Privacy Policy

This Privacy Policy explains how Falcon Solutions ("Falcon Solutions", "we", "us", or "our"), the owner of OneConvo ("OneConvo"), collects, uses, discloses, stores, and protects personal information when you use oneconvo.app, create or use a OneConvo account, or interact with an AI phone assistant powered by OneConvo.

OneConvo is an AI-powered phone assistant for businesses such as restaurants, clinics, hotels, garages, salons, spas, gyms, offices, and other businesses that need to answer calls, handle customer questions, and arrange appointments or reservations.

This Privacy Policy applies globally. Certain privacy rights and obligations vary depending on where you are located and the role that Falcon Solutions or a OneConvo business customer has in relation to your personal information. Where applicable law provides additional rights or protections, those rights continue to apply.

1. Who We Are

OneConvo is a product of Falcon Solutions.

Location: Surat, India
Privacy and support contact: [email protected]
Website: oneconvo.app

2. Scope and Roles

OneConvo has two principal privacy contexts. First, Falcon Solutions processes information about businesses and their authorized users so that we can provide the OneConvo platform. Second, when a business uses OneConvo to answer its customer calls, OneConvo processes caller information on behalf of that business to provide the requested service.

For business account information, Falcon Solutions generally determines how and why that information is processed and acts as the relevant controller or equivalent entity under applicable law.

For caller information processed through a business's OneConvo agent, the business generally determines the purposes and means of processing. The business may therefore be the controller or equivalent entity, while OneConvo acts as its service provider or processor where applicable.

The business using OneConvo is responsible for providing any privacy notices required by applicable law, determining an appropriate legal basis for its processing, and obtaining any consent or other permission required for call recording, transcription, automated calling assistance, or other processing. Businesses are also responsible for configuring their OneConvo agent and its disclosures appropriately for their customers and jurisdictions.

3. Information We Collect

3.1 Business and account information

• Name and business name
• Email address
• Phone number
• Country
• Business address and other business details you choose to provide
• Login and authentication information
• Business operating information, services, FAQs, knowledge-base content, and other information you provide to configure your AI assistant
• AI assistant configuration, including its name, voice, personality, language, introduction message, restrictions, handover instructions, and related settings

3.2 Technical and usage information

We may collect information about how you access and use OneConvo, including IP address, browser and device information, operating system, session information, security logs, and other technical information generated when you use the service.

3.3 Caller and customer information

When you call a business that uses OneConvo, the service may process information that you provide during the call or that is necessary to fulfill your request. This may include:

• Name
• Phone number
• Appointment or reservation details
• Requested date and time
• Number of people or guests
• Preferences, including food or other allergen-related preferences where voluntarily provided
• Other information that you voluntarily provide during the call

3.4 Call recordings and transcripts

OneConvo's phone service uses third-party infrastructure that can record and transcribe calls. Accordingly, calls handled through OneConvo may result in audio recordings and written transcripts being processed and stored as part of the service.

Call recordings and transcripts are associated with the relevant business account and are available to that business through the service where the applicable product features permit access.

3.5 Information from integrations

If a business connects a calendar or another supported service, OneConvo may receive information necessary to provide the integration. For calendar integrations, this is limited to writing appointment and reservation events to the connected calendar — OneConvo does not read, list, or query existing calendar events or availability. OneConvo currently supports Google Calendar and Microsoft Outlook calendar integrations.

4. How We Use Information

We use information for purposes including:

• Providing, operating, and maintaining OneConvo
• Answering and handling business phone calls through AI assistants
• Understanding caller requests and generating AI responses
• Creating, changing, and managing appointments and reservations
• Creating or updating calendar events when authorized by a business
• Providing call recordings and transcripts where applicable
• Providing customer support
• Managing accounts, subscriptions, and payments
• Sending transactional emails such as confirmations and service-related notifications
• Monitoring performance, diagnosing errors, preventing abuse, and maintaining security
• Improving the quality, reliability, and performance of OneConvo and its AI assistants
• Complying with legal obligations and responding to lawful requests
• Protecting the rights, safety, property, and security of OneConvo, our customers, users, and others

5. AI Processing

OneConvo uses artificial intelligence and machine-learning technologies to understand caller requests, generate responses, and perform tasks such as appointment and reservation handling. Information from calls may be sent to specialized third-party AI, speech, transcription, and voice-processing providers as necessary to operate these features.

