Privacy policy

Last updated 13 November 2026

Connexious L.L.C. ("Connexious", "we") makes software that lets businesses answer and follow up with their own leads by phone, WhatsApp and email, with an AI agent. This policy explains what personal data we handle, why, and your choices.

Who is responsible

For the accounts of our customers and their staff, we are the controller. For the leads, contacts and families our customers manage in Connexious, our customer is the controller and we process that data on their behalf, under our data processing terms. Contact: privacy@connexious-ai.com, Prishtina, Kosovo.

What we collect

Google user data

When a customer connects a Google account, Connexious requests only: sending email on their behalf (gmail.send), reading free/busy times and creating calendar events (calendar.events, calendar.freebusy), and their basic profile (name, email). We use this data only to send the emails and book the meetings the customer's agent is set up to send and book, and to show the customer what was sent. We do not read their inbox, we do not use Google user data for advertising, we do not sell it, and we do not use it to train AI models. Connexious's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Sign in with Google uses only the name and email address.

Microsoft and Meta data

Microsoft 365 connections are used the same way (sending mail, calendar availability and events, basic profile). WhatsApp Business and Facebook Page connections are used to send and receive the customer's own messages and lead-form leads; message content is processed only to answer and record those conversations for the customer.

AI and calls

The agent always says it is an AI assistant. Calls and messages are processed by AI providers to understand and answer them; recordings and transcripts are kept for the customer. Our AI providers process this data on our instructions and do not use it to train their models under our agreements.

Service providers

We use: cloud hosting (EU or US region), Anthropic (AI), Vapi and ElevenLabs (voice), Meta (WhatsApp), Google and Microsoft (customers' own mail and calendar), Paddle (payments). Transfers outside the EU/EEA use Standard Contractual Clauses where required.

How long we keep data

Customer content is kept while the customer's account is active and deleted within 90 days after it closes, unless the customer exports or deletes it earlier or the law requires longer. Do-not-contact and opt-out records are kept so that a person who said no is never contacted again.

Your rights

You can ask for access, correction, deletion, restriction or a copy of your data, and object to processing, under the GDPR, Mexico's LFPDPPP or other laws that apply to you. If you were contacted by one of our customers, write to that business first; we will help them answer. Customers can disconnect Google, Microsoft, Meta or Calendly at any time in Settings → Connected accounts, which deletes the stored tokens; you can also remove access in your Google or Microsoft account settings.

Security

Each customer runs in its own workspace with its own database; tokens and keys are encrypted; sign-in uses two-step verification or Google/Microsoft sign-in; staff access to a customer's workspace is logged and visible to the customer.

Changes and contact

We will post changes here and tell customers of material changes by email. Questions: privacy@connexious-ai.com.