Who we are
- QuickVOC is a CRM with a built-in AI phone agent for service businesses. It is operated by Baturintech LLC ("Baturintech", "we", "us" or "our"), 3900 San Fernando Rd, Glendale, CA 91204, United States. Contact: baturintech@gmail.com.
- This policy explains what information QuickVOC collects, how we use and protect it, who we share it with, and the choices you have.
Two kinds of data
- Your account data: information about you, your business and your team. For this data we decide how it is used, as described in this policy.
- Your customers' data: the people who call, chat or message your business through QuickVOC, and the customers, jobs, estimates and invoices you keep in it. We process this data only on your behalf and on your instructions, as your service provider. If you are a caller or customer of a business that uses QuickVOC, please contact that business about your information; we will help them answer your request.
Information we collect
- Account and business data: your name, email address, business name, address, trade, website, hours, time zone, team members and the phone numbers you use with QuickVOC.
- Call data: call records, recordings, transcripts and AI summaries of calls handled by the AI agent, including the caller's phone number and what they said.
- Lead and CRM data: leads, customers and their contact details, vehicles or job details, job steps, notes, follow-ups, estimates, invoices, payment records you enter, and appointments.
- Messages: website chat conversations and, if you connect them, Instagram Direct, Facebook Messenger, Telegram, Thumbtack and Google Local Services messages, including photos customers send.
- Website form requests: if you turn on website form capture, copies of the requests your visitors send through forms on your website, on your behalf. We never copy passwords, card numbers or hidden form fields.
- Agent settings: greetings, services, prices, business hours, urgent words, voice and language choices, and knowledge you add.
- Integration data: when you connect Google Calendar, Google Local Services Ads, Thumbtack, Housecall Pro, Telegram, Instagram or a Facebook Page, the data needed to run that connection, such as access tokens, account and Page names, lead reports, customers, jobs and appointments.
- Billing data: your plan, billing period and usage (such as AI minutes). Card details are handled by Stripe; we never store full card numbers.
- Online payments: if you turn on online payments, the status of your business's Stripe account (for example whether payments and payouts are on and how many items Stripe still needs) and, for each payment from your customers, the amount, how they paid (such as "Visa •4242" or "Affirm"), Stripe's fee, refunds and disputes. Your EIN or SSN, date of birth, ID documents and bank account are entered in Stripe's own form and go straight to Stripe; we do not receive or store them. Your customers' card and bank details also go straight to Stripe.
- Usage and device data: pages and features used, request logs, error reports, IP address, browser type and session cookies needed for sign-in and security.
- Support messages: anything you send to our team.
How we use information
- Run the AI agent: answer calls and messages, transcribe and summarize them, qualify leads, offer times, book appointments, transfer calls and place the callbacks and follow-up calls you enable.
- Run the CRM: show your leads, customers, jobs, estimates, invoices, payments, follow-ups and reports, and keep each customer's history in one place.
- Run your integrations: add bookings to Google Calendar, read and reply to Google Local Services and Thumbtack leads, create customers and jobs in Housecall Pro, and send your Telegram alerts.
- Billing: count usage, apply plan limits and process payments through Stripe.
- Security: protect accounts, prevent abuse and fraud, and investigate incidents.
- Support and improvement: answer your questions, fix problems, and improve QuickVOC using aggregated, de-identified usage information.
- We do not use your call recordings, transcripts, messages or Google user data to train AI models.
Google API data: Limited Use disclosure
- QuickVOC's use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements.
- Sign in with Google (scopes: openid, email, profile): we use your name, email address and profile picture only to create and sign in to your QuickVOC account.
- Google Calendar (scope: calendar.events): we use calendar access only to create, update and delete the appointments booked through QuickVOC, in the calendar you connect. We do not read, share or analyze any other events in your calendar.
- Google Local Services Ads through the Google Ads API (scope: adwords): we use this access only to retrieve the lead reports of the Local Services account you connect and to send replies to message leads on your behalf. We do not change your campaigns, budgets or ads, and we do not use this data for advertising, profiling or any purpose unrelated to managing your leads in QuickVOC.
- Google Business Profile (scope: business.manage): when you connect a Business Profile you own or manage, we read its reviews (rating, text, reviewer display name and photo) to show them in QuickVOC and match them to your customers, and we publish, edit or delete replies to those reviews only as you set up (automatic replies to reviews you choose, or drafts you approve). If you use posting, we publish the posts you create. We do not change any other information on your profile.
- We do not transfer Google user data to third parties except as needed to provide these features, and we do not sell Google user data or use it for AI model training.
- QuickVOC does not use, retain or transfer Google user data obtained through Google Workspace APIs (Google Calendar) to develop, improve or train generalized or non-personalized AI and/or ML models. The same applies to all other Google user data we receive. Calendar data is never sent to any AI or ML system.
- You can revoke Google access at any time from the Integrations page (Calendar, Local Services) or Reviews → Settings (Business Profile) in QuickVOC, or at myaccount.google.com/permissions. After revocation we stop syncing, and we delete the stored tokens within 30 days or sooner on request.
