Badara AIBadara AI

Legal

Privacy Policy

Last updated October 2026

What we collect

Badara AI collects the information you provide when you create an account and use the service: your name, email address, business details, service area, business hours, and the leads, conversations, appointments, reviews and knowledge-base content you manage inside the product.

How we use your data

We use your data only to operate the service: responding to your leads, qualifying opportunities, scheduling and reminding appointments, syncing your calendar, sending notifications, and providing analytics about your own business. We do not sell your data.

Google user data

When you connect Google Calendar, Badara AI requests access to your calendar so the app can read your busy times and create, update and remove the appointments Badara AI schedules on your behalf. Access is limited to the https://www.googleapis.com/auth/calendar scope.

We store the OAuth refresh token encrypted on our servers and use it solely to keep your calendar in sync. Google user data is never sold, never used for advertising, never shared with third parties except as required to provide the syncing feature, and never read by humans. You can disconnect Google Calendar at any time from Settings → Integrations, which stops all further access.

Third-party processors

We use a small set of infrastructure providers to run the service: Supabase (database and authentication), Stripe (billing), Twilio (SMS and voice, when you connect it), SendGrid or Resend (transactional email), and OpenAI or the Lovable AI gateway (AI replies). Each processor receives only the data required to perform its function.

Data storage & security

Your data is stored in our hosted database with row-level security isolating every workspace. API keys and OAuth tokens you connect are stored server-side and are never exposed to the browser. Access to production systems is restricted and logged.

Data retention & deletion

Your data is retained while your account is active. You may request deletion of your account and associated data at any time by contacting support; we will complete verified deletion requests within 30 days, except where retention is required by law.

Your rights

You may request access to, correction of, or deletion of your personal data, and you may revoke any connected integration (including Google) at any time. Contact us to exercise these rights.

Contact

Questions about this policy: