Privacy Policy

This policy explains how Angelo Falcone (trading as FalconVox) ("FalconVox", "we") handles personal information. It is written to meet the Australian Privacy Principles in the Privacy Act 1988 (Cth) and the EU General Data Protection Regulation (GDPR).

1. Who we are

Angelo Falcone (trading as FalconVox), ABN 57 175 606 083, South Australia 5008, Australia. Privacy questions and requests: falconvox.info@gmail.com.

2. Two kinds of people, two roles

• Our customers — the businesses that use FalconVox and the people who sign in for them. For their account and billing information we decide how it is used (we are the "controller" / APP entity).
• People who call or book with our customers ("callers"). We answer those calls and keep the bookings on the business's behalf and only on its instructions: the business is responsible for that information (the "controller") and we act as its service provider ("processor"). If you are a caller, the business you called is your first point of contact — we will help it deal with your request.

3. What we collect

• Account information: your name, email address, business details (name, address, phone numbers, opening hours, services, prices) and a securely hashed password.
• Billing information: handled by Stripe. We keep your subscription status and Stripe customer reference; we never see or store full card numbers.
• Call information: the caller's phone number (caller ID), the audio recording, a transcript, an automatic summary of the call, and what the caller tells the assistant — such as their name, email address, booking details, preferences and notes.
• Sensitive information: callers to health businesses (for example dental or medical practices) may mention health information. We process it only to handle the call and booking for that business, which is responsible for collecting it lawfully.
• Technical information: IP addresses and request logs, used to keep the service secure (for example to stop password guessing), and the details you send through our contact form.

4. AI receptionist and call recording

Calls to a FalconVox number are answered by an AI voice assistant. At the start of every call the assistant says that it is a virtual assistant and that the call may be recorded, and it answers honestly if asked whether it is a person. The conversation is processed by speech-recognition and language models to understand the caller, answer questions, make or change bookings and produce a summary for the business. These steps do not make decisions that have legal or similarly significant effects on callers. We do not use call data to train our own AI models; our providers process it under contracts that limit its use to providing the service.

5. Why we use it, and our legal bases

• To provide the service — answer calls, manage bookings, send booking confirmations and reminders (performance of a contract).
• To bill customers and keep accounting records (contract; legal obligation).
• To secure, maintain and improve the service and prevent abuse (legitimate interests).
• To reply to enquiries you send us (legitimate interests, or steps before a contract).

We do not sell personal information and do not use it for advertising.

6. Who we share it with

We use these service providers (sub-processors), each bound by data processing terms:

• Cloudflare — hosting and database (global network).
• Retell AI — telephony, speech processing, call recordings and transcripts (United States).
• OpenAI — language-model processing of conversations, and reading a business's public website when it asks us to (United States).
• Stripe — payments and invoicing (United States, Ireland, Australia).
• Resend — sending emails such as confirmations, reminders and account messages (United States).

Bookings and caller details are visible to the business the caller contacted. We may also disclose information where the law requires it.

7. International transfers

Some providers are outside Australia and the European Economic Area, mainly in the United States. We take reasonable steps so that they protect the information to the standard of the Australian Privacy Principles, and for EU data we rely on the European Commission's Standard Contractual Clauses or an adequacy decision (such as the EU–US Data Privacy Framework).

8. How long we keep it

• Call recordings and transcripts held by our voice provider are deleted automatically 90 days after each call.
• Call logs, bookings and customer profiles in a business's dashboard are kept while its account is open, until the business deletes them. Deleting a customer profile also erases their call transcripts and recordings.
• When an account is closed its data is deleted from our database straight away and from backups within 30 days.
• Billing records are kept for as long as tax law requires.

9. Security

Data is encrypted in transit, passwords are stored only as salted hashes, access to each business's data is restricted to that business, and sign-in is protected against automated guessing. If a data breach is likely to cause serious harm we will notify affected people and the regulator as the law requires.

10. Your rights

You can ask to access or correct your personal information. If the GDPR applies to you, you can also ask us to erase it, restrict or object to its use, or receive it in a portable format. Businesses can export all their data and close their account from the dashboard (Settings → Your data). Write to falconvox.info@gmail.com; we reply within 30 days.

If you are unhappy with our answer you can complain to the Office of the Australian Information Commissioner (oaic.gov.au) or, in the EU, to your local data protection authority (in Italy, the Garante per la protezione dei dati personali).

11. Google Calendar

A business can choose to connect its Google Calendar. With its permission, FalconVox then reads the times of the events in that calendar, so the receptionist doesn't book over them (events marked “Free” are ignored), and creates, updates and deletes the events for the bookings it takes. We don't read event titles or attendees for any other purpose, we don't keep copies of the business's other events, and we don't use this data for advertising or to train AI models. The access token is stored encrypted, and the business can disconnect at any time in Settings, which revokes our access.

FalconVox's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

12. Cookies, website statistics and the demo call

We use one strictly necessary cookie to keep you signed in to the dashboard. We do not use analytics, advertising or tracking cookies.

To count visits to this website we use Cloudflare Web Analytics, which sets no cookies, doesn't fingerprint your device and doesn't follow you across other sites. It records page views, the referring site and broad device and country information.

If you try the demo call on our home page, Cloudflare Turnstile first checks you're not a bot, and your call is handled by our voice provider like any call to a FalconVox receptionist. Anything you say or book stays with the demo business for one day and is then deleted; the call's recording and transcript are deleted by our voice provider after 90 days.

13. Changes

We will post any change on this page and, if it is significant, tell our customers by email before it applies. See also our Terms of Service.