Privacy Policy

Last Updated: 4th June, 2026

1. Introduction

Welcome to Babelbeez! This Privacy Policy explains how Babelbeez ("Babelbeez," "we," "us," or "our") collects, uses, shares, and protects information about users ("you," "your") of our website (www.babelbeez.com), platform, and related services (collectively, the "Service").

This Privacy Policy should be read in conjunction with our Terms of Service. By accessing or using our Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the Service.

2. Information We Collect

We collect different types of information to provide and improve our Service to you. This includes:

Personal Information You Provide:

• Account Information: When you register for an Account, we collect your email address. You may optionally choose to provide your name and company name.

• Configuration Data: Information you provide when configuring your voice agents, such as system instructions or domain restrictions.

• RAG Data Source: The URLs you provide for the Retrieval-Augmented Generation (RAG) feature.

• Integration Credentials: We may collect and store credentials and connection details that you provide to enable integrations, such as API keys, OAuth tokens, refresh tokens, secret headers, webhook secrets, and configuration for services like Make, Zapier, and custom MCP servers. These credentials are encrypted at rest and are used only as necessary to fulfill user-directed requests and maintain the integrations you enable.

• Communications and Email Preferences: If you contact us directly (e.g., for support), we may receive additional information about you such as your name, email address, the contents of the message and/or attachments you may send us, and any other information you may choose to provide. When you create an account, we may also add your email address to our internal mailing lists so that we can send onboarding guidance, product updates, service announcements, and other communications related to Babelbeez and your use of the Service. You can opt out of non-essential email communications at any time by using the unsubscribe link in our emails or by contacting us. We do not use your email address to send you third-party marketing, nor do we sell your email address to third parties for their own marketing.

Information Collected Automatically:

• Usage Data: We collect information about how you access and use the Service. This includes usage logs detailing activities within your account, voice agent usage metrics (like session duration, status, timestamps), feature usage, and interaction patterns. This data is used for billing, analytics, and improving the Service.

• Device and Connection Information: We may collect your IP address, primarily to establish necessary network connections (like WebRTC for real-time voice). We may also collect general information about your device type, operating system, and browser type for service compatibility and improvement purposes.

• Cookies, Google Tag Manager, Google Analytics, and Similar Technologies: Our public website uses Google Tag Manager (GTM) to manage tracking technologies, including cookies used by Google Analytics and our consent management platform, CookieYes. When you visit our public website, these tools may collect information about your browsing activity, device, and interaction with our website. This includes information such as your IP address (which may be anonymized by Google Analytics), browser type, pages visited, time spent on pages, and links clicked. This data helps us understand website performance, improve user experience, and manage user consent preferences for analytics and other services in compliance with privacy regulations. CookieYes is integrated with our public website analytics setup to help control Google Analytics and other tracking tags based on your consent choices. For more details on our use of cookies, local storage, and how to manage your preferences, please see our Cookie & Local Storage Policy section below.

• Product Analytics (PostHog): We use PostHog, a product analytics platform, as part of operating and improving the authenticated Service. PostHog helps us understand how logged-in users interact with the dashboard, including events such as features used, buttons clicked, page views, app errors, and general usage patterns within the application. We may associate this data with your user ID and email address so we can understand user journeys, troubleshoot issues, improve onboarding, and enhance the product experience. PostHog also supports first-touch attribution, such as UTM parameters, landing path, and referrer, where available.

Information Processed on Your Behalf:

• RAG Data Content: When you use the RAG feature, we scrape and store the content from the URLs you provide. This data is stored securely and used solely to provide the RAG functionality for your specific voice agents.

• Chat Interaction Data: We store metadata associated with chat interactions (e.g., start time, end time, duration, status). Additionally, to improve our Service and provide support, we generate and store summaries of chat conversations. These summaries capture key aspects of the interaction but are not full transcripts.

3. How We Collect Information

We use various methods to collect information:

• Directly from You: When you register for an account, configure voice agents, provide URLs for RAG, or communicate with us.

• Automatically Through Your Use of the Service: When you navigate the website, interact with the dashboard, or when your voice agents are used, we automatically log usage data and may collect device/connection information.

• Through Third Parties: We utilize third-party services for specific functions, and they may collect information as described in their own privacy policies (see Section 5).

4. How We Use Information

We use the information we collect for various purposes, including:

• To Provide and Maintain the Service: To create and manage your account, enable voice agent creation and configuration, provide RAG functionality, process real-time voice interactions, and ensure the overall operation of the Service.

