Privacy Policy

Last updated: August 2026

AI Secretary ("we", "us") is a service operated by IT-PACKS LLC that answers messages on behalf of businesses ("operators") and schedules meetings on their calendars. This policy explains what data we collect, why, and how we handle it.

Data we collect

  • Operator account data — email, password hash, business description, working hours, timezone.
  • Google account data — with your explicit consent, we store a Google refresh token so the assistant can read your availability and create calendar events on your behalf. We access only the calendar you connect. We do not read your email, contacts, or Drive.
  • Client conversations — messages sent to your business number via WhatsApp (or another supported channel) and our replies. Stored so the assistant has conversation history and so you can review it in the operator dashboard.
  • Bookings — the calendar events the assistant creates on your behalf.

How we use data

  • To route inbound messages, generate replies via a large language model, and send them back through the messaging channel.
  • To check your calendar availability and create, reschedule, or cancel bookings you authorize.
  • To let you (the operator) review conversations and bookings in the admin dashboard.

Sharing

We share message content with a third-party language-model provider strictly to generate a reply for that conversation, under an agreement that prohibits using the content to train models. We do not sell data and we do not share it with advertisers. Google Calendar data stays between our service and Google's APIs.

Google user data

AI Secretary's use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Retention & deletion

Conversations and bookings are kept while your account is active. You can request deletion of your account and associated data at any time by emailing info@aisecretary.bot. Disconnecting Google Calendar from the operator dashboard removes the stored refresh token immediately; you can also revoke access at any time in your Google account settings.

Security

Traffic is served over TLS. Secrets and tokens are stored encrypted at rest. Access to the production database is limited to the service owner.

Contact

Questions or requests: info@aisecretary.bot.