Privacy Policy

1. Introduction

Base Echo ("we", "our", or "us") provides AI voice agent and chatbot services. This Privacy Policy explains what information we collect, how we use it, and your choices when you use our platform, website, widgets, and related services.

2. Information We Collect

Personal Information

• Account details such as name, email, company details, and profile settings
• Authentication and session data (for example, access tokens and login metadata)
• Contact details submitted through website widgets (for example, name, email, phone)

Usage Data

• Call logs, chat sessions, transcripts, summaries, and recordings (when enabled)
• Knowledge base content and documents you upload or connect
• Integration data needed to connect third-party services (for example, OAuth tokens)
• Operational logs and service diagnostics for reliability and security

3. How We Use Your Information

• Provide and maintain our AI voice agent services
• Authenticate users, secure accounts, and prevent abuse
• Process requests such as password reset, support, and account actions
• Send service communications, including operational and security notifications
• Ensure platform security and prevent abuse
• Comply with legal obligations and enforce our terms

4. Data Sharing and Disclosure

We do not sell your personal information. We may share your information only in the following circumstances:

• With service providers that help us operate the platform (hosting, AI inference, communications, storage, and infrastructure)
• To comply with legal requirements
• To protect our rights and prevent fraud
• As part of a merger, acquisition, or business transfer (subject to applicable law)

5. Data Security

We use reasonable technical and organizational safeguards to protect your information, including controls for authentication, access management, and data transmission security. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

6. Data Retention

We retain information for as long as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. Some data can be removed when you delete related resources or request deletion.

• Authentication/session tokens and password reset tokens have technical expiration and cleanup processes
• Call logs, chat sessions, documents, and recordings are generally retained until deleted by you, your organization, or administrators
• Integration data may be retained while integrations are active and removed when disconnected, subject to operational backups

7. Cookies and Local Storage

We use browser storage and cookies for core product behavior (for example, authentication state and UI preferences). You can manage these through your browser settings; some features may not work properly if disabled.

8. Third-Party Services

Depending on features you enable, we may use third-party providers such as:

• AI and speech providers (for example OpenAI, Deepgram, Cartesia, ElevenLabs)
• Real-time communications and telephony providers (for example LiveKit, Twilio)
• Infrastructure and data providers (for example MongoDB, Qdrant, S3-compatible object storage)
• Email and calendar/integration providers (for example SMTP providers and Google APIs)

These providers have their own terms and privacy policies.

9. Your Rights

You have the right to:

• Access and update account information
• Request deletion of your data
• Object to or restrict certain processing where required by applicable law
• Receive required disclosures under applicable privacy laws

10. International Processing

Your information may be processed in countries other than your own where we or our service providers operate. We take steps designed to protect data in accordance with applicable law.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Updates become effective when posted, unless otherwise required by law.

12. Contact Us

If you have questions or requests regarding this Privacy Policy, contact: