Privacy Policy

1. Who We Are

BooklineAI Inc. (“BooklineAI”, “we”, “our”, or “us”) is a Canadian company providing AI-powered phone receptionist services to small businesses across Canada. Our registered office is in Canada.

2. Scope and Applicable Law

This policy governs how we handle personal information in connection with our services and complies with the Personal Information Protection and Electronic Documents Act (PIPEDA), Canada’s federal private-sector privacy law, and applicable provincial privacy legislation.

If you are a business that uses BooklineAIto handle calls from your customers, you are a “Business User.” Your customers whose information is collected during calls are “End Users.”

3. Information We Collect

4. How We Use Your Information

• Providing and operating the BooklineAI service
• Processing and recording appointments on your behalf
• Generating call transcripts and summaries
• Billing and subscription management
• Sending transactional service emails (e.g., activation confirmations)
• Monitoring system health and diagnosing errors
• Complying with legal obligations

We do not sell personal information. We do not use call data or end-user information to train AI models.

5. Data Residency

BooklineAI’s primary infrastructure is hosted in Canada (Vercel — Montréal, yul1 region). Your business data and call records are stored in a Supabase PostgreSQL database located in Canada (ca-central-1).

Some data may be processed by our third-party sub-processors who may operate outside Canada, including:

• Retell AI — voice AI infrastructure (United States). Call audio is processed and transcribed by Retell.
• Stripe — payment processing (United States, with Canadian data processing agreements).
• Google — Google Calendar API for appointment sync (United States).
• Sentry — error monitoring (United States, anonymized error data only).

By using BooklineAI, you consent to the transfer of data to these processors as necessary to operate the service. Each processor is subject to contractual data protection obligations.

6. Your Rights Under PIPEDA

Under PIPEDA, you have the right to:

• Access the personal information we hold about you
• Correct inaccurate information
• Withdraw consent (subject to legal or contractual restrictions)
• Request deletion of your account and associated data
• Know how your information is being used

To exercise these rights, contact us at privacy@booklineai.com. We will respond within 30 days.

7. Retention

We retain your account data for as long as your subscription is active, plus 90 days after cancellation to allow for account recovery. Call transcripts and recordings are retained for 12 months by default. You may request earlier deletion by contacting us.

8. Security

We use industry-standard safeguards including TLS encryption in transit, AES-256 encryption for OAuth tokens at rest, row-level security on all database tables, and access controls limiting who within our organization can view personal data.

9. Cookies

We use session cookies for authentication only. We do not use third-party tracking cookies or advertising cookies.

10. Changes to This Policy

We may update this policy from time to time. We will notify Business Users by email at least 14 days before material changes take effect. Continued use of the service constitutes acceptance of the updated policy.

11. Contact

For privacy inquiries or to exercise your rights:

You may also file a complaint with the Office of the Privacy Commissioner of Canada.