Privacy Policy

This Privacy Policy explains how Scheduley, a California sole proprietorship (“Scheduley,” “we,” “us,” or “our”), collects, uses, discloses, and safeguards information when you use our website (scheduley.com), dashboard, mobile apps, AI receptionist, phone and text messaging features, booking pages, and related services (the “Service”).

We act in two roles. For our own customers (the businesses that sign up), we decide how their account information is used. For the people who call, text, or book with those businesses (“end customers”), we process information on the business's behalf as a service provider, and the business is responsible for its own privacy notices and consents. End customers with questions about their data should contact the business first; we will help the business respond.

Information you provide:

• Account information (name, email address, phone number, sign-in details)
• Business information (business name, type, address, services, prices, hours, staff, schedules, policies, and instructions for the AI)
• Links you give us (your website, booking page, public listing, or profile on a creator or booking platform), and the public information we read from those pages, such as services, prices, hours, and which booking tool you use
• Payment and billing information (processed by Stripe; we do not store full card numbers)
• Communications you send us (support emails, feedback)

Information from calls, texts, and bookings:

• Call recordings, transcripts, and AI-generated summaries of calls handled by the Service
• Text message content and history
• Call and message metadata (phone numbers, times, duration, routing, delivery status)
• End customer details entered or collected through the Service, such as names, phone numbers, email addresses, service addresses, appointment and job details, notes, and form answers

Information collected automatically:

• Usage data (pages visited, features used, buttons clicked, actions taken)
• Account activity used to protect the Service from copying and abuse, such as which website templates you view and changes to your business type
• Device information (browser type, operating system, screen size)
• Log data (IP address, access times, referring URLs, and campaign tags such as UTM parameters)
• Cookies and similar technologies, including product analytics and session recordings (see Section 8)

Public information from pages you link:

• When someone gives us a link, we read that public page and closely related public pages once, at their request. We don't crawl the web on our own.
• For a public listing (such as Yelp or Google Business Profile), we look up that one listing through a service provider.
• For a profile on a creator or expert platform, this can include a person's name, title, photo, bio, intro video link, and public social links. We use it to build that person's preview and, if they sign up, their booking page and website.

Information from third parties:

• Calendar data (events, times, and availability) when you connect Google Calendar through Google's secure sign-in (OAuth). We access it only to check availability and sync your appointments, and you can disconnect at any time. Calendar apps such as Apple Calendar can also subscribe to a private calendar feed link from Scheduley.
• Authentication data from sign-in providers (for example, Google through Clerk)
• Payment status from Stripe

We use the information we collect to:

• Provide, operate, maintain, and improve the Service, including the AI receptionist
• Answer calls and texts, book appointments and jobs, and send confirmations, reminders, and follow-ups as you instruct
• Show call summaries, recordings, messages, and alerts in your dashboard
• Set up your account from your website, including suggesting your services, hours, and booking setup
• Process payments, usage charges, and billing
• Provide customer support and send service and account notices
• Understand how people find and use Scheduley so we can improve it
• Detect and prevent fraud, spam, abuse, scraping, unauthorized copying, and security incidents
• Comply with legal, tax, and telecommunications obligations

• Calls handled by the Scheduley AI receptionist are recorded and transcribed, and the recordings and transcripts are stored so the business can review them.
• Audio, transcripts, and messages are sent to our AI and voice providers (such as OpenAI and Retell AI) to understand callers and generate responses. We do not sell this data, and we do not give our AI providers permission to use it to train their own public models.
• We may use de-identified or aggregated data to improve the Service.
• Businesses that use Scheduley are responsible for complying with call recording, AI disclosure, and consent laws where they and their callers are located, including two-party consent states such as California, for example by disclosing in their greeting that calls may be recorded and answered by an AI assistant.
• Scheduley is not HIPAA compliant. Businesses should not use the Service to collect protected health information.

We do not sell personal information, and we do not share it for cross-context behavioral advertising. We share information only as follows:

• Service providers: companies that help us run the Service under confidentiality obligations, such as hosting and databases (Vercel, Neon), AI and voice (OpenAI, Retell AI), phone and text messaging (Twilio and carriers), payments (Stripe), sign-in (Clerk), email delivery (Resend), product analytics (PostHog), and public listing lookups (Apify)
• The business you interact with: if you call, text, or book with a business that uses Scheduley, your information is shared with that business
• Integrations you connect: for example, appointment data synced with Google Calendar. Our use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.
• Legal requirements: when required by law, subpoena, or court order, or to protect the rights, safety, and property of Scheduley, our users, or others
• Business transfers: in connection with an incorporation, reorganization, merger, acquisition, or sale of assets

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text-message opt-in data and consent will not be shared with any third parties, excluding aggregators and providers of the text message services, and will not be sold. Information may be shared only with service providers that help Scheduley deliver the requested messaging service.

Recipients can reply STOP to opt out of text messages at any time and HELP for help. Message and data rates may apply.

If you use Scheduley for your business, you are responsible for giving your customers any privacy notices required by law, getting any consents required before calling, recording, texting, or emailing them, and honoring their requests and opt-outs.

We use cookies and similar technologies to keep you signed in, remember your preferences, secure the Service, and understand how the Service is used, including which pages and channels lead people to sign up. We use PostHog for product analytics. On our marketing website, PostHog may record sessions (such as clicks, scrolling, and page changes) with typed inputs masked. We do not run analytics on businesses' customer-facing booking pages.

You can block or delete cookies in your browser settings, but parts of the Service may not work without them.

We keep account information, call recordings, transcripts, messages, and logs for as long as your account is active or as needed to provide the Service. Previews built from a link that don't lead to an account are kept only as long as needed to show the preview, carry it into signup, and protect the Service from abuse. When you delete your account, we delete or de-identify your data within a reasonable period, except where we need to keep certain records to comply with legal, tax, or accounting obligations, resolve disputes, prevent fraud, or enforce our agreements.

We use commercially reasonable administrative, technical, and physical safeguards, including encryption in transit and at rest. However, no method of transmission over the internet or method of electronic storage is 100% secure, and we cannot guarantee absolute security.

Depending on where you live, including under the California Consumer Privacy Act (CCPA/CPRA), you may have the right to:

• Know what personal information we collect, use, and disclose, and access a copy of it
• Correct inaccurate personal information
• Delete personal information, subject to legal exceptions
• Opt out of the sale or sharing of personal information (we do not sell or share it)
• Request data portability, or object to or restrict certain processing
• Not be discriminated against for exercising these rights

To exercise these rights, contact us at hello@scheduley.com. We will verify your request before acting on it, and you may use an authorized agent. If your information was collected by a business that uses Scheduley, please contact that business; we will support it in responding.

If your public business page or profile was imported by someone else, or a preview or site uses your name, photo, or video without your permission, email us at hello@scheduley.com and we will remove it.

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child, we will take steps to delete it.

The Service is operated in the United States. If you access the Service from outside the United States, your information, including call recordings and messages, will be transferred to and processed in the United States, where data protection laws may differ from those in your country.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a new effective date. Continued use of the Service after changes take effect constitutes acceptance of the revised policy.

Questions about this Privacy Policy or privacy requests? Contact us at hello@scheduley.com.