Privacy Policy

Last updated: March 15, 2026

1. Introduction

OneSpec ("we," "our," or "us") operates the onespec.io website and the OneSpec AI receptionist platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services.

2. Information We Collect

Account Information

When you create an account, we collect:

  • Name and email address
  • Business name, phone number, and category
  • Billing and payment information (processed securely via Stripe)

Call Data

When calls are handled by our AI receptionist, we collect:

  • Caller phone number
  • Call transcripts and recordings
  • Call duration and outcome
  • Appointment details scheduled during calls

Calendar Data

If you connect a third-party calendar (e.g., Google Calendar), we access your calendar availability and create, update, or delete events related to appointments booked through our service. We store encrypted OAuth tokens to maintain the connection. We do not read or modify unrelated calendar events.

Usage Data

We automatically collect standard usage data including IP address, browser type, pages visited, and referring URLs through Google Analytics.

3. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and maintain our AI receptionist service
  • Handle inbound calls and schedule appointments on your behalf
  • Sync appointments with your connected calendar
  • Process payments and manage your subscription
  • Send transactional emails (e.g., trial reminders, appointment confirmations)
  • Improve and optimize our services
  • Comply with legal obligations

4. Data Sharing

We do not sell your personal information. We share data only with:

  • Service providers who help us operate (e.g., Supabase for database hosting, Stripe for payments, Telnyx for telephony, Google for calendar integration)
  • AI model providers for call handling and transcript processing
  • Law enforcement when required by law or to protect our rights

5. Data Security

We implement industry-standard security measures to protect your data. OAuth tokens are encrypted using AES-256-GCM. All data is transmitted over HTTPS. Access to production systems is restricted to authorized personnel.

6. Data Retention

We retain your data for as long as your account is active. Call transcripts and recordings are retained for the duration of your subscription. When you delete your account, we permanently delete all associated data within 30 days.

7. Your Rights

You have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data
  • Disconnect third-party integrations (e.g., Google Calendar) at any time
  • Export your data

8. Third-Party Services

Our service integrates with third-party providers including Google (Calendar API, OAuth), Stripe (payments), and Telnyx (telephony). Each provider has its own privacy policy governing their use of your data. Our use of Google user data complies with the Google API Services User Data Policy, including the Limited Use requirements.

9. Cookies

We use essential cookies for authentication and session management. We use Google Analytics for usage tracking. You can disable non-essential cookies through your browser settings.

10. Children's Privacy

Our service is not intended for individuals under the age of 18. We do not knowingly collect data from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through our platform. Continued use of our service after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or your data, contact us at info@onespec.io.