access tokens are sent only over encrypted connections and are deleted when you disconnect your calendar in Ask Janice. You can also revoke access at any time at myaccount.google.com/permissions.

7. Cookies & Tracking

The Ask Janice website and dashboard use a small number of strictly necessary cookies and equivalent local storage: an authentication session cookie that keeps you signed in, and security tokens used to protect the Service against abuse. These are essential to providing the Service and are set without additional consent.

We do not use advertising cookies, cross-site tracking pixels, or third-party analytics that build behavioral profiles of visitors. If we ever add optional analytics, we will request consent before setting them and update this section.

8. Data Retention

Account data is retained while your account is active. Non-lead conversations may be auto-deleted on a schedule you configure (24 hours or 1 week). Lead and booking records are retained until you delete them or close your account.

9. Your Rights

Depending on your location, you may have the following rights over your personal data:

• Access & portability — request a copy of the data we hold about you.
• Correction — ask us to fix data that is inaccurate or incomplete.
• Deletion — ask us to delete your account and personal data.
• Objection & restriction — object to or ask us to limit certain processing.
• Withdraw consent — for processing based on consent, at any time.

For California residents (CCPA/CPRA): you have the right to know what personal information we collect, the right to delete it, the right to correct it, and the right to opt out of its sale or sharing — we do not sell or share personal information as those terms are defined, and we treat all users equally when rights are exercised. We do not knowingly sell data of users under 16.

Email hello@askjanice.net to exercise any of these rights. We respond to verified requests within 30 days. You will not be discriminated against for exercising your rights. End-user callers should direct requests to the business they called; we act as a processor on the business's behalf.

10. International Data Transfers

We operate from the United States and Canada, and our sub-processors (listed in Section 6) process data in the US and other countries. Where personal data is transferred out of the EEA or UK, we rely on the European Commission's Standard Contractual Clauses (or the UK equivalent) with our sub-processors, together with additional safeguards such as encryption in transit and at rest.

11. Security

We use industry-standard measures including TLS in transit, encryption at rest, row-level security in the database, and least-privilege access controls. No system is perfectly secure; you use the Service at your own risk.

12. Children

The Service is not intended for users under 18.

13. Changes

We will post updates here and update the "Last updated" date. Material changes will be announced via email or in-app notice.

14. Contact

Email hello@askjanice.net.