Privacy policy

What we collect

• Google sign-in: to confirm that you have a Google account, we receive your account's unique identifier, name, email address, profile picture and whether the email is verified.

• Conversations: what you say or type to the assistant, including voice audio while it is processed, transcripts, and the case or ticket created from the conversation.

• Demo requests: the business contact details you choose to send us.

• Technical data: IP address, browser and device details, and service logs, which we use to run and protect the service.

How we use it

• To sign you in, and to stop automated or unauthorised use of the assistant.

• To run conversations, answer questions and create the cases or tickets you ask for.

• To respond to demo requests and support messages.

• To keep the service secure, reliable and within usage limits, and to improve its quality.

Google user data

We use Google sign-in to confirm that you have a Google account. We verify the token from Google and keep a session in a secure cookie for up to 7 days.

After you sign in, we ask whether you agree to share your Google name, profile picture and email address. If you agree, we use them to show who is signed in, fill in your profile in the app, and confirm how the clinic can reach you. Until you agree, and if you say no, we do not use them and the assistant still works.

While you are signed in, these details stay encrypted inside your session cookie. You can stop sharing at any time with the Stop sharing button, which removes them from the session. We keep a record of each choice you make and when, tied to an identifier derived from your Google account, which contains no name or email address.

We do not sell Google user data, use it for advertising, or use it to train AI models. Our use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

Cookies

When you sign in, we set one essential cookie that keeps you signed in for up to 8 hours. Page scripts cannot read it, and it is sent only over secure connections. We do not use advertising cookies.

Who processes data for us

We share data only with service providers that help us run ResoDesk, and only as needed for the service:

• Google Cloud and Amazon Web Services: hosting.

• Google: sign-in.

• LiveKit: real-time voice and chat connections.

• Deepgram, OpenAI and Cerebras: speech and AI processing of conversations.

• Supabase and Pinecone: data storage and document search.

• Langfuse: quality and performance monitoring.

We do not sell personal data

We do not sell personal data. We may disclose it if the law requires us to.

Where data is stored and for how long

Our services run mainly in the United States, so your data may be processed outside your country. We keep personal data only for as long as we need it for the purposes above, or as the law requires.

Security

We use encrypted connections, access controls and logs that are redacted to remove personal data. No online service is completely secure, so we cannot guarantee absolute security.

Your rights

Depending on where you live, including under India's Digital Personal Data Protection Act, 2023, you may ask to access, correct or erase your personal data, withdraw consent, or raise a grievance. Email hello@resodesk.com. You can also remove ResoDesk's access in your Google Account settings.

Children

ResoDesk is not intended for anyone under 18.

Changes to this policy

We will post any changes here and update the date at the top of this page.

Contact

Questions or requests: hello@resodesk.com. Post: ResoDesk, Unit 202, Unitech Cyber Park, Sector 39, Gurgaon, Haryana, India.