Last updated: October 3, 2026

Privacy Policy

1. Who we are

KlevaDesk is operated by KlevaCore LLC ("KlevaDesk," "we," "us," "our"). KlevaDesk is an AI voice and text receptionist service for small, appointment-driven businesses. This policy explains how we collect, use, store, and protect data associated with the KlevaDesk service, the klevadesk.com website, and the phone numbers operated by KlevaDesk.

Questions: privacy@klevadesk.com.

2. Who this policy covers

This policy applies to three groups of people:

  • Partner business owners and staff who use the KlevaDesk admin application to manage their AI receptionist.
  • Customers and prospects of partner businesses who interact with a KlevaDesk-operated phone number by voice or SMS.
  • Visitors to klevadesk.com.

3. Information we collect

From partner business accounts

  • Name, email address, business name, and contact details provided at signup.
  • Business profile data the owner configures: services, hours, pricing, booking rules, AI agent tone and knowledge.
  • Integration credentials the owner connects (e.g., Square, Vagaro, Google Calendar).
  • Billing information processed by our payment provider; we do not store full payment card numbers.

From customers contacting a KlevaDesk-operated number

  • Mobile phone number — captured automatically when you call or text a KlevaDesk-operated number.
  • SMS opt-in record — when you opt into messages by texting first or by giving verbal consent during a call, we store the fact, method, and timestamp of that consent.
  • Conversation content — the text of SMS messages exchanged and a transcript of voice calls, used to operate the AI agent, hand booking intent to the business owner, and improve service quality.
  • Voice call recordings — calls answered by KlevaDesk may be recorded for transcription and quality assurance.
  • Caller name, address, appointment-related preferences, and similar information you choose to share during a conversation.

From visitors to klevadesk.com

  • Standard server log information (IP address, browser, page requested, timestamp) used to operate and secure the website.
  • Website analytics. We use Google Analytics to understand how visitors use klevadesk.com: pages viewed, clicks on the sign-up and demo buttons, device and browser type, and approximate location derived from your IP address. Google Analytics sets first-party cookies (such as _ga) to do this. We do not use advertising cookies on klevadesk.com, and we do not use analytics data to advertise to you. You can block these cookies in your browser settings or with Google's opt-out add-on.
  • Website chat. If you use the chat on klevadesk.com, the messages you type are answered by the KlevaDesk AI and kept in our own conversation history so our team can follow up.
  • Voice demo. If you use "Talk to our AI", your browser asks for microphone access and your speech is processed to run that live conversation.

4. How we use information

  • To operate the KlevaDesk voice and SMS receptionist on behalf of the partner business you contacted.
  • To send the partner business owner a notification of your booking intent or question.
  • To send you the specific information you requested (booking link, hours, pricing, confirmation).
  • To honour STOP and HELP keywords and maintain opt-out records.
  • To improve the quality and accuracy of the AI agent. This never includes data received from Google Workspace APIs — see section 6a.
  • To understand how visitors use klevadesk.com and improve the website (website analytics).
  • To bill partner businesses, secure the service, and meet legal obligations.

5. Mobile opt-in data — explicit commitments

The following commitments apply specifically to mobile phone numbers and SMS opt-in data collected from people who contact KlevaDesk-operated numbers:

  • We do not sell, rent, or share mobile phone numbers or SMS opt-in information with third parties for marketing, promotional, or unrelated purposes.
  • We do not use mobile opt-in data to build advertising or marketing lists.
  • Mobile opt-in data is used only to operate the messaging program described on the SMS Program page — i.e., to reply to conversations you initiated and to send information you explicitly requested.
  • Opt-in logs — when and how consent was given, including consent given verbally on a call — are retained for the period required to demonstrate compliance with the TCPA and applicable carrier requirements, and are not repurposed for any other use.
  • Opt-out requests (STOP keywords) are honoured immediately and across all KlevaDesk-operated numbers for that mobile number.

6. How we share information

We share information only as needed to operate the service:

  • Partner business owners receive the conversations and booking intents addressed to their business. If you contact the number of a business that uses KlevaDesk, the content of that conversation is visible to that business's owner.
  • Sub-processors we use to operate the service: cloud hosting providers, the Twilio communications platform (voice + SMS transport), LLM providers (Anthropic and Google for text and voice generation), the booking systems a partner business chooses to connect (Square, Vagaro, Google Calendar), Google Analytics (klevadesk.com website statistics only), and email/transactional service providers. Each is bound by a data-processing agreement. Google Calendar data is never sent to any LLM provider.
  • Legal disclosures when required by law, valid legal process, or to protect rights, safety, or property.

We do not share information for advertising. We do not allow our sub-processors to use your data for their own marketing.

6a. Google user data — Limited Use

When a partner business connects Google Calendar, KlevaDesk accesses only the calendars that business owns, in order to check availability, create and manage appointments made through the receptionist, and let the owner choose which calendar to use.

KlevaDesk's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically, we do not use, transfer, or sell raw or derived Google Workspace data — including Google Calendar data — to develop, train, improve, or fine-tune any generalized or foundational artificial-intelligence or machine-learning model. Google Calendar data is not sent to any third-party AI or ML service. It is used solely to provide the calendar features the partner business requested, is never used for advertising, and is deleted when the business disconnects the integration.

7. Data retention

Call recordings, and the transcripts made from those recordings, are deleted automatically after a set retention period. Conversation history — call summaries and the text of each conversation — is a working record: the assistant reads a caller's past calls to answer the next one, so it is kept while the business is a customer. Opt-in records are kept for as long as legal and carrier compliance requires.

When a business closes its account, its data is deleted. Our backups are kept for up to 30 days, so deleted data is removed from the live service immediately and ages out of backups within 30 days after that. Billing records are kept longer where the law requires it (typically up to seven years).

8. Security

We protect information using industry-standard practices, including encrypted connections (HTTPS/TLS), hashed credentials, role-based access controls, and infrastructure isolation per partner business. No system is perfectly secure; if you believe your data has been accessed inappropriately, please contact us immediately.

9. Your rights

Depending on where you live, you may have rights to access, correct, delete, port, restrict, or object to processing of your personal data. To exercise any of these rights, email privacy@klevadesk.com. We will respond within 30 days, and identity verification may be required. Where you ask us to delete data, we remove it from the live service and it ages out of backups within a further 30 days, except where we are required to keep a record (for example billing, or the messaging opt-in logs described above).

You may opt out of SMS at any time by replying STOP (or any of the equivalent keywords listed on the SMS Program page) to any message from a KlevaDesk-operated number.

10. Children

KlevaDesk is not directed to children under 13 (or under 16 in the EU). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can remove it.

11. International data transfers

KlevaDesk is operated from the United States. If you are located outside the United States, by using the service you understand and agree that your information may be transferred to and processed in the United States and other countries where our sub-processors operate.

12. Changes to this policy

If we make material changes to this policy, we will update the "last updated" date at the top of this page and, where appropriate, notify partner businesses by email. Continued use of KlevaDesk after changes take effect constitutes acceptance of the revised policy.

13. Contact

KlevaCore LLC — San Antonio, TX. Other contact channels are on the contact page.

Privacy questions: privacy@klevadesk.com.