Avoca, Inc. Privacy Policy

We may update this Privacy Policy from time to time, and we encourage you to review it regularly to stay informed about how we are protecting your information.

1. Company. Refers to Avoca, Inc. Also referred to as “Avoca, ” “Company,” or “We.”
2. Website. The Avoca website located at https://avoca.ai.
3. Service. Refers to the Avoca website, platform, applications, and any related products or services provided by the Company.
4. You. The individual accessing or using the Service or the legal entity on whose behalf such an individual is using the Service.
5. Account. A unique account created for you to access our services.
6. Device. Any hardware used to access our services, including but not limited to computers, smartphones, and tablets.
7. Personal Data. Any information related to an identified or identifiable individual.
8. Service Provider. Any third party that processes data on behalf of Avoca.
9. Usage Data. Data collected automatically, including service interactions and activity logs.
10. Cookies. Small files stored on your device that enhance user experience and track browsing activity.
11. Affiliate. Any entity that controls, is controlled by, or is under common control with Avoca.

• Name (First and Last)
• Email Address
• Phone Number
• Company Name and Job Title
• Mailing and Business Address
• Account Login Credentials (usernames and encrypted passwords)
• Billing Information, including payment details
• Bank Account Information for payment processing
• Government-Issued Identification (passport, driver’s license, or national ID) for verification
• Tax Identification Number (if applicable)

If you complete a financial transaction using our services, we may request additional verification, including:

• Date of Birth
• Proof of Address (utility bills, bank statements, or similar documents)
• Additional Identity Verification Documents as Required by Law

1. What Calendar Data We Access. When you connect your Google Calendar to Avoca, we access and store:
   • Your calendar list and calendar metadata
   • Calendar events (title, description, date, time, attendees, location, reminders)
   • Free/busy availability information
   • Real-time calendar change notifications
   • OAuth authorization tokens (stored encrypted in our systems)
2. Why We Need Calendar Access. We request Google Calendar permissions (calendar.events scope) to enable automated service appointment management. Specifically, we use calendar access to:
   • Read your team’s calendar availability to prevent double-booking technicians
   • Automatically create calendar events when customers book appointments through Avoca’s AI conversation system
   • Update or cancel calendar events when customers reschedule or cancel appointments
   • Monitor calendar changes in real-time to keep your schedule synchronized
   • Query free/busy windows to show accurate availability to customers
3. How We Use Calendar Data.
   • Calendar data is used exclusively to manage service appointments and maintain accurate scheduling for your team.
   • We store encrypted OAuth tokens in our secure database to maintain your calendar connection.
   • Calendar events are created, updated, and deleted automatically based on customer booking actions.
   • We use Google’s Calendar API watch feature to receive notifications of calendar changes.
   • Calendar data is encrypted both in transit (via HTTPS) and at rest in our databases.
   • We do not share your calendar data with third parties for marketing or advertising purposes.
   • Calendar information is only accessed when needed to check availability, create bookings, or sync changes.
4. Automated AI Booking. Avoca uses AI-powered conversations to interact with your customers. When a customer books an appointment through our AI system:
   • The AI checks your team’s calendar availability in real-time to offer available time slots.
   • Upon confirmation, Avoca automatically creates a calendar event with appropriate details (customer name, service type, location, reminders).
   • The calendar event includes the customer as an attendee and sends appropriate notifications.
   • Any changes made by the customer are immediately reflected in your Google Calendar.
5. Your Calendar Data Rights.
   • You can revoke Avoca’s access to your Google Calendar at any time through your Google Account settings: https://myaccount.google.com/permissions.
   • Revoking access will prevent Avoca from reading or creating calendar events and disable automated appointment management.
   • You can request deletion of stored OAuth tokens and calendar data by contacting all@avoca.ai.
   • Revoking calendar access does not delete your Avoca account, but automated scheduling features will no longer function.
6. Data Retention.
   • OAuth tokens are retained as long as your calendar integration remains active.
   • Calendar event data is cached temporarily for scheduling purposes and synchronized with your Google Calendar.
   • Upon disconnection or account deletion, we delete stored OAuth tokens and cached calendar data within 30 days.
7. Compliance. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We only use calendar data for the purposes described above and do not use it for serving advertisements or building user profiles for non-service purposes.

1. Directly from You. When you provide information via forms, account registration, or customer support interactions.
2. Automatically. Through tracking technologies such as cookies, log files, and analytics tools.
3. From Third Parties. Including service providers, business partners, and publicly available sources.

1. Providing and Maintaining Services. To operate and improve our services, including user authentication and personalization.
2. Processing Payments and Transactions. To facilitate secure purchases and verify identity.
3. Communication. To send updates, newsletters, service alerts, and customer support responses.
4. Security and Fraud Prevention. To detect and prevent unauthorized access, fraud, or abuse.
5. Legal Compliance. To meet legal obligations, including data protection regulations.
6. Advertising and Marketing. To send promotional content and display targeted ads.
7. Analytics and Research. To assess user trends, improve our services, and develop new features.

• Access Your Data: Request a copy of the personal data we hold.
• Correct Your Data: Update inaccurate or incomplete information.
• Delete Your Data: Request the removal of personal data under certain conditions.
• Restrict Processing: Limit how your data is used in specific circumstances.
• Object to Processing: Decline certain data processing, including direct marketing.
• Data Portability: Request a structured, machine-readable copy of your data.
• Withdraw Consent: If processing is based on consent, you may withdraw it at any time.
• Manage Cookies and Tracking Technologies: Adjust settings via your browser or opt-out mechanisms.
• File a Complaint: Lodge a complaint with a relevant data protection authority.

To exercise any of these rights, contact us at all@avoca.ai.

• Service Providers: Companies that assist with hosting, analytics, payment processing, and customer support.
• Google Services:When you authorize calendar integration, we connect with Google’s APIs to access your calendar data as described in the Google Calendar Integration section above. We do not share your calendar data with any other third parties.
• Legal and Regulatory Authorities: If required by law or for the protection of rights and security.
• Business Transfers: In cases of a merger, acquisition, or restructuring.
• Advertising and Marketing Partners: To deliver personalized ads and promotional content.

• Data Encryption: Protecting data in transit and at rest.
• OAuth Token Encryption: Calendar authorization tokens are encrypted and stored securely to protect your calendar access credentials.
• Access Controls: Limiting access to authorized personnel only.
• Regular Security Audits: Assessing system vulnerabilities and ensuring compliance.

• Standard Contractual Clauses (SCCs)
• Data Encryption and Pseudonymization
• Compliance with GDPR, CCPA, and other relevant regulations

1. Negotiation. Attempting informal resolution before legal action.
2. Mediation or Arbitration. Handling unresolved disputes through legally recognized mediation services.
3. Litigation. Pursuing legal action in the courts of the State of New York, United States if necessary.