Privacy Policy

This Privacy Policy explains how WEHOZ DBA WithConnect AI (“WithConnect AI, ” “we,” “us,” “our”) collects, uses, shares, and protects personal information. We act in two roles: (1) as a business, for our own website and account relationships; and (2) as a service provider that processes information on behalf of the businesses (“Customers”) that deploy our AI phone receptionist to their callers. Where we process information on a Customer’s behalf, that Customer’s own privacy practices and our agreement with them govern; this Policy describes our practices.

1. Information we collect

1.1 Information you provide

When you submit a demo, pricing, or contact request on our website, we collect the business contact details you provide — your name, business or firm name, industry, work email, phone number, and any message. This marketing form collects business contact information only and is not used to collect patient or client data. For Customers, we also collect account and billing contact information.

1.2 Communications data (voice & messaging)

When our Services answer calls for a Customer, we process communications data on that Customer’s behalf, which may include audio recordings of calls (where recording consent is obtained), call transcripts and summaries, caller-provided intake information, phone numbers and telephony metadata, appointment details, and interaction logs.

1.3 Automatically collected information

Like most websites, we automatically collect limited technical data such as IP address, device and browser type, pages visited, and similar analytics via cookies and similar technologies.

1.4 Information from third parties

We may receive information from our service providers, such as telephony and voice providers, calendaring and email/SMS delivery providers, analytics partners, and payment processors.

2. How we use information

• To provide, operate, maintain, and secure the Services.
• To answer and route calls, capture intake, book appointments, and send related confirmations and reminders.
• To respond to your demo, pricing, or support requests.
• To authenticate accounts and process billing.
• To detect, prevent, and address fraud, abuse, and security issues.
• To improve the Services using de-identified or aggregated data.
• To comply with legal obligations.
• With your opt-in, to send occasional product updates.

3. Call recording, AI disclosure & AI models

Our Services disclose to callers that they are speaking with an AI assistant and obtain recording consent in accordance with California law (CIPA). Importantly, we do not use protected health information, or the contents of recorded calls or transcripts, to train general-purpose or third-party AI models. Any improvement of our Services uses de-identified or aggregated data only, and only where permitted by law and our Customer agreements.

4. SMS / text messaging

Businesses that use WithConnect AImay send SMS text messages to their own patients and customers — such as appointment confirmations, reminders, and service notifications. Recipients provide consent verbally during a phone call with the business’s AI receptionist; only callers who affirmatively opt in receive texts. Message frequency varies, and message and data rates may apply. You can reply STOP to opt out at any time and HELP for assistance. Mobile phone numbers and SMS opt-in consent are never shared or sold to third parties or affiliates for their own marketing or promotional purposes. Carriers are not liable for delayed or undelivered messages.

5. How we share information

We do not sell your personal information. We share it only as needed to operate the Services:

• Service providers / sub-processors— categories include telephony & messaging, voice AI, calendaring, email delivery, hosting and database, and payments — under appropriate confidentiality and data- protection terms.
• Telecommunications carriers, as necessary to route and deliver calls and messages.
• Legal & safety — when required by law or to protect rights, safety, and security.
• Business transfers — in connection with a merger, acquisition, or sale of assets.
• At your direction or with your consent.

6. Protected health information (PHI) & BAA

For dental, medical, and other deployments expressly designated as handling PHI, we act as a Business Associate under a signed Business Associate Agreement (BAA) and handle PHI in accordance with HIPAA through the applicable vendor chain. We describe the Services as HIPAA-ready, not HIPAA-certified. For PHI, the BAA governs and controls over this Policy.

7. Retention of data

Where we act as a service provider to a Customer, the Customer determines the applicable retention period. Otherwise, we retain personal information for as long as necessary to fulfill the purposes described in this Policy or as required by law, after which it is deleted or de-identified.

8. Security of data

We maintain reasonable administrative, technical, and organizational safeguards (including encryption in transit and at rest where appropriate) designed to protect personal information. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

9. International transfers

We are based in the United States and process data there. Where data is transferred from other regions, we rely on appropriate safeguards. Telecommunications providers may also transfer data internationally in connection with routing and delivering communications.

10. Your privacy rights

Depending on where you live, you may have rights regarding your personal information:

• California (CCPA/CPRA)— to know what we collect, to access, delete, or correct it, to opt out of “sale” or “sharing” (we do not sell or share for cross-context behavioral advertising), to limit use of sensitive information, and to non-discrimination for exercising your rights.
• EEA / UK (GDPR) — to access, rectify, erase, restrict, or object to processing, to data portability, and to withdraw consent.

To exercise any right, contact us using the details below. We will respond within the timeframe required by applicable law, and you may use an authorized agent where permitted.

11. Your choices

You can update or request deletion of your account information, opt out of marketing emails via the unsubscribe link (transactional messages continue), and manage cookies through your browser. We honor Global Privacy Control (GPC) and Do Not Track signals where required.

12. Children’s privacy

Our website and Services are intended for businesses and are not directed to children. We do not knowingly collect personal information from children.

13. Changes to this Privacy Policy

We may update this Policy from time to time. Material changes will be reflected by an updated “last updated” date, and your continued use of the Services after changes take effect constitutes acceptance.

14. Contact

Questions or requests about this Policy? Contact us at hello@withconnect.ai or through our contact form.