• To Process Transactions: To manage subscriptions, calculate usage, and process payments through our third-party payment processor (Paddle).

• To Communicate with You: To respond to your inquiries, provide customer support, send service-related announcements, onboarding and educational materials, product updates, security alerts, and other administrative or account-related messages. When you sign up, we may add you to internal mailing lists for these types of communications. You can opt out of non-essential email communications (such as certain product updates or educational content) at any time by using the unsubscribe link included in our emails or by contacting us. We do not send you third-party marketing communications on behalf of other companies.

• To Monitor and Analyze Usage: To track service usage for billing purposes, understand how users interact with the Service, gather analytics to improve features and performance, and monitor the effectiveness of the platform.

• To Improve and Personalize the Service: To understand user preferences, troubleshoot issues, develop new features, analyze chat conversation summaries to enhance service quality and AI performance, and enhance the user experience.

• For Security and Fraud Prevention: To monitor for suspicious activity, prevent fraudulent use of the Service, protect the security of our platform and users, and enforce our terms.

• To Comply with Legal Obligations: To comply with applicable laws, regulations, legal processes, or governmental requests.

• To Enforce Our Terms: To enforce our Terms of Service and other policies.

• To Understand and Improve Our Public Website (including through Google Analytics via Google Tag Manager): To analyze trends, administer the public website, track users' movements around the website, and gather demographic information about our user base as a whole using tools like Google Analytics (managed via Google Tag Manager). This processing is subject to your consent choices where required, which are managed via our consent management platform (CookieYes) and affect how Google Analytics collects and processes data in accordance with Google Consent Mode.

• To Improve Our Product Using Product Analytics (PostHog): We use data collected by PostHog within the authenticated Service to understand how Babelbeez is used, identify areas for improvement, troubleshoot errors, enhance features, and optimize user workflows. This helps us make Babelbeez more effective, reliable, and user-friendly.

5. How We Share Information

We do not sell your personal information. We may share your information in the following circumstances:

With Service Providers: We share information with third-party vendors and service providers who perform services on our behalf. These include:

• Payment Processing: Paddle handles our payment processing and subscription management. We share necessary billing information with them, but we do not store your full payment card details.

• AI Processing: OpenAI processes the voice interactions and generates voice agent responses. Information necessary for this processing is shared with OpenAI.

• Cloud Hosting and Infrastructure: Supabase provides database storage (including user accounts, configurations, RAG data), authentication, and backend infrastructure.

• Email Delivery and Communications: We use Loops, a third-party email service provider, to send emails related to the Service, such as onboarding emails, product updates, service announcements, and other account or usage-related communications. We share your email address and, where applicable, your name and basic account or usage context (for example, information about your plan or feature usage) as needed to deliver and personalize these communications. Loops acts as our data processor and is contractually obligated to protect your information and use it only to provide email services to us.

• Product Analytics: PostHog provides product analytics services for the authenticated Service. Your interaction data (as described in Section 2) is shared with PostHog for processing on our behalf so we can operate, troubleshoot, secure, and improve Babelbeez. PostHog is contractually obligated to protect your data and use it only to provide services to us.

These service providers are authorized to use your personal information only as necessary to provide these services to us and are obligated to protect your information.

For Legal Reasons: We may disclose your information if required to do so by law or in the good faith belief that such action is necessary to: (a) comply with a legal obligation, (b) protect and defend the rights or property of Babelbeez, (c) prevent or investigate possible wrongdoing in connection with the Service, (d) protect the personal safety of users of the Service or the public, or (e) protect against legal liability.

Business Transfers: If Babelbeez is involved in a merger, acquisition, financing due diligence, reorganization, bankruptcy, receivership, sale of company assets, or transition of service to another provider, your information may be sold or transferred as part of such a transaction, as permitted by law and/or contract. We will notify you via email and/or a prominent notice on our Service of any change in ownership or uses of your personal information, as well as any choices you may have regarding your personal information.

With Your Consent: We may share your information with third parties when we have your explicit consent to do so.

User-Initiated Integrations & Egress: When you enable an app (for example, Calendly) or a webhook or automation destination (for example, Make, Zapier, custom webhook endpoints, or MCP servers), you are directing Babelbeez to share conversation data with that specific third party. This may include personal information such as names, email addresses, phone numbers, extracted fields, and other context submitted by you or your end users during a conversation. Babelbeez does not control how those third parties use, store, secure, or otherwise process data once it has been transmitted at your direction.

