This document applies to ExeclyAI at execlyai.com and the related calling, calendar, account, and support services. Please read it carefully. It is published only in English; the English text governs even where other parts of the site are shown in your language.
1. Scope and who we are
This Privacy Policy explains how ExeclyAI ("ExeclyAI," "we," "us," or "our") handles personal information when you visit execlyai.com, create an account, direct the service to make a call, connect a calendar, contact support, or otherwise use our services.
The Service is offered to residents of the United States and Canada, and calls are placed only to United States and Canadian telephone numbers. Canadian personal information is handled in a manner consistent with PIPEDA and applicable provincial privacy law.
ExeclyAI is the business or controller for information collected directly from account holders. When an account holder gives us information about another person, the account holder is responsible for having the authority and lawful basis to provide it and request the call.
2. Information we collect
Account and profile information
We collect your name, email address, authentication identifiers, time zone, required callback phone number, phone verification status and verification-attempt metadata, preferences, account role, plan, minute balance, and account status. Supabase handles password authentication; we do not receive your plaintext password.
Task and call information
We collect instructions, destination phone number, business or recipient name, call purpose, approved permissions, timing and calendar instructions, approval decisions, call status and duration, provider identifiers, call events, transcripts, summaries, outcomes, confirmation details, and diagnostic information.
Audio recording is off by default in the current service. If recording is offered and enabled later, we will process it only as disclosed at that time and subject to required consent. Transcripts may still contain personal or sensitive information.
Calendar and Google account information
If you connect Google Calendar, we may collect your Google account identifier and email, OAuth access and refresh tokens, granted scopes, connection status, calendar identifiers, time zone, availability, and, with write access, event details needed for an authorized event. Calendar tokens remain on the backend and are not given to the voice model.
Support and technical information
We collect support messages, attachments, administrative responses, and related task or call context. We also collect IP address, browser and device details, timestamps, request and security logs, cookie or local-storage identifiers, error reports, and usage activity needed to operate and secure the service.
Plans and transactions
We keep plan, entitlement, usage, credit, and adjustment records. Paid checkout is currently disabled. If payments are enabled, a disclosed payment processor will collect payment-card details; ExeclyAI will not intentionally store full card numbers or card security codes.
3. Where information comes from
We receive information directly from you; from users who lawfully include you in a task; automatically from your browser and service use; from Google Calendar; and from providers that help us place calls, process conversations, authenticate users, host data, and diagnose issues.
If a person speaks with ExeclyAI during a call, we receive that conversation content and related metadata from our communications provider.
4. How we use information
We use information to:
- create, authenticate, secure, and administer accounts;
- interpret tasks and validate approved call permissions;
- place calls, process speech, understand responses, manage the conversation, and return a result;
- check availability and create authorized calendar events;
- provide transcripts, summaries, confirmations, history, minute accounting, and support;
- detect fraud, abuse, security incidents, failures, and Terms violations;
- debug, maintain, analyze, and improve reliability;
- send service, security, policy, and account notices; and
- comply with law, enforce agreements, and protect users, recipients, ExeclyAI, and the public.
We do not use personal information to decide eligibility for employment, housing, credit, insurance, medical care, or similarly significant services.
5. Legal bases in the EEA and UK
The Service is not directed to the European Economic Area, the United Kingdom, or Switzerland, and we do not offer calling to numbers in those regions. This section applies where EEA or UK law nonetheless reaches our processing. Where it does, we process information to perform our contract with you; for legitimate interests in providing, securing, supporting, and improving the service; to meet legal obligations; and, where required, with consent. You may withdraw consent without affecting earlier processing.
Account holders must independently determine the lawful basis for personal information they instruct us to use in calls.
6. AI-assisted calls and conversation data
ExeclyAI uses automated systems for the requested call. At the start of a connected call, it is designed to identify itself as an AI assistant and state the authorized purpose. Conversation content is processed in real time to produce and recognize speech, choose the next permitted response, and document the result.
Relevant instructions and conversation content may be sent to OpenAI for language processing. Twilio processes phone numbers and one-time SMS verification attempts, as well as voice and call data, to verify callback numbers and operate calls. We limit information to what is reasonably needed and do not send Google OAuth tokens to the conversation model.
Do not use ExeclyAI to collect card numbers, passwords, authentication codes, medical records, government identifiers, or other highly sensitive information. Recipient requests to stop must be honored as required by law and our Terms.
7. Google Calendar data
ExeclyAI's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.
We use Google Calendar data only for user-facing features you request, such as finding free time or creating an approved event. We do not sell Google user data, use it for advertising, or transfer it for lending or creditworthiness decisions.
Humans do not read Google user data unless you give affirmative permission for specific support, access is necessary for security or abuse investigation, law requires it, or the data is aggregated and anonymized for internal operations. You can disconnect Calendar in settings and can also revoke access through your Google Account.
