Privacy Policy

1. Introduction

Serviq ("we," "our," or "us") operates an AI-powered scheduling chatbot platform. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our service.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Name and email address (via WorkOS authentication)
• Google account information (if you sign in with Google)
• Business name, website URL, and logo

2.2 Google Calendar Integration

If you connect Google Calendar, we collect and store:

• Google Calendar access tokens and refresh tokens
• Calendar IDs and event information
• Appointment details (time, attendees, descriptions)

2.3 Customer Data

When end customers use your chatbot, we collect:

• Chat messages and conversation history
• Customer name and email (when booking appointments)
• Appointment preferences and requirements
• Session metadata (timestamp, browser information)

2.4 Usage Data

We automatically collect:

• AI token usage (for billing and service optimization)
• Number of chat sessions and messages
• Technical data (IP address, browser type, device information)

2.5 Custom Knowledge Base

You may provide custom knowledge base entries that are used to train your chatbot. This content is stored in our database and used exclusively for your business.

3. How We Use Your Information

We use the collected information to:

• Provide and maintain the Serviq service
• Enable AI-powered chat functionality for scheduling
• Create and manage calendar appointments
• Process authentication and maintain user accounts
• Monitor usage and enforce monthly spending limits
• Improve our service and develop new features
• Communicate with you about service updates
• Prevent fraud and ensure platform security

4. Third-Party Services

We use the following third-party services:

4.1 OpenAI

Chat messages are processed by OpenAI's API to generate AI responses. OpenAI's data usage policy applies to this processing. As of our knowledge, OpenAI does not use API data to train their models.

4.2 Google APIs

We use Google Calendar API to read and create calendar events. Your Google data is accessed only with your explicit consent and used solely for scheduling functionality.

4.3 WorkOS

Authentication is handled by WorkOS AuthKit. WorkOS processes login credentials and manages user sessions securely.

4.4 Telegram (Optional)

If you configure a Telegram bot, messages exchanged through Telegram are subject to Telegram's privacy policy.

5. Data Storage and Security

Your data is stored in a secure PostgreSQL database. We implement industry-standard security measures:

• Encrypted data transmission (HTTPS/TLS)
• Secure token storage for API credentials
• Regular security updates and monitoring
• Access controls and authentication
• Database backups for data recovery

6. Data Retention

We retain your data for as long as your account is active. If you delete your account:

• Business data, chat history, and knowledge base entries are permanently deleted
• Calendar connections are revoked
• Customer data associated with your business is removed
• Usage records may be retained for billing and legal compliance

7. Data Sharing and Disclosure

We do not sell your personal information. We may share data only in these circumstances:

• With your consent: When you explicitly authorize data sharing
• Service providers: Third-party services that help operate our platform (OpenAI, Google, WorkOS)
• Legal compliance: When required by law or to protect our rights
• Business transfers: In case of merger, acquisition, or sale of assets

8. Tenant Isolation

We implement strict tenant isolation. Your business data, chat sessions, and customer information are never shared with other Serviq users. Each business operates in a completely isolated environment.

9. Your Rights

You have the right to:

• Access: Request a copy of your personal data
• Correction: Update inaccurate or incomplete information
• Deletion: Request deletion of your account and associated data
• Portability: Export your data in a machine-readable format
• Withdrawal: Revoke consent for data processing (e.g., disconnect Google Calendar)
• Object: Object to certain types of data processing

To exercise these rights, contact us at the email address provided below.

10. Cookies and Tracking

We use essential cookies for authentication and session management. We do not use advertising or tracking cookies. Your browser can be configured to reject cookies, but this may affect service functionality.

11. Children's Privacy

Serviq is not intended for users under 18 years of age. We do not knowingly collect information from children. If you believe we have collected data from a child, please contact us immediately.

12. International Data Transfers

Your data may be processed in countries outside your jurisdiction. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of our service after changes constitutes acceptance of the updated policy.

14. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us through your account settings or visit our contact page.