Third-party voice infrastructure providers may retain call data for a limited period for service operation; we configure these providers not to use customer data to train general-purpose AI models. We may use information in aggregated, de-identified, or otherwise appropriately protected form to analyze service performance and improve OneConvo.

For quality and service-improvement purposes, authorized personnel may review limited call or transcript information where necessary to evaluate and improve the performance of OneConvo AI assistants. Access is intended to be limited to what is reasonably necessary for those purposes.

AI-generated responses can be inaccurate, incomplete, or inappropriate. OneConvo does not guarantee that an AI assistant will always understand a caller correctly or provide error-free information.

6. Call Recording and Transcription

Calls handled by OneConvo may be recorded and transcribed by the technology used to provide the phone and AI service. Recordings and transcripts are retained indefinitely while the relevant business account remains active, unless a different retention requirement applies under a specific service or legal obligation.

Businesses can configure their AI assistant's introduction and other spoken messages, including messages concerning AI use, recording, transcription, or privacy. The business is responsible for ensuring that the notices and consents used for its calls satisfy the laws applicable to its customers and locations.

If the relevant business account or customer account is deleted, associated call recordings and transcripts are deleted. When the entire business account is deleted, the associated OneConvo data is deleted, subject to any information that we are legally required to retain.

7. Email and Other Communications

OneConvo currently uses email for transactional communications, such as account-related messages, appointment or reservation confirmations, and other service communications. We do not currently use OneConvo to send promotional marketing messages as part of the standard service.

We may introduce promotional communications in the future. If we do so, we will provide any consent, opt-out, or other mechanisms required by applicable law.

8. Payments and Subscriptions

OneConvo is offered through subscription plans. Payments are processed by a third-party payment provider. OneConvo does not store customers' full payment card numbers. Payment providers may collect and process payment information according to their own privacy policies and terms.

9. Third-Party Service Providers

We use third-party service providers to host, secure, operate, monitor, and support OneConvo. Depending on the feature used, these providers may process personal information on our behalf.

Provider categories include cloud hosting and infrastructure, database and server management, telephony, speech recognition and text-to-speech, artificial intelligence, email delivery, payment processing, error monitoring, analytics, security and anti-abuse services, and calendar integrations.

We do not sell personal information and do not share personal information with advertisers for their independent advertising purposes.

Third-party providers may process information in countries other than the country where you are located. Their processing may be subject to their own privacy policies and contractual obligations.

10. Google Calendar API Access

If a business connects Google Calendar to OneConvo, we access Google user data under the following practices.

10.1 What Google user data we access

When you connect your Google Calendar, OneConvo requests the calendar.calendarlist.readonly scope (to let you select which calendar to use) and the calendar.events scope (to create reservation events). We do not call any read endpoints on your calendar — no listing or querying of existing events or availability — even though the granted scope technically permits it.

10.2 How we use it

Google Calendar access is used exclusively to write confirmed phone reservations as calendar events, so business staff can see bookings alongside their existing schedule. This data is never used to train, fine-tune, or improve any AI/ML model, foundational or otherwise.

10.3 Who we share it with

Google user data obtained via this integration is not shared with, transferred to, or processed by any third-party AI service. It is written directly from our backend to your Google Calendar via the Google Calendar API and is not routed through Soniox, OpenAI, or VAPI.

10.4 Data protection

OAuth tokens are stored encrypted at rest. Access is scoped to the minimum required permissions and is used only by authenticated backend services, not exposed to end users or third parties.

10.5 Retention and deletion

OAuth tokens are retained only for as long as a business keeps its Google Calendar integration connected. If a business disconnects the integration, its tokens are revoked and deleted immediately. Calendar events created via this integration are written directly into the business's own Google Calendar and remain under that business's control; OneConvo does not separately retain a copy of calendar event content beyond what is needed to complete the booking write.

10.6 Limited Use Compliance Statement

OneConvo's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. OneConvo does not use Google user data to train, develop, or improve any artificial intelligence or machine learning models, generalized or otherwise.

11. International Data Processing

OneConvo is offered worldwide. Our primary application infrastructure is hosted on servers located in the European Union. However, certain third-party service providers used to operate OneConvo may process information in other countries.

Where applicable law requires safeguards for international transfers of personal information, we intend to use appropriate contractual, technical, organizational, or other legally recognized mechanisms for those transfers.

12. Data Retention

We retain personal information for as long as reasonably necessary to provide the relevant services, maintain business records, protect security, resolve disputes, comply with legal obligations, and perform other legitimate business purposes.

