What we collect from businesses and their callers, what we do with it, and what we never do with it.
Two groups: businesses that use Kept, and the people who call or are contacted by those businesses. For the second group, the business is in charge of your information and Kept processes it on their behalf.
From businesses: name, contact details, business details, the configuration you build (services, prices, hours, call flow, scripts), and billing information.
From callers: phone number, what was said on the call (transcripts, and recordings where lawful and disclosed), appointment details, language, and contact preferences including opt-ins and opt-outs.
To answer calls, make and confirm bookings, send the messages the business switched on, honour opt-outs, keep the service secure, bill businesses, and improve the quality of calls. We do not sell personal information.
No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties. Information may be shared with the providers below only to deliver the service.
If a business connects a Google or Microsoft calendar, Kept reads free and busy times so it only offers open slots, and creates, updates and deletes the events for bookings Kept makes. It does not read the contents of other events, and it does not use calendar data for anything else.
Kept’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Calendar data is never sold, never used for advertising, and never used to train AI models.
Only an encrypted refresh token is stored. Disconnecting in your account deletes it and revokes Kept’s access; you can also remove access from your Google or Microsoft account settings at any time.
Phone calls and text messages: Telnyx. Turning callers’ speech into text: AssemblyAI. Deciding what to say: Anthropic. The receptionist’s voice: ElevenLabs, which receives what the receptionist says, not the caller’s audio. The servers that run calls: Hetzner, in the United States. The website, accounts and email: Vercel, Cloudflare and Resend. Card payments for paid plans: Stripe. Each receives only what it needs to do its part.
Call records are kept for as long as the business uses Kept, and deleted on request or within 90 days of the business leaving. Opt-out records are kept indefinitely, because deleting them would mean contacting someone who asked us not to.
You can ask for a copy of your information, ask us to correct it, or ask us to delete it, subject to the opt-out exception above. If you are a caller, you can also ask the business you called. Residents of California, Canada (including Quebec), the UK and the EU have additional rights under their local laws, and we honour them.
Contact: hello@keptbooking.com.