Privacy Policy

What we collect

Tendo AI stores account profile data, encrypted Retell and integration credentials, agent configuration, build status, and call-tool records needed to operate AI receptionists on your behalf.

When you connect third-party services (Square, Calendly, HubSpot, Google, and others), we store the credentials required to execute those integrations during live phone calls. Non-secret display metadata (such as account identifiers) may also be stored for your dashboard.

Google user data

When you choose to sign in with Google or connect Google Calendar or Google Sheets, Tendo AI accesses Google user data only with your explicit consent and only to power the features you turn on. We describe that access separately below so it is clear how Google data is handled.

Google Sign-In

If you use Google to create or sign in to a Tendo AI account, we receive basic profile information such as your name and email address so we can identify your account. We do not use Sign-In access to read your calendar or spreadsheets.

Google Calendar

If you connect Google Calendar, Tendo AI uses that connection so your AI receptionist can check availability (free/busy times), create appointments, reschedule appointments, and cancel appointments on the calendars you authorize. During a live call, booking results needed to complete the caller's request (for example, available times or a confirmed appointment) may be returned to the voice agent so it can speak accurately to the caller.

Google Sheets

If you connect Google Sheets, Tendo AI uses that connection to create a call-log spreadsheet when you ask us to, and/or to append call-summary rows (such as date, caller name, phone number, and a short summary) to a spreadsheet and tab you choose. We do not use Sheets access to browse unrelated files in your Google account for advertising or unrelated purposes.

How we store Google data

For connected Google integrations, we store an encrypted OAuth refresh token and destination metadata needed to operate the feature (for example, spreadsheet id, tab name, column mapping, or calendar id). We do not keep a permanent copy of your full calendar history or full spreadsheet contents on Tendo AI servers. Tokens and metadata are used on our servers to execute the booking or logging actions you enabled.

How we share Google data

Google user data is used only to provide the user-facing Calendar booking and Sheets logging features in Tendo AI. We may transmit the minimum data needed for those features through the voice platform that hosts your agent (Retell AI) so the receptionist can complete the caller's request. We do not sell Google user data. We do not transfer Google user data to advertising platforms, data brokers, or information resellers, and we do not use it for advertising, credit decisions, or lending.

Limited Use

Tendo AI's use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We do not use Google user data to train, improve, or create general artificial intelligence or machine learning models. Google user data is used only to provide or improve the prominent user-facing features you enable (appointment booking via Google Calendar and call logging via Google Sheets).

How we protect your data

Secrets are encrypted at rest and are used only on the server to create agents or execute connected integrations. We do not intentionally expose API keys to the browser or client-side JavaScript.

Tendo AI is designed so your finished voice agents live in your own Retell AI account. We facilitate the build and connection process; you retain ownership of the deployed agent and its call data within Retell.

Caller information

When callers interact with your agents, call audio and transcripts are processed by Retell AI according to your Retell account settings. Account owners should only enable call workflows that they are authorized to operate and should inform callers as required by applicable law.

Disconnecting Google and deleting data

You can disconnect Google Calendar or Google Sheets from Tendo AI in the product, which removes the stored Google credentials we hold for that connection. You can also revoke Tendo AI's access at any time from your Google Account permissions page (myaccount.google.com/permissions).

To request deletion of your Tendo AI account data, email mail@buildtendo.com. We will delete or de-identify account and stored credential data we control, except where we must retain limited records for security, fraud prevention, or legal compliance.

Third-party services

Stripe processes subscription payments. External service providers — including Retell AI, OpenAI, Firecrawl, Square, and connected integration partners — may process data according to their own privacy policies when you use those features. When Google Calendar or Google Sheets is connected, Google user data is handled as described in the Google user data section above and is not used beyond those features.

Contact

Questions about this policy? Email us at mail@buildtendo.com or visit buildtendo.com.