Conversation Summaries and Tool Payloads: As part of tool-calling, webhook delivery, MCP execution, or other user-initiated integrations, we may send conversation summaries, extracted values, and related contextual payloads to the endpoints you configure. These summaries and payloads may contain personal information or sensitive context depending on what you or your end users choose to share during the conversation.

6. Legal Basis for Processing Personal Information (GDPR)

If you are located in the European Economic Area (EEA), Switzerland, or the United Kingdom (UK), our legal basis for collecting and using the personal information described above will depend on the personal information concerned and the specific context in which we collect it.

However, we will normally collect personal information from you only where:

• We need the personal information to perform a contract with you (e.g., to provide the Service you requested, process your subscription payments). This applies to processing Account Information, Usage Data for billing, Configuration Data, and RAG Data necessary for service delivery.

• The processing is in our legitimate interests and not overridden by your data protection interests or fundamental rights and freedoms (e.g., for analytics, service improvement, security monitoring, communication about the service, enforcing our terms). This applies to processing Usage Data for analytics/improvement, Device/Connection Information, and Communications data. This may include using your email address to send onboarding guidance, product updates, and other communications related to the Service, which you can opt out of at any time for non-essential emails.

• We have your consent to do so (e.g., for optional data fields, or specific marketing communications if implemented).

In some cases, we may also have a legal obligation to collect personal information from you or may otherwise need the personal information to protect your vital interests or those of another person.

If you have questions about or need further information concerning the legal basis on which we collect and use your personal information, please contact us using the details provided below.

7. Data Security

We take the security of your information seriously and implement reasonable administrative, technical, and physical security measures designed to protect your personal information from unauthorized access, use, alteration, and disclosure. These measures include secure storage practices for RAG data and limiting access to personal information.

However, please be aware that no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security. You are also responsible for maintaining the security of your account credentials.

8. Data Retention

We will retain your personal information only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your information to the extent necessary to provide the Service, comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws, resolve disputes, and enforce our legal agreements and policies), maintain accurate financial and other records, and for legitimate business interests like service improvement and analysis.

We retain your personal information, including account details, configuration data, RAG data, and chat conversation summaries, for as long as your account is active or as needed to provide you with the Service. This information is also kept for a reasonable period thereafter in case you decide to re-activate the Service, for our legitimate business purposes such as service improvement, or to comply with legal obligations. Usage history (metadata such as session duration, timestamps, and status – which does not include conversation content or summaries) is retained for longer periods, primarily for billing accuracy and aggregated analytics. Upon account deletion, or when there is no ongoing legitimate business need or legal requirement, your personal information (including chat summaries and RAG data) will be deleted or anonymized. If immediate deletion is not possible (e.g., due to backup archives), we will securely store it and isolate it from further processing until deletion can be performed.

When we have no ongoing legitimate business need or legal requirement to process your personal information, we will either delete or anonymize it, or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.

You can request the deletion of your account and associated personal data by contacting us.

9. Your Data Rights

Depending on your location and applicable data protection laws (such as GDPR in the EEA/UK or CCPA in California), you may have certain rights regarding your personal information. These rights may include:

You can also manage public website cookie preferences, including those related to Google Analytics managed via Google Tag Manager, at any time through the cookie settings banner or the "Cookie Settings" link provided in our Cookie & Local Storage Policy section below. Some storage used by the authenticated Service, including authentication, billing, dashboard preferences, and product analytics storage, is necessary for operating, securing, troubleshooting, and improving the Service and cannot be disabled through the public website cookie banner without affecting Service functionality.

• Right to Access: You may have the right to request access to the personal information we hold about you.

• Right to Rectification: You may have the right to request correction of inaccurate personal information we hold about you.

• Right to Erasure (Deletion): You may have the right to request the deletion of your personal information under certain conditions.

• Right to Restrict Processing: You may have the right to request that we restrict the processing of your personal information under certain conditions.

• Right to Data Portability: You may have the right to receive your personal information in a structured, commonly used, and machine-readable format and to transmit that data to another controller under certain conditions.

• Right to Object: You may have the right to object to the processing of your personal information under certain conditions, particularly where we rely on legitimate interests as our legal basis.

• Right to Withdraw Consent: If we rely on your consent to process your personal information, you have the right to withdraw that consent at any time. Withdrawing consent will not affect the lawfulness of processing based on consent before its withdrawal.

• Right to Non-Discrimination: You have the right not to be discriminated against for exercising your privacy rights.

• Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority if you believe our processing of your personal information violates applicable law.

You can also object at any time to our use of your personal information for non-essential email communications (such as certain product updates or educational/onboarding content) by using the unsubscribe link included in those emails or by contacting us. Even if you opt out of non-essential communications, we may still send you important service or security-related emails that are necessary for the operation of your account.

To exercise any of these rights, please contact us using the contact details provided in Section 14. We will respond to your request in accordance with applicable data protection laws. We may need to verify your identity before processing your request.

10. Cookie & Local Storage Policy

What are cookies and local storage?

To make Babelbeez function securely and effectively, we use cookies (small text files downloaded to your browser) and Web Storage technologies such as localStorage and sessionStorage. Privacy regulations may treat local web storage similarly to cookies when used to store or access information on your device.

We do not use cookies or local storage to track you across the internet for targeted advertising, and we do not sell this data. We use these technologies to keep you logged in, operate the dashboard, process subscriptions, remember preferences, secure and troubleshoot the Service, and understand how Babelbeez is used so we can improve it.

Some technologies are strictly necessary for the Service to work. For example, disabling browser storage may prevent you from staying signed in, completing checkout, using OAuth redirects correctly, or retaining dashboard preferences.

Technologies we use

Category	Technology	Storage Method	Actual Purpose
Strictly Necessary	Supabase Auth	localStorage	Handles active dashboard sessions and authentication tokens. This keeps you securely logged into the Babelbeez dashboard without needing to re-enter your password on every page refresh.
Functional / Service Operation	Babelbeez Dashboard	localStorage / sessionStorage	Remembers dashboard state such as selected agent, sidebar/UI preferences, and safe OAuth redirect targets.
Functional / Service Operation	Loops Sync Guard	localStorage	Helps prevent repeated account/email-service sync attempts in short periods after login.
Payments / Strictly Necessary	Paddle	Cookies and similar browser storage	Facilitates secure subscription checkouts, customer portal access, subscription changes, add-on purchases, and localized price previews.
Consent Management	CookieYes	Cookies	Remembers your public website cookie and tracking preferences so you are not asked every time you visit.
Public Website Analytics	Google Tag Manager / Google Analytics	Cookies	Measures public website traffic and performance where permitted by your consent choices and Google Consent Mode.
Service / Product Analytics	PostHog	localStorage / cookies	Product analytics for the authenticated Service, including dashboard pageviews, feature usage, app error telemetry, user journey analysis, and first-touch attribution such as UTM parameters, landing path, and referrer.

11. International Data Transfers

Your information, including personal data, may be transferred to — and maintained on — computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those in your jurisdiction.

Specifically, as we utilize global service providers like OpenAI, Supabase, and PostHog (for product analytics, hosted in the United States via PostHog Cloud US), your data may be processed in countries outside of the EEA, UK, Switzerland, such as the United States.

We will take appropriate steps to ensure that your personal data is treated securely and in accordance with this Privacy Policy and applicable law. Where required by law (e.g., for transfers out of the EEA/UK), this may include implementing safeguards such as Standard Contractual Clauses (SCCs) approved by relevant authorities or relying on the service provider's Binding Corporate Rules or other legally recognized transfer mechanisms. Our use of PostHog for authenticated Service analytics is part of operating, securing, troubleshooting, and improving Babelbeez as described in this Privacy Policy. By using the Service and submitting your information, you acknowledge that your information may be transferred and processed as described in this section, provided appropriate safeguards are in place.

12. Children's Privacy

Our Service is not intended for use by children under the age of 16 (or the relevant minimum age threshold in your jurisdiction, e.g., 13 in some regions). We do not knowingly collect personally identifiable information from children under this age. If you are a parent or guardian and you are aware that your child has provided us with personal information without your consent, please contact us. If we become aware that we have collected personal information from a child without verification of parental consent, we will take steps to remove that information from our servers.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the top. If the changes are material, we will provide a more prominent notice, which may include sending a notification via the email address associated with your Account or through the Service interface, prior to the change becoming effective. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page. Your continued use of the Service after the effective date of the revised policy constitutes your acceptance of the changes.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please visit our Contact Us page.