This policy explains what personal data Crewbot collects, why, who processes it, and the choices you have. Crewbot is part of Golden Honey and is run by LEEPO AI (OPC) PRIVATE LIMITED ("we", "us"), Haryana, India.
Summary
- We collect only what Crewbot needs to answer your calls: your account and business details, the calls it takes for you, and basic usage data.
- Before anything else, every caller hears that they are talking to an AI assistant and that the call is recorded and shared with service providers. We keep a written transcript and summary of each call, never the audio.
- We do not sell your data, we do not use it for advertising, and we do not use calls to train AI models.
- Payments are handled by Dodo Payments, our Merchant of Record. We never see your card number.
- You can export or delete your data at any time from Settings.
Who is responsible
LEEPO AI (OPC) PRIVATE LIMITED is the data fiduciary (controller) for Crewbot. For privacy questions, requests or complaints, contact Manish Kalyan at privacy@goldenhoney.dev. We reply within 2 business days.
What we collect and why
| Data | Why we need it | Legal basis |
|---|---|---|
| Email address and name | To create your account, sign you in and send service emails | Performance of our contract with you |
| Sign-in data (Google profile basics, session cookies) | To keep you signed in securely | Performance of contract |
| Business details: name, trade, website, hours, services, service area, price notes, emergency words, on-call number, carrier, time zone, working hours and job length | To set up your receptionist and tell callers the right facts | Performance of contract |
| Calendar links: your private calendar feed (we store only a fingerprint of its secret address) and, if you add one, your busy-times calendar address (stored encrypted) | To offer callers open slots and show booked jobs in your calendar | Performance of contract |
| Calls and bookings Crewbot takes for you (see "People who call your business") | To answer your calls, book jobs and email you about every call | Performance of contract |
| Plan, billing status and usage (answered calls and call minutes each month; no card details) | To show your usage meter and give you the plan you paid for | Performance of contract |
| Messages you send us (contact form, feedback, help chat) | To answer you and improve the app | Legitimate interest, or your consent |
| Usage analytics (pages viewed, features used, errors) | To find bugs and see what is useful | Legitimate interest |
We do not knowingly collect sensitive personal data, and the app is not meant for children. You must be 18 or older to use it.
People who call your business
When someone calls a business that uses Crewbot, that business decides how the caller's data is used. We process it on the business's behalf and only on its instructions, as its processor (or service provider).
- What we collect from a call: the caller's phone number, the name, callback number and address they give, what the problem is, whether it is urgent, any job time booked, a written transcript and a summary written by AI.
- What we don't keep: call audio. Neither we nor ElevenLabs store recordings of the call's sound.
- Why: to answer the call, book the job or put an emergency through to the business, and to email the business a summary.
- How long: until the business deletes the call or its account. ElevenLabs deletes its copy of each transcript after 30 days.
- Callers' requests: if you called a business and want your data seen, corrected or deleted, ask the business first. You can also write to privacy@goldenhoney.dev with the business's name and the date of your call, and we will help the business answer you.
Analytics and cookies
We use PostHog in cookieless mode: it does not store cookies or other identifiers on your device. Visits are counted with a hash of your IP address and browser details that changes every day. We do use strictly necessary cookies to keep you signed in. We do not use advertising or tracking cookies.
Who processes your data
We use these service providers. Each processes data only to provide its service to us.
| Provider | What it does | Data involved |
|---|---|---|
| Supabase | Database and sign-in, in the United States (AWS us-east-1) | Account data, business details, calls and bookings |
| Cloudflare | Hosting | Request data such as IP address |
| ElevenLabs | Runs the voice receptionist and writes the transcript and summary | The call as it happens, your business details, the transcript and the details callers give. No audio kept; transcripts deleted after 30 days |
| The AI model providers ElevenLabs uses | Understand callers and choose what the receptionist says | The conversation as it happens |
| Twilio | Your Crewbot phone number and call routing | Callers' phone numbers, call times and lengths. The call's sound passes through and is not recorded |
| Dodo Payments | Checkout, tax, invoices (Merchant of Record) | Billing details, purchase history |
| Resend | Sending emails, including your call summaries | Email address, email content (call summaries include the caller's details) |
| PostHog | Product analytics and error tracking | Usage events, error reports |
| OpenRouter and the AI model provider it routes to | Answering help chat questions, and drafting your setup from your website when you ask | The questions you type; the public text of the website address you give |
Some providers process data outside India, including in the United States and the European Union. Where required, we rely on contractual safeguards for these transfers. We have switched off ElevenLabs' setting that lets it use customer data to improve its models.
How long we keep data
- Account data and content: while your account exists. When you delete your account or an app's data, we delete it from our database right away and from our backups within 30 days, and we email you a confirmation.
- Calls and bookings: until you delete them or your account. Deleting your data or account also deletes your receptionist at ElevenLabs and releases your Crewbot phone number. ElevenLabs deletes each transcript after 30 days in any case and keeps no audio. Twilio keeps its own call records (numbers, times and lengths) under its privacy policy.
- Messages to support: up to 2 years, so we can follow up on issues.
- Records we must keep by law (for example processing logs, and transaction records held by Dodo Payments): for the period the law requires, at least one year.
Your rights
Depending on where you live, including under India's Digital Personal Data Protection Act and the EU GDPR, you can:
- get a copy of your data (Settings > Your data > Export my data),
- correct it (Settings > Profile, or write to us),
- delete it (Settings > Delete, or write to us),
- withdraw consent where we rely on it, as easily as you gave it,
- object to processing based on legitimate interest,
- nominate another person to exercise your rights if you cannot,
- complain to us first at privacy@goldenhoney.dev, and then to the Data Protection Board of India or your local data protection authority.
We respond to requests within 30 days at the latest.
Security
Data is encrypted in transit (HTTPS) and at rest by our providers. Access is limited by row-level security in the database, so each account can read only its own data. If a personal data breach affects you, we will tell you and the authorities as the law requires.
Changes
If we change this policy in a way that matters, we will update the date above and tell signed-in users by email or in the app before the change takes effect.
Contact
LEEPO AI (OPC) PRIVATE LIMITED, Haryana, India. CIN: U62011HR2025OPC137358
Grievance officer: Manish Kalyan, Director, grievance@goldenhoney.dev. We acknowledge complaints within 48 hours and resolve them within one month; complaints about your personal data within 90 days at the latest.