Privacy Policy

Last updated: August 8, 2026

Polly by Cwoted (“Polly”, “we”) is an AI-powered phone receptionist operated from Toronto, Canada, and provided to businesses (“clients”) that use it to answer their phone calls. This policy explains what we collect, why, and the choices available — for the businesses that subscribe and for the people who call them.

If you called a business that uses Polly

When you call a client’s number, an AI assistant answers on the business’s behalf. To do its job it processes your voice in real time and creates a written transcript of the conversation. Depending on what you ask for, it may store your name, phone number, requested service and appointment details, or a message you leave. This information is made available to the business you called — the same way a human receptionist’s notes would be — and is used for no other purpose. The assistant identifies itself as an AI when asked. Audio recordings are not stored; transcripts are.

What we collect

• Caller interactions: call transcripts, caller name and callback number when offered, appointment details, messages left for the business, detected conversation language, call duration and outcome.
• Client account data: business name, staff names and schedules, services, business hours, published knowledge, user emails, and hashed passwords (scrypt; we never store plain passwords).
• Optional calendar access: if a client connects Google Calendar or Microsoft 365, we store the access tokens needed to check free/busy times and create booking events. We request only calendar scopes, never mail or files, and tokens are deleted when the client disconnects.
• Operational records: usage minutes for billing, audit logs of account actions, and delivery records for confirmations and notifications.

How the AI processes conversations

Call audio is streamed to speech-recognition, language-model, and speech-synthesis providers (via LiveKit’s inference gateway, with telephony carried by Telnyx) solely to conduct the conversation in real time. We do not use your conversations to train AI models, and we do not sell personal information to anyone.

Where data lives

Transcripts and account data are stored with our database provider (Supabase) on infrastructure located in the United States; call media is processed in Canadian and U.S. regions. Each client’s data is isolated to their own workspace.

Retention and deletion

We keep caller records for as long as the client’s account is active, because they are the client’s business records. Clients can delete messages, appointments, and knowledge from their dashboard, and can request full workspace deletion at any time. If you called a business and want your information corrected or removed, contact that business, or email us and we will coordinate with them.

Your rights

We handle personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA). You may request access to, correction of, or deletion of your personal information, and we will respond within 30 days.

Contact

Privacy questions and requests: ibragimovyonatan@gmail.com. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada.