Privacy Policy

1. Who we are

KlevaDesk is operated by KlevaCore LLC ("KlevaDesk," "we," "us," "our"). KlevaDesk is an AI voice and text receptionist service for small, appointment-driven businesses. This policy explains how we collect, use, store, and protect data associated with the KlevaDesk service, the klevadesk.com website, and the phone numbers operated by KlevaDesk.

Questions: privacy@klevadesk.com.

2. Who this policy covers

This policy applies to three groups of people:

• Partner business owners and staff who use the KlevaDesk admin application to manage their AI receptionist.
• Customers and prospects of partner businesses who interact with a KlevaDesk-operated phone number by voice or SMS.
• Visitors to klevadesk.com.

3. Information we collect

From partner business accounts

• Name, email address, business name, and contact details provided at signup.
• Business profile data the owner configures: services, hours, pricing, booking rules, AI agent tone and knowledge.
• Integration credentials the owner connects (e.g., Vagaro booking software).
• Billing information processed by our payment provider; we do not store full payment card numbers.

From customers contacting a KlevaDesk-operated number

• Mobile phone number — captured automatically when you call or text a KlevaDesk-operated number.
• SMS opt-in record — when you opt into messages by texting first or by giving verbal consent during a call, we store the fact, method, and timestamp of that consent.
• Conversation content — the text of SMS messages exchanged and a transcript of voice calls, used to operate the AI agent, hand booking intent to the business owner, and improve service quality.
• Voice call recordings — calls answered by KlevaDesk may be recorded for transcription and quality assurance.
• Caller name, address, appointment-related preferences, and similar information you choose to share during a conversation.

From visitors to klevadesk.com

• Standard server log information (IP address, browser, page requested, timestamp) used to operate and secure the website.
• We do not use advertising or tracking cookies on klevadesk.com.

4. How we use information

• To operate the KlevaDesk voice and SMS receptionist on behalf of the partner business you contacted.
• To send the partner business owner a notification of your booking intent or question.
• To send you the specific information you requested (booking link, hours, pricing, confirmation).
• To honour STOP and HELP keywords and maintain opt-out records.
• To improve the quality and accuracy of the AI agent.
• To bill partner businesses, secure the service, and meet legal obligations.

5. Mobile opt-in data — explicit commitments

The following commitments apply specifically to mobile phone numbers and SMS opt-in data collected from people who contact KlevaDesk-operated numbers:

• We do not sell, rent, or share mobile phone numbers or SMS opt-in information with third parties for marketing, promotional, or unrelated purposes.
• We do not use mobile opt-in data to build advertising or marketing lists.
• Mobile opt-in data is used only to operate the messaging program described on the SMS Program page — i.e., to reply to conversations you initiated and to send information you explicitly requested.
• Verbal-consent recordings and the associated opt-in logs are retained for the period required to demonstrate compliance with the TCPA and applicable carrier requirements, and are not repurposed for any other use.
• Opt-out requests (STOP keywords) are honoured immediately and across all KlevaDesk-operated numbers for that mobile number.

6. How we share information

We share information only as needed to operate the service:

• Partner business owners receive the conversations and booking intents addressed to their business. If you contact a number used by Oh My Nails!, the content of that conversation is visible to the owner of Oh My Nails!.
• Sub-processors we use to operate the service: cloud hosting providers, the Twilio communications platform (voice + SMS transport), LLM providers (Anthropic and Google for text and voice generation), Vagaro (when the partner business has chosen to connect Vagaro), and email/transactional service providers. Each is bound by a data-processing agreement.
• Legal disclosures when required by law, valid legal process, or to protect rights, safety, or property.

We do not share information for advertising. We do not allow our sub-processors to use your data for their own marketing.

7. Data retention

We retain conversation transcripts, call recordings, and opt-in records for as long as necessary to operate the service, support the partner business, and meet legal or carrier compliance requirements. Partner-business account data is retained while the account is active and deleted within a reasonable period after account closure, subject to legal retention requirements (typically up to seven years for billing records).

8. Security

We protect information using industry-standard practices, including encrypted connections (HTTPS/TLS), hashed credentials, role-based access controls, and infrastructure isolation per partner business. No system is perfectly secure; if you believe your data has been accessed inappropriately, please contact us immediately.

9. Your rights

Depending on where you live, you may have rights to access, correct, delete, port, restrict, or object to processing of your personal data. To exercise any of these rights, email privacy@klevadesk.com. We will respond within 30 days. Identity verification may be required.

You may opt out of SMS at any time by replying STOP (or any of the equivalent keywords listed on the SMS Program page) to any message from a KlevaDesk-operated number.

10. Children

KlevaDesk is not directed to children under 13 (or under 16 in the EU). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can remove it.

11. International data transfers

KlevaDesk is operated from the United States. If you are located outside the United States, by using the service you understand and agree that your information may be transferred to and processed in the United States and other countries where our sub-processors operate.

12. Changes to this policy

If we make material changes to this policy, we will update the "last updated" date at the top of this page and, where appropriate, notify partner businesses by email. Continued use of KlevaDesk after changes take effect constitutes acceptance of the revised policy.

13. Contact

KlevaCore LLC — San Antonio, TX. See the contact page for full address and other contact channels.

Privacy questions: privacy@klevadesk.com.