Privacy policy

In this policy, "we" and "SetMore AI" mean the operator of SetMore AI, "you" means the business that holds an account with us (the customer), and "lead" means someone your account texts with.

• Account data. Your email address and the settings you configure for your workspace (business name, agent behavior, calendar links, team members).
• Lead and conversation data. When someone texts your number, we store their phone number, any name they give, and the full content of the conversation between them and your AI assistant. This is what lets the assistant hold a conversation, book an appointment, and hand off to you.
• Calendar data. If you connect Google Calendar, we read your availability and write the events the assistant books, on your behalf.
• Zoom data. If you connect Zoom, we read your Zoom profile (name and email), your upcoming webinars, and the registrants of the webinars you choose (name, email, phone number and personal join link). We use it only to text each registrant their own join link. The connection is read only: we never create, change or delete anything in your Zoom account. We store the access token Zoom issues, encrypted, and the join links of registrants we matched to your contacts, and we delete both when you disconnect Zoom or remove the app from your Zoom account. We do not sell Zoom data, use it for advertising, or use it to train AI models. A join link reaches its registrant in a text message, so it passes through the messaging providers that carry that text.
• Billing data. Your plan, billing address, and payment status. Card numbers are handled entirely by Stripe; we never see or store them.
• Usage logs. Timestamps, account and workspace identifiers, and technical events (a message sent, a booking made, an error). Logs are built to carry identifiers, not the content of what was said.

If a business uploaded your phone number to a campaign list in SetMore AI, we hold your number, your name if the business gave it to us, the basis the business told us it had for contacting you, and the one message it sent you. You were not sent anything until a person at that business confirmed that basis. Reply STOP to stop. Where supported, START requests that messages resume. Email us to have that business's record of you deleted, or to report a message you did not expect; we act on every report.

We use this data to:

• Run the AI assistant on your behalf: read incoming messages, reply, and book calls.
• Show you analytics on conversations, bookings, and conversions.
• Bill your account and notify you about payment issues.
• Secure the service, investigate abuse, and enforce our Terms.

We do not sell conversation data or lead phone numbers, to anyone, ever.

We process data on these grounds:

• Performance of a contract. We need account and workspace data to provide the service you signed up for.
• Legitimate interests. Running the service reliably, preventing fraud and abuse, and improving the product.
• Consent, held by you. Every lead your account messages must have given express consent to be contacted. You are responsible for obtaining and documenting that consent; see our Terms and Messaging Policy.
• A lawful business relationship the business attests to. For someone a business uploaded to message, we rely on the business's own record of why it has the right to contact them.

We use a small set of specialized providers to run SetMore AI. Each only receives the data it needs to do its job.

• Messaging infrastructure and connected CRM providers. The providers carrying a conversation process its content, attachments, phone numbers, and delivery metadata. Depending on the channel and applicable provider terms, they may retain message data after account closure and use it for analytics, product improvement, and model training. Retention and deletion rights vary. Contact us about applicable retention settings and privacy requests before sending sensitive information.
• Supabase. Our database and authentication provider. It stores your account, workspace, and conversation records.
• Vercel. Our hosting provider. It serves the application and processes requests to it.
• Stripe. Our billing provider. It handles your card and subscription directly; we never store card numbers.
• Anthropic. The AI model provider behind the assistant. Under its API terms, Anthropic does not train its models on customer API data.
• Resend. Our email delivery provider. It sends account and transactional email on our behalf.
• Google. If you connect Google Calendar, Google processes your calendar availability and the events we create. SetMore AI's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
• Zoom. If you connect Zoom, we read your webinars and their registrants from Zoom as described above. Zoom data is used only to deliver each registrant's join link and is deleted when you disconnect.

We keep conversation data for as long as your workspace is active, plus 30 days after closure, in case you or a lead needs it recovered. The workspace owner can request a full export or deletion at any time by contacting us; deletion removes the data from our systems within 30 days.

Deleting a Workspace does not automatically delete copies held by messaging networks or connected services. We will assess requests affecting those copies and coordinate with the relevant provider where required. Legal retention requirements and applicable exceptions may limit deletion; provider processing remains subject to applicable rights.

Consent and opt-out records are part of Workspace data and may be removed when a Workspace is deleted. Businesses must keep their own consent evidence and suppression records for the period required by our Terms and applicable law; they should not rely on this Service as their sole compliance archive.

If a business has texted you using SetMore AI, you can reply STOP at any time to stop receiving messages from that number. Where supported, reply START to request resumption. Required marketing consent still applies. If you receive a message you did not expect, reply to say so or email us at team@setmore.ai and we will look into it. To request that your conversation data be deleted, ask the business directly, or email us with the phone number and business name and we will process the request. If you are a California resident, you have the right to know what we hold about you and to have it deleted; we do not sell it.

SetMore AI is not directed at, and may not be used by, anyone under 18. We do not knowingly collect data from anyone under 18.

We use encrypted connections everywhere, isolate each customer's data at the database level, and encrypt stored calendar credentials. See our security page for detail.

SetMore AI and its providers process data in the United States. By using the service, you consent to that processing.

If we make a material change to this policy, we will update the effective date above and, for significant changes, notify account owners by email.

Questions about this policy: team@setmore.ai. Mailing address: 7395 East Legacy Boulevard, Scottsdale, Arizona 85255.