Privacy Policy

Account data: Your name, email address, and profile information when you sign up.

Agent data: The bio, rules, pricing, assets, and voice settings you configure for your assistant.

Conversation data: Messages between your assistant and visitors, stored so you can review them in your inbox.

Calendar data: When you connect Google Calendar, we access your availability and create booking events on your behalf. We request only the permissions needed and never read unrelated calendar events.

Gmail send access: When you connect Google, we can send booking confirmations and reminders from your own Gmail address, so clients get them from a name they know. We only send. We never read, search, or store anything in your inbox.

Google user data: We use the calendar and Gmail permissions only to check when you are free, add booked sessions to your calendar, and send those booking emails. withlove's use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements. We do not sell this data, use it for ads, or use it to train AI models, and no person at withlove reads it unless you ask us to help with a support issue. You can disconnect Google any time from your settings, or remove withlove at myaccount.google.com/permissions.

Usage data: Basic analytics like how many conversations your assistant had and which features you use. No fingerprinting, no cross-site tracking.

We use your data to run the service, powering your assistant's responses, booking meetings, delivering files, and sending email notifications. We do not sell your data, share it with advertisers, or use it to train AI models.

Conversation data is used to generate your assistant's replies in real time. It is not used for any purpose beyond that without your explicit consent.

If you connect your Instagram Business or Creator account, we use Meta's Instagram API with Instagram Login. You sign in on Instagram and choose to allow it. We never see your Instagram password.

What we can access: your Instagram username, account type, and your recent posts (so you can pick one); comments people leave on your posts; and direct messages sent to your account, only to check them against the keywords you set.

What we do with it: when a comment or message matches an automation you turned on, we send the reply or direct message you wrote, and a public reply under the comment if you asked for one. We keep a delivery record: the Instagram user ID we messaged, the comment ID, the first 180 characters of the message we sent, and whether it went out. We do not read your other conversations, and we do not store the text of messages that match nothing.

How it is protected: your Instagram access token is encrypted at rest. These automations do not use AI. We do not sell Instagram data, share it with advertisers, or use it to train AI models.

Stopping and deleting: you can disconnect at any time from Automations in your dashboard, which deletes your stored access token. You can also remove withlove in Instagram under Settings, Apps and websites. To delete the delivery records we hold, follow the steps on our data deletion page.

Your assistant's public page (name, bio, links, chat) is visible to anyone with your link, that is the product. Everything else (conversation transcripts, booking details, rules, analytics) is private to you.

We use a small number of third-party services to run withlove: MongoDB Atlas (database), Upstash (queues), Google (calendar + auth), Resend (email), and AI providers (Anthropic, Groq, Gemini). Each processes only the minimum data needed for their role.

When someone chats with your assistant, we store their messages and any contact details they share (name, email) so you can follow up. Visitors can ask you to delete their data at any time, forward those requests to hello@withlove.so and we will handle it within 30 days.

Your account data is kept as long as your account is active. Conversation logs are kept for 12 months. LLM call logs (for cost monitoring) are kept for 90 days. When you delete your account, all your data is permanently deleted within 30 days.

You can export your data, correct inaccuracies, or delete your account at any time from your dashboard. If you are in the EU or UK, you have additional rights under GDPR, email us and we will respond within 30 days.

We use a single session cookie to keep you logged in. No tracking cookies, no third-party ad cookies.

Privacy questions or data requests: hello@withlove.so