1. Who We Are
Imly provides an AI voice and chat receptionist service that businesses ("Business," "Client") use to handle phone calls and inquiries from their customers ("Caller," "End User"). This policy explains what information Imly collects, how it is used, and your choices.
Contact: contact@imly.app · Bonsai AI Agents LLP
2. Information We Collect
From Callers — when you call or message a business powered by Imly:
- Contact details you provide during a call: name, phone number, appointment date/time, and any notes you volunteer.
- Caller ID: the originating phone number, stored in hashed form for matching and fraud prevention.
- Call content: conversations are transcribed so the Business can review them.
- Call metadata: timing, duration, channel, and outcome.
From Businesses — when you use the Imly dashboard:
- Account information: name, email address, and role (via email/password or Google Sign-In).
- Business configuration: business name, phone number, hours, services, and invited staff.
- Google Calendar access (if connected): limited to reading and writing calendar events for the specific staff member or resource you connect — never your entire Google account.
We do not collect: payment card details, government ID numbers, health records, or other special-category data unless voluntarily provided by a Caller (e.g., allergy notes in a booking request).
3. How We Use Information
- To operate the service: answering calls, booking appointments, sending confirmations, and escalating to human staff when needed.
- To let Businesses review their call history, transcripts, and analytics.
- To improve the AI's accuracy using anonymized or aggregated conversation patterns.
- To maintain security and prevent abuse.
- To comply with legal obligations.
We do not sell personal information. We do not use Caller conversation content to train third-party AI models beyond what is necessary to deliver the service.
4. Google User Data
If you sign in with Google or connect Google Calendar, Imly accesses only the specific scopes you authorize. We use this data solely to provide the Imly service (authentication and calendar scheduling). We do not share Google user data with third parties except as necessary to operate the service, and we comply with the Google API Services User Data Policy, including the Limited Use requirements.
You may revoke Imly's access to your Google account at any time through your Google Account permissions.
5. Data Sharing
Imly uses third-party service providers to deliver core functionality (telephony, speech processing, AI models, cloud hosting, SMS, email). Each provider processes data only as necessary for their function and is bound by data protection commitments.
We may also disclose information if required by law, to protect the rights and safety of Imly, our clients, or Callers, or in connection with a business transaction with appropriate notice.
6. Data Retention and Deletion
Call records and business data are retained for the duration of the Business's active account. A Business may request deletion of their account and associated data by contacting us at contact@imly.app. Upon deletion request, data is removed within 30 days, except where retention is required by law.
Callers may request access to, correction of, or deletion of their personal information by contacting us at contact@imly.app.
7. Your Rights
Depending on your location, you may have rights to access, correct, delete, or port your personal information, or to object to certain processing:
- Canada: We comply with PIPEDA and applicable provincial privacy legislation.
- India: We comply with the Digital Personal Data Protection Act (DPDPA) where applicable.
- EU/UK: If GDPR applies, you have rights including access, rectification, erasure, and portability.
- California: Under CCPA/CPRA, you may request disclosure and deletion. Imly does not sell personal information.
To exercise any of these rights, contact us at contact@imly.app.
8. Security
We use industry-standard measures including encrypted transport (HTTPS/TLS), hashed storage of sensitive identifiers, role-based access controls, and tenant isolation. No system is completely secure; we cannot guarantee absolute security.
9. Children
Imly's services are intended for businesses and their adult customers. We do not knowingly collect personal information from children under the age of 18.
10. Changes
We may update this policy from time to time. Material changes will be communicated to Business account holders via email or the dashboard.
11. Contact
Bonsai AI Agents LLP
Email: contact@imly.app