Privacy Policy
Last updated: September 30, 2026
Limited Use Compliance Statement
The use of raw or derived user data received from Workspace APIs will adhere to the Google User Data Policy, including the Limited Use requirements.
Sonovi uses Google Workspace API data only to provide and operate appointment booking. We do not use this data for advertising, credit or lending decisions, or any purpose other than providing or improving the user-facing booking feature. We do not sell Google user data. We do not transfer Google user data to third parties except as needed to operate that booking feature (for example, secure cloud hosting, or returning a live booking result to the voice feature so that call can be completed) or if required by law.
We do not train on your data
Sonovi does not use customer data, caller audio, transcripts, intake information, case information, or integration data to train generalized AI models.
Sonovi's subprocessors may process this information only to provide the contracted service and may not use it for generalized model training.
Google User Data Access
When you connect Google Calendar, Sonovi accesses only the Google user data required to book appointments. We access the following raw data. We do not create aggregated or anonymized datasets from Google user data.
Google Account email and public profile:
We read your primary Google Account email address and basic public profile (name and profile picture) only to identify the connected account, show which Google account is linked, and complete OAuth authentication. This data is not used for advertising or unrelated personalization.
Calendar free/busy availability:
We read busy/free time windows so we can show open appointment slots and avoid double-booking. We do not use this scope to read event titles, descriptions, attendees, or other event details.
Calendar events:
We create, update, or cancel appointment events that were booked through Sonovi. We may list events in a requested time window only to confirm whether that slot is free. We do not read unrelated calendars for marketing, do not share calendars, and do not delete calendars.
Information We Collect from Users
We collect the following information to operate Sonovi accounts, phone intake, and appointment booking:
- Names
- Email addresses
- Phone numbers
- Call recordings, only when the customer turns recording on, and transcripts, only until structured intake is extracted or for a short period the customer sets
- Intake and case-related information
- Website activity
- IP addresses
How We Collect Information
We collect information through the following methods:
- Contact forms on our website
- Phone calls
- Integrations you connect (including Google Calendar)
- Cookies (as detailed below)
- Website analytics on the public marketing site only (not Google Workspace API data)
Why We Collect Information
We collect your information for the following purposes:
- To create and manage your account
- To provide AI phone intake, call handling, and scheduling services for law firms
Customer data, caller audio, transcripts, intake information, case information, and integration data may be used only to operate the features you contract for. Sonovi does not use that data to train generalized AI models. Google Workspace API data is never used to improve unrelated products, train models, personalize marketing, or run advertising.
Use of Google Workspace APIs
Data obtained through Google Workspace APIs is used only to check calendar availability and to create, update, or cancel appointment events booked in Sonovi. That is the only user-facing feature that uses this data.
Sonovi does not use raw, aggregated, anonymized, or derived Google Workspace API data to develop, improve, or train generalized AI or ML models. We do not transfer this data to third-party AI services for model training.
Google OAuth tokens and raw Calendar payloads stay on Sonovi servers. Voice or language models used by Sonovi do not receive raw Google Calendar contents. For a live phone or web booking, the voice feature may receive only the result needed to finish that call (for example, that a requested time is available or that the appointment was booked). That result is used only to complete the user-facing booking and is not used to train or improve models.
Data Sharing, Transfer, and Disclosure
We do not sell Google user data or any other personal data. We do not share Google user data with advertisers, data brokers, analytics providers, or marketing platforms.
Google user data:
OAuth tokens and raw Google Calendar payloads stay on Sonovi servers to operate appointment booking. They are not sent to advertisers, data brokers, analytics providers, or marketing platforms. For a live booking call, the voice feature may receive only the booking result (available or booked) so that call can be completed. That result is not used for advertising or model training. Google user data may also be stored on our secure cloud hosting provider solely to run the booking feature. We disclose this data only if legally required.
Other Sonovi data (not Google Workspace API data):
Account, call, intake, case, and integration data that you provide in Sonovi may be processed by subprocessors we use to deliver the product, such as cloud hosting, telephony, and email delivery. Those subprocessors may process this information only to provide the contracted service and may not use it for generalized model training. Those providers are not given Google Workspace API data.
Legal Requirements:
We may disclose personal data if required by law or to comply with legal obligations.
How and Where We Store Data
We store user data on secure, encrypted servers managed by trusted third-party service providers. These providers follow industry-standard security practices to keep your information safe. Generally, we do not transfer or store data outside of Canada and the USA.
Data Protection Mechanisms for Sensitive Data
We take the following measures to protect your personal data:
Encryption:
All data is encrypted both in transit (using HTTPS) and at rest to prevent unauthorized access.
Access Controls:
Only authorized personnel with a legitimate need can access personal data.
Regular Security Audits:
We conduct periodic security audits and vulnerability assessments to maintain data safety.
Data Retention and Deletion
Sonovi keeps personal information only for the purpose it was collected, and only for as long as that purpose requires. Recordings, transcripts, structured intake, and technical logs are kept on separate clocks. Sonovi does not keep call recordings or transcripts for the life of the account.
Call recordings:
Call recording is off unless the customer turns it on. When recording is on, the customer sets a short retention period. Sonovi deletes the recording when that period ends.
Transcripts:
Sonovi uses a transcript to extract structured intake, then deletes the transcript. If the customer chooses to keep transcripts, they are kept only for a short period the customer sets, then deleted.
Structured intake:
Structured intake and case information are kept for the business retention period the customer configures. Sonovi does not keep this information longer than that period, except where the law requires a longer hold.
Technical logs:
Security and debugging logs are kept separately from customer content, and only for a short period needed to operate and secure the service.
Deletion:
The customer can delete an individual call or an individual client. When the account ends, Sonovi deletes the customer's remaining calls, clients, recordings, transcripts, and intake information. A customer may also ask us to delete their data, and we will delete it from our systems within 30 days.
Google User Data:
OAuth tokens and Google Workspace API data are kept only while the Google Calendar connection is active and needed to book or manage appointments. When you disconnect Google Calendar or request deletion, we delete stored Google tokens and related Google user data from our systems within 30 days, except where a shorter legal hold is required.
User Rights
Customers can access and update their account data, their clients' data, and their call data by logging into their account. They can delete an individual call or an individual client. Remaining customer data is deleted when the account ends.
Children's Privacy
We do not target or knowingly collect information from children under 13 years of age.
Which Privacy Laws We Follow
We comply with applicable privacy laws in Canada and the USA.
Contact Us
If you have any questions or concerns about our privacy practices, please contact us at support@sonovi.co.
An AI frontline employee that answers, qualifies, routes, and organizes every new legal inquiry.
Company
Affiliates
© 2026 Sonovi AI. All rights reserved