Privacy Policy
Last updated: May 3, 2026
At PulleeAI, we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform, products, and services. Please read this policy carefully. If you disagree with its terms, please discontinue use of our services.
1Information We Collect
We collect information that you provide directly to us, as well as information generated through your use of our services:
1.1 Account & Registration Information
When you register for PulleeAI, we collect your name, email address, company name, phone number, and billing information. Admin users also provide authentication credentials managed via JWT tokens.
1.2 Usage Data
We automatically collect information about how you interact with our platform, including pages visited, features used, chatbot conversations initiated, voice agent call durations, API request logs, and timestamps.
1.3 Chatbot & Lead Data
Our embeddable chatbot widget collects messages sent by end-users on your website, lead information voluntarily submitted (name, email, phone, inquiry details), and session metadata such as timestamps and message counts.
1.4 Voice Data
When you use our Voice AI features, we process real-time audio streams for speech-to-text transcription via Deepgram. Audio is streamed and processed but not permanently stored. Call metadata (duration, caller ID, timestamps) is retained in call logs.
1.5 Device & Technical Information
We collect IP addresses, browser type and version, operating system, device identifiers, and referral URLs to ensure platform security and improve performance.
2How We Use Your Information
We use the information we collect for the following purposes:
- Providing, operating, and maintaining our platform and services
- Processing transactions and managing your account subscription
- Powering AI chatbot, voice agent, and WhatsApp automation features
- Generating usage analytics and performance reports for your dashboard
- Sending transactional emails, service updates, and security notifications
- Detecting, preventing, and responding to fraud, abuse, or security incidents
- Complying with legal obligations and enforcing our Terms of Service
- Improving and personalizing the platform through aggregated usage insights
- Providing customer support and responding to your inquiries
3Sharing of Information
We do not sell, rent, or trade your personal data. We may share information in the following limited circumstances:
3.1 Third-Party Service Providers
We engage trusted third-party vendors to operate our services. These include:
- •OpenAI — AI language model inference for chatbot and voice responses
- •Deepgram — Real-time speech-to-text transcription
- •Sarvam AI & ElevenLabs — Text-to-speech voice synthesis
- •Twilio & Exotel — Telephony infrastructure for voice call routing
- •Meta (WhatsApp Business API) — WhatsApp messaging delivery
- •MongoDB Atlas / AWS — Cloud database and server infrastructure
All providers are contractually obligated to handle data only as necessary to perform services for us.
3.2 Business Clients
Lead data and chat conversations captured through your embedded chatbot are accessible to your business account. You are responsible for the lawful processing of end-user data collected through your deployment of PulleeAI.
3.3 Legal Requirements
We may disclose your information if required by law, subpoena, court order, or when we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.
3.4 Business Transfers
In the event of a merger, acquisition, or sale of all or a portion of our assets, your data may be transferred as part of that transaction. We will notify you before your data becomes subject to a different privacy policy.
4Google Workspace API and Limited Use Compliance
PulleeAI uses Google Workspace APIs, including the Google Calendar API, only to provide calendar and appointment scheduling functionality requested by the user.
The use and transfer of raw or derived user data received from Google Workspace APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
PulleeAI does not sell, rent, or use Google Workspace user data for advertising, profiling, or other unrelated purposes. Google Workspace user data is not used to create, train, or improve generalized artificial intelligence or machine learning models.
Google Workspace data accessed through the user's authorization is used only to provide the relevant user-facing functionality of PulleeAI, such as checking calendar availability, preventing scheduling conflicts, creating calendar events, and updating appointment details.
PulleeAI limits access to Google Workspace data to the permissions necessary to provide these features and does not request broader access than required.
For more information, please review the Google API Services User Data Policy and Google Workspace User Data and Developer Policy.
5Data Retention
We retain your data for as long as your account is active or as necessary to provide our services. Specifically:
- Account and configuration data: retained for the lifetime of your account plus 90 days after deletion
- Chat conversation logs: retained for 12 months, then purged unless you opt for extended retention
- Voice call metadata (duration, timestamps, caller ID): retained for 12 months
- Audio streams: not permanently stored — processed in real time and discarded
- Lead data: retained until you explicitly delete it from your dashboard
- Billing records: retained for 7 years to comply with financial regulations
6Cookies & Tracking Technologies
We use cookies and similar technologies to operate and improve our services:
- Essential cookies: Required for authentication (JWT tokens stored in localStorage), session management, and core platform functionality.
- Analytics cookies: Used to understand how users interact with our platform to improve features and performance.
- Preference cookies: Used to remember your settings and preferences across sessions.
You can control cookie preferences through your browser settings. Disabling essential cookies may impact platform functionality.
7Data Security
We implement industry-standard technical and organizational measures to protect your data:
- All data in transit is encrypted using TLS 1.2 or higher (HTTPS)
- Passwords and secrets are hashed and never stored in plaintext
- Access to production systems is restricted to authorized personnel only
- API keys and authentication tokens are scoped with least-privilege access
- Our EC2 infrastructure is configured behind Nginx with security headers and rate limiting
- Regular security reviews and dependency audits are performed
Despite these measures, no system is 100% secure. We encourage you to use strong, unique passwords and to notify us immediately if you suspect unauthorized access to your account.
8Your Rights & Choices
Depending on your location, you may have the following rights regarding your personal data:
Right to Access
Request a copy of the personal data we hold about you.
Right to Rectification
Request correction of inaccurate or incomplete data.
Right to Erasure
Request deletion of your personal data, subject to legal retention obligations.
Right to Portability
Receive your data in a structured, machine-readable format.
Right to Restrict Processing
Request that we limit how we use your data in certain circumstances.
Right to Object
Object to processing of your data for direct marketing or legitimate interests.
To exercise any of these rights, contact us at support@pulleeai.com. We will respond within 30 days. We may need to verify your identity before fulfilling a request.
9Children's Privacy
PulleeAI is designed for business use and is not directed at children under the age of 16. We do not knowingly collect personal data from children. If we become aware that a child under 16 has provided us with personal data, we will take immediate steps to delete that information. If you believe a child has submitted data to us, please contact us at support@pulleeai.com.
10International Data Transfers
PulleeAI operates globally and may transfer your data to servers located outside your country of residence, including to the United States and other jurisdictions where our service providers operate. When we transfer data internationally, we ensure appropriate safeguards are in place in accordance with applicable data protection laws, including Standard Contractual Clauses where required under GDPR.
11Third-Party Links & Integrations
Our platform may contain links to or integrate with third-party services (e.g., Twilio, WhatsApp, OpenAI). This Privacy Policy does not apply to those third-party services. We encourage you to review the privacy policies of any third-party services you connect to through PulleeAI. We are not responsible for the data practices of those services.
12Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by updating the "Last updated" date at the top of this page and, where appropriate, by sending an email notification to your registered address. Your continued use of PulleeAI after any changes constitutes your acceptance of the updated policy.
13Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please reach out to us:
© 2026 PulleeAI. All rights reserved.