9. Retention and deletion
We keep account information while an account is active and afterward as reasonably needed to finish deletion, maintain security and audit records, resolve disputes, enforce agreements, and meet legal obligations. Task instructions, call events, transcripts, results, calendar connections, usage ledgers, and support records remain for the period needed to provide history, support the service, investigate issues, and meet legal or accounting requirements.
Retention varies by data type, account setting, and legal need. We delete or de-identify information when no longer required. Backups and provider systems may retain residual copies for a limited period before overwrite. We may preserve information for legal, fraud-prevention, or abuse-prevention needs.
You can delete your account and its associated data from your account settings, or request deletion at support@execlyai.com. We begin deletion within 30 days of verifying a request, and instruct our providers to do the same; residual copies may persist in backups until they are overwritten on their normal cycle. Disconnecting a calendar does not delete unrelated events already created in Google Calendar.
10. Security
We use safeguards designed to protect information, including access controls, backend-only provider credentials, encrypted transport, protected production secrets, and restricted administrative access. Calendar OAuth credentials are designed to be encrypted at rest. No system is perfectly secure, so we cannot guarantee against all unauthorized access or loss.
If a breach affecting your personal information occurs, we will notify you and any regulator as and when applicable law requires, without undue delay after we confirm the incident.
You are responsible for a strong, unique password, protecting email access, and promptly reporting suspected unauthorized use.
11. Cookies and local storage
We use only strictly necessary cookies and storage. ExeclyAI runs no advertising, analytics, or cross-site tracking technology, and we do not load third-party trackers, advertising pixels, or session-replay tools. Because nothing we set is used for advertising or measurement, no cookie consent banner is required for our own storage.
What we set, and why:
- Authentication: a Supabase session cookie that keeps you signed in and is required for the service to work.
- Sign-in duration: cookies that record whether you chose to stay signed in for the fixed period offered at sign-in or only for the browser session, and the deadline for that choice, so the session ends when you asked it to.
- Preferences: local storage that remembers your light or dark appearance setting.
- Security and diagnostics: short-lived request identifiers used to trace errors and detect abuse.
You can clear cookies and local storage in your browser at any time. Doing so signs you out and resets your appearance preference. Blocking the authentication cookie prevents sign-in.
12. International transfers
ExeclyAI and its providers may process information in the United States and other countries with different privacy laws. Where required, we use recognized transfer mechanisms and contractual safeguards, such as standard contractual clauses, plus appropriate supplementary measures.
13. Your choices and privacy rights
Depending on your location, you may request access, correction, deletion, or a copy of personal information; object to or restrict processing; withdraw consent; appeal a denied request; and complain to a data-protection authority.
Update available profile and calendar settings in the service. For other requests, email support@execlyai.com from the account address. We may verify identity and authority. Authorized agents may submit requests where law permits, with proof of authorization. We will not discriminate against you for exercising a legal right.
We acknowledge a request within 10 business days and respond within 45 days, and may extend once by a further 45 days where law allows, with notice to you. Where the GDPR or UK GDPR applies, we respond within one month, extendable by two further months for complex requests. If we deny a request, we explain why and how to appeal; we decide an appeal within 45 days and, if we deny it, tell you how to complain to your state attorney general or data-protection authority.
Because we do not sell or share information for targeted advertising, there is no need to opt out of those practices. Where required, Global Privacy Control or similar signals will be treated as requests concerning any covered sale or sharing.
14. U.S. state privacy notice
In the previous 12 months, categories collected may include identifiers; customer records; internet or electronic activity; approximate location inferred from IP; audio or electronic communications and transcripts; professional information included in a task; service-related inferences; and sensitive information only when you choose to provide it or it appears in call content.
We use and disclose these categories for the purposes in Sections 4 and 8, and we retain them as described in Section 9. We do not use sensitive information to infer characteristics, sell personal information, or share it for cross-context behavioral advertising. Because we use sensitive personal information only to provide the service you requested and for permitted security and integrity purposes, no right to limit its use applies; we honor such a request as a deletion request where law provides one. State residents may exercise applicable access, correction, deletion, portability, opt-out, and appeal rights under Section 13.
15. Children
ExeclyAI is not directed to children under 18, and people under 18 may not create an account. If you believe a child provided information to us, contact us so we can review and delete it as appropriate.
16. Changes to this Policy
We may update this Policy for changes in the service, our practices, or law. We will post the new version and update the date. If a change materially affects existing information, we will provide additional notice or request consent when required.
17. Contact us
ExeclyAI Privacy
Website: execlyai.com
Email: support@execlyai.com
Use "Privacy Request" in the subject and identify the account email. Do not email passwords, authentication codes, payment-card information, or other highly sensitive data.