Instagram and Facebook Messenger (Meta) data
- When you connect an Instagram professional account (Instagram Login: instagram_business_basic, instagram_business_manage_messages) or a Facebook Page (Facebook Login for Business: pages_show_list, pages_manage_metadata, pages_messaging, business_management, and the customer's public name), we receive the direct messages people send to that account or Page, their Instagram- or Page-scoped ID, their display name, and photos they attach.
- We use this data only to run your inbox: show the conversation to your team, let the AI assistant and your team reply within Meta's messaging window, and create or update the lead for that person in your QuickVOC account. People who message you are told at the start that they are chatting with your AI assistant, and your team can take over at any time.
- We do not use Meta data for advertising or profiling, we do not sell it or share it with data brokers, and we do not use it to train AI models. We do not read or post anything else on your account or Page.
- Your Page or Instagram access token is encrypted (AES-256-GCM) and used only by our servers. Messages and photos are stored with your other CRM data in the United States.
- To stop: disconnect the channel in QuickVOC (Settings → Channels), or remove QuickVOC in Facebook (Settings → Business integrations) or Instagram (Settings → Apps and websites). We delete the access token right away and stop receiving messages. To delete the messages themselves, write to baturintech@gmail.com and we will delete them within 30 days; if you remove QuickVOC in Facebook or Instagram, Meta sends us a deletion request and you get a confirmation code to check its status.
- If you messaged a business that uses QuickVOC and want your messages deleted, contact that business, or write to us and we will help them.
How we protect information
- Encryption in transit: all connections to QuickVOC and between our services use TLS 1.2 or higher.
- Encryption at rest: your data is stored in a managed PostgreSQL database that is encrypted at rest (AES-256) by our database provider.
- Separate data for every business: row-level security is enabled on every table, so each business can only reach its own records.
- Encrypted secrets: integration keys and tokens, such as Housecall Pro API keys, Telegram bot tokens and Instagram / Facebook Page access tokens, are encrypted with AES-256-GCM before they are stored. Access tokens are used only by our servers and are never sent to your browser.
- No passwords to steal: you sign in with Google or with a one-time code sent to your email.
- Payment cards stay with Stripe, a PCI DSS Level 1 certified payment processor.
- Access control: within your account, only owners and admins can connect integrations and manage billing. Access to our production systems is limited to authorized Baturintech staff who need it.
- Monitoring and incidents: we log and monitor our systems for errors and abuse. If a security incident affects your data, we will notify you without undue delay and as required by law.
How long we keep information
- Account data: for as long as your account is active. After a paid subscription ends we keep it for 90 days so you can reactivate it; a free trial that ends without a paid plan is deleted within 30 days after the trial ends.
- Call recordings and transcripts: up to 12 months by default. You can ask us to delete them sooner.
- Leads and CRM records: while your account is active, then deleted with your account unless you ask for an export first.
- Google tokens: while the connection is active, and deleted within 30 days after you disconnect or on request.
- Instagram and Facebook Page tokens: while the connection is active; deleted as soon as you disconnect or remove QuickVOC in your Facebook or Instagram settings.
- Google Local Services lead data: up to 12 months unless you ask us to delete it sooner.
- Billing records: 7 years, as required by US tax rules.
- Online payment records: kept with your account. If your account closes, payment, refund and dispute records are kept until no payment can still be disputed (about 120 days after the last one) and any open dispute is closed, because you must be able to answer it.
Your rights and choices
- Access and copy: ask for a copy of the personal information we hold about you, including your leads and calls in CSV or JSON.
- Correction: fix information in your settings or ask us to correct it.
- Deletion: ask us to delete your account or specific information. We complete requests within 30 days, except where the law requires us to keep something.
- Disconnect integrations: remove Google, Thumbtack, Housecall Pro or Telegram at any time from the Integrations page.
- Marketing emails: unsubscribe with the link in any marketing email.
- California residents: you have the right to know, delete and correct personal information, and to opt out of its sale or sharing. We do not sell or share personal information, and we will not treat you differently for using your rights.
- To make a request, email baturintech@gmail.com with the subject "Data Request". We may need to confirm your identity first.
Health information
QuickVOC is not designed to store protected health information (PHI) under HIPAA. Healthcare businesses, such as dental offices, should collect only what is needed to schedule a visit and keep clinical details out of QuickVOC.
Children
QuickVOC is a service for businesses and is not meant for anyone under 18. We do not knowingly collect information from children.
Where data is processed
QuickVOC stores and processes data in the United States. If you use QuickVOC from outside the United States, your information will be transferred to and processed in the United States.
Changes to this policy
We may update this policy as QuickVOC changes. We will email active customers about material changes and update the effective date above. Using QuickVOC after the new effective date means you accept the updated policy.
Contact
- Baturintech LLC
- 3900 San Fernando Rd, Glendale, CA 91204, United States
- baturintech@gmail.com
Privacy requests: baturintech@gmail.com · Baturintech LLC, 3900 San Fernando Rd, Glendale, CA 91204