Privacy Policy

LESHA AI ("we", "us", or "our") operates an AI voice receptionist platform for beauty and wellness businesses. This Privacy Policy explains how we collect, use, disclose, and protect information when you use our website and services.

By using LESHA AI, you agree to the collection and use of information as described in this policy.

2.1 Information you provide

• Account registration details (name, email address, business name)
• Billing and payment information (processed securely by our payment provider)
• Business profile information (phone number, website, business type)
• Knowledge base content you upload (documents, FAQs, service descriptions)

2.2 Information collected automatically

• Call recordings and transcripts generated through the AI receptionist
• Chat conversation logs
• Usage data (pages visited, features used, session duration)
• Device and browser information, IP address

2.3 Third-party integrations

• Google Calendar data when you connect your calendar
• Twilio call metadata for phone routing

• To provide, operate, and improve the LESHA AI platform
• To power AI responses using your uploaded knowledge base
• To send transactional emails (e.g. appointment confirmations)
• To process billing and prevent fraud
• To respond to support requests
• To comply with legal obligations

We do not sell your personal data to third parties.

We share data only with service providers necessary to operate the platform, including:

• Google — Calendar integration
• Twilio — Voice and SMS routing
• Hume AI — Voice transcription and synthesis
• OpenAI / Google Gemini — AI language processing
• Qdrant — Vector search for knowledge retrieval

Each provider is bound by their own privacy and data processing agreements.

We retain your data for as long as your account is active or as needed to provide services. Call transcripts and conversation logs are retained for 90 days by default. You may request deletion of your data at any time by contacting us.

We implement industry-standard security measures including encryption in transit (TLS), hashed credentials, and access controls. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security.

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict processing
• Data portability

To exercise any of these rights, please contact us at the address below.

We use essential cookies for authentication (JWT tokens stored in HTTP-only cookies) and session management. We do not use advertising or tracking cookies.

Our service is not directed at children under 13. We do not knowingly collect personal information from children under 13.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page with an updated date.

If you have questions about this Privacy Policy, please contact us:

LESHA AI
Email: privacy@lesha.ai