Unless otherwise stated in a specific service agreement, call recordings and transcripts are retained indefinitely while the relevant business account remains active.

When a business account is deleted, we delete the associated account data, call recordings, and transcripts, subject to information we are legally required to retain or information that cannot reasonably be deleted immediately from secure backup systems, if any. OneConvo does not intentionally retain a separate archival copy of deleted account data for ordinary business purposes.

13. Data Security

We use reasonable technical and organizational measures designed to protect personal information against unauthorized access, alteration, disclosure, loss, misuse, or destruction. These measures include secure communications, access controls, infrastructure security, authentication controls, monitoring, backups where appropriate, and other standard security practices.

No internet-based service can guarantee absolute security. You should not assume that transmission or storage of information is completely risk-free.

14. Your Privacy Rights

Depending on your location and applicable law, you may have rights relating to your personal information. These may include the right to:

• Request access to personal information we hold about you
• Request correction of inaccurate or incomplete information
• Request deletion of personal information
• Withdraw consent where processing is based on consent
• Object to or request restriction of certain processing
• Request a copy or portability of certain personal information where applicable
• Lodge a complaint with an applicable privacy or data protection authority

These rights are subject to applicable legal exceptions and limitations. For caller information processed on behalf of a OneConvo business customer, you may need to contact the relevant business first because that business may be the controller or equivalent entity responsible for the processing.

To submit a privacy request to OneConvo, email [email protected]. We may need to verify your identity before completing a request.

15. Business Customers and Their Responsibilities

Businesses that use OneConvo are responsible for determining how they use the service and for complying with privacy, data protection, consumer protection, telecommunications, call-recording, marketing, and other laws applicable to their business and customers, including:

• Providing customers with required privacy notices
• Obtaining consent or another lawful basis where required
• Ensuring that call-recording and transcription disclosures are legally appropriate
• Configuring the AI assistant's introduction, recording notices, privacy notices, and other messages appropriately
• Ensuring that information placed into the AI assistant's knowledge base is lawful to process and disclose
• Responding to customer privacy requests where the business is the controller or equivalent entity
• Ensuring that the business does not use OneConvo for prohibited or unlawful purposes

We expect to provide a separate Data Processing Agreement for business customers where required.

16. Prohibited and High-Risk Uses

OneConvo is designed primarily for customer communication, appointment and reservation handling, and related business assistance. It is not designed to replace qualified professionals or emergency services.

Businesses must not use OneConvo as a substitute for emergency services or to make decisions that require qualified professional judgment where an AI assistant is inappropriate. Examples include emergency response, medical diagnosis or treatment decisions, legal advice, financial advice, or other high-risk decisions where an error could cause significant harm.

OneConvo is not responsible for decisions, actions, representations, or outcomes resulting from a business's configuration or use of its AI assistant, including inaccurate AI-generated responses, unless otherwise required by applicable law.

17. Cookies and Analytics

Our website and service may use cookies and similar technologies for essential website functions, authentication, security, analytics, performance measurement, and remembering preferences.

We use analytics technologies, including Google Analytics and Microsoft/Bing analytics tools, to understand website and product usage and improve our services. We do not use advertising cookies for the purpose of selling or sharing personal information with advertisers.

Depending on your jurisdiction and the technologies enabled on a particular page, you may have choices regarding non-essential cookies or similar technologies.

18. Children's Privacy

OneConvo is a business service and is not directed to children. We do not knowingly design the service to collect personal information directly from children. If you believe a child has provided personal information to us in circumstances where it should not have been collected, please contact us at [email protected].

19. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to OneConvo, our processing practices, technology, legal requirements, or other circumstances.

When we make material changes, we may provide additional notice where required by applicable law. The updated policy will be posted on oneconvo.app and the effective date will be updated.

20. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or OneConvo's handling of personal information, contact:

Falcon Solutions
OneConvo
Surat, India
Email: [email protected]

Important Notice

This Privacy Policy is intended to describe OneConvo's stated privacy practices. It is not legal advice and does not guarantee compliance with every privacy, data protection, telecommunications, call-recording, or sector-specific law in every jurisdiction. Businesses using OneConvo remain responsible for determining and satisfying the legal requirements applicable to their own operations and customers. Falcon Solutions may update this policy as OneConvo's features, providers, and legal requirements change.

Questions about this policy can also be sent via our contact page.