Privacy Policy

1. Information we collect

• Account data: name, email, and organization details.
• Usage data: logs, settings, agent configurations, and analytics.
• Call data: call metadata, audio processed in real time, and transcripts. Audio is streamed to our speech providers to generate the transcript and is not stored by Sawt.
• Payment data: handled by our payment provider (currently Dodo Payments; some accounts by Paddle); we do not store full card details.

2. How we use information

We use information to operate and improve Sawt, route and answer calls, provide support, prevent abuse, process payments, and comply with law.

3. Service providers (subprocessors)

We share data with vendors who help us run the service, including:

• Supabase — database and authentication
• Twilio — telephony, and WhatsApp message delivery
• Google — the Gemini model that handles live call audio and writes message replies and call summaries
• OpenAI, Deepgram — speech and AI processing for specific features only, such as transcribing WhatsApp voice notes; live call audio is handled by Google, above
• ElevenLabs — the voice of agents whose business chose a premium or cloned voice: the text of the agent's spoken replies is sent to ElevenLabs to be turned into speech during the call, and, if a business clones a voice, the audio sample it uploads for that purpose. Deleting a cloned voice in Settings deletes it at ElevenLabs too. Agents on a standard voice send nothing to ElevenLabs during calls
• Meta — WhatsApp, Messenger and Instagram messages
• Dodo Payments — payments and billing (Merchant of Record)
• Paddle — payments and billing (Merchant of Record, legacy accounts)
• Resend — transactional email
• Vercel, Fly.io — hosting

These providers process data on our behalf under their own security and privacy terms.

4. Google user data

If you connect Google Calendar, Sawt asks Google for access to your calendars and events, and for your Google account's name and email address so the dashboard can show which account is connected. Sawt uses this access only to run the calendar features you turned on:

• checking when you are free, so your agent offers callers times that are really open;
• creating, moving and cancelling the appointments your agent books for your callers;
• reading back those appointments when a caller asks about or changes one.

During a call, the free times and booking details the agent needs pass through the AI model that runs the conversation (listed above), only to answer that caller. Sawt stores the access tokens Google issues, encrypted, and the details of appointments its agent made. Sawt does not sell Google user data, does not use it for advertising, and does not use it to train AI models. No person at Sawt reads it unless you ask us to, it is needed for security, or the law requires it.

You can disconnect Google Calendar at any time under Settings, Integrations; this deletes the stored tokens. You can also revoke access from your Google account at myaccount.google.com/permissions.

Sawt's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

5. Cookies

Sawt sets only the cookies the site needs to work. There is no advertising or analytics cookie, no tracking pixel, and no third-party tag of any kind — we do not load Google Analytics, a Meta pixel, or any similar service.

• Session cookies, set by Supabase when you sign in. They keep you signed in and are deleted when your session ends.
• NEXT_LOCALE, which remembers whether you chose English, Arabic or French so the site does not reset your language on every visit.

Both are strictly necessary or functional, which is why you are not shown a consent banner: there is nothing here to consent to beyond making the site work. Blocking them in your browser will sign you out and reset your language, but nothing else. Our Cookie Policy says the same thing at greater length, including what we do not use.

6. Caller consent

When you switch recording on for an agent, Sawt plays a consent prompt at the start of each incoming phone call, in the agent's language, asking the caller to agree to the call being recorded. Only a caller who agrees is recorded; a caller who declines or says nothing still speaks to the agent, unrecorded. Their answer is stored with the call record. Where you use Sawt to transcribe calls, you are responsible for providing any notices and obtaining any consent required by the laws applicable to you and the people you call.

7. Data retention

Personal data about the people your agent talks to — call transcripts, recordings, WhatsApp messages and photos, and their phone numbers — is deleted automatically 12 months after it was collected, or sooner if your business chooses a shorter period in its settings. What is kept after that is anonymous: call counts, durations and costs, for billing. Opt-out requests are kept for as long as your account exists, so that people who asked not to be contacted stay that way. Your own account data is kept while your account is active. You may request deletion of your data at any time; our data deletion instructions set out how to ask, what is removed, and how long it takes.

8. Security

We use industry-standard measures (encryption in transit, access controls) to protect data. No method of transmission or storage is completely secure.

9. International transfers

Your data may be processed in countries other than your own, including where our providers operate. We take steps to protect it consistent with this policy.

10. Your rights

Subject to applicable law, you may request access to, correction of, or deletion of your personal data by contacting us. For deletion specifically, follow the data deletion instructions.

11. Children

Sawt is not intended for individuals under 18, and we do not knowingly collect their data.

12. Changes

We may update this policy; changes will be posted here with a new date.

13. Contact

For privacy questions or requests, contact Ahmad Nassar at privacy@sawtai.app.