Legal

Privacy Policy

Last updated: July 14, 2026

1. What We Collect

When you use OneShotFly, we collect:

  • Account data — your name, phone number, email, and business information (business name, domain, services, hours).
  • Call data — recordings and transcripts of calls answered by your automated receptionist, and caller phone numbers.
  • Calendar data — appointment details synced with your Google Calendar (event titles, times, attendee contact info).
  • Payment data — handled by Lemon Squeezy, our payment processor. We never see or store your full card details.
  • Usage data — basic logs of how the dashboard is used, for reliability and support.

2. How We Use It

  • To operate the Service: answer calls, book appointments, show your dashboard.
  • To send you service messages: booking confirmations, trial reminders, receipts.
  • To improve reliability and fix problems.
  • To comply with legal obligations.

We do not sell your personal data. We do not use your call data to train third-party machine-learning models.

3. Where Data Lives

Your data is stored in Supabase (Postgres database) and served through Vercel (hosting). Both use encrypted connections and encryption at rest.

4. Third Parties We Share With

We share data only with the processors needed to run the Service:

  • Vapi — powers the voice receptionist; processes call audio and transcripts.
  • Google Calendar — stores and syncs your appointments.
  • Lemon Squeezy — processes payments and invoices as merchant of record.
  • Supabase / Vercel — database and hosting infrastructure.
  • Twilio — sends SMS reminders and payment links.

Each processor only receives the data it needs for its function.

5. Data Retention

We keep your data while your account is active. Call recordings and transcripts are kept for 12 months by default, then deleted. After account closure, we delete or anonymize your data within 30 days, except records we must keep for legal or accounting reasons.

6. Your Rights

You can, at any time:

  • Access — request a copy of the personal data we hold about you.
  • Export — receive your data in a portable format.
  • Delete — request deletion of your account and data.
  • Correct — fix inaccurate account information.

Email us (Section 8) and we will respond within 30 days.

7. Cookies & Local Storage

We use essential cookies for sign-in sessions only — no advertising or tracking cookies. We also use your browser's localStorage to save onboarding progress so you can resume where you left off. Details in the Cookie Policy.

8. Contact

Privacy questions or requests: chaitanya.school.work@gmail.com. We will update this policy as the Service evolves; material changes will be announced by email or in the dashboard.