We Read the Reviews. We Built the Opposite.

1. Who We Are

Sonvelo ("we", "our", "us") is an AI-powered phone receptionist service for small businesses, operated by Boxi Marketing LLC. Our registered address is in the United States. You can reach us at privacy@sonvelo.com.

2. What Data We Collect

We collect data in two contexts: data about our business customers (you, if you have a Sonvelo account) and data about the callers your AI agent handles.

Business account data

Name and email address (from OAuth sign-in via GitHub or Google)
Business name, phone number, address, and service description
Billing information (processed by Stripe — we do not store card numbers)
Business hours, voice agent settings, and knowledge base content you provide
Usage metrics: call counts, minutes used, plan tier

Caller data (your customers)

Caller phone number (from Twilio)
Call recordings and transcripts
Appointment details, lead information, and conversation history
Sentiment and intent signals derived from conversation analysis

3. How We Use Your Data

To operate the AI phone receptionist service on your behalf
To route, transcribe, analyze, and summarize calls
To send appointment confirmations and notifications to your callers
To enforce usage limits and process subscription billing
To improve our AI models and service quality (aggregate, anonymized data only)
To communicate service updates and important account notices

We do not sell your data or your callers' data to third parties. We do not use caller data for advertising purposes.

4. Data Sharing

We share data only with the following third-party processors, each under a data processing agreement:

Twilio — call routing, phone number management, SMS delivery
Convex — database and serverless function hosting
OpenRouter / Anthropic — large language model inference for conversation responses
Deepgram — speech-to-text transcription
Cartesia — text-to-speech voice synthesis
Stripe — subscription billing and payment processing
Resend — transactional email delivery
Vercel — application hosting and edge delivery
Sentry — error monitoring (no PII in error payloads)

5. Data Retention

Call transcripts and recordings: retained for 12 months, then deleted
Lead and appointment data: retained for the duration of your subscription + 90 days after cancellation
Account data: deleted within 30 days of account deletion request
Billing records: retained for 7 years as required by financial regulations

6. Your Rights

Depending on your location, you may have rights under GDPR, CCPA, or other applicable laws to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your data ("right to be forgotten")
Object to or restrict certain processing
Data portability (receive your data in a machine-readable format)
Withdraw consent at any time where processing is based on consent

To exercise any of these rights, email privacy@sonvelo.com. We will respond within 30 days.

7. Cookies and Analytics

We use session cookies required for authentication. We do not use advertising cookies or cross-site tracking.

8. Security

We use industry-standard security practices: TLS in transit, encrypted storage, access controls limited to authorized personnel, and regular security reviews. API keys and sensitive credentials are managed via Doppler secrets management and never stored in source code.

9. Children's Privacy

Sonvelo is not directed at children under 13. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, contact us immediately at privacy@sonvelo.com.

10. Changes to This Policy

We may update this Privacy Policy periodically. When we make material changes, we will notify you by email (to the address on your account) and update the "Last updated" date at the top of this page. Continued use of the service after notification constitutes acceptance of the updated policy.

11. Contact

Privacy inquiries: privacy@sonvelo.com
General support: hello@sonvelo.com