Prism Apps LLC, which operates Offworkr, is the data controller for the information described here and takes privacy seriously. This policy explains what data we collect, how we use it, and how we protect it when you use our AI receptionist service.
This policy covers two groups of people:
From clients (your business):
From callers (people who call your number):
Important: We do not accept protected health information (PHI), legally privileged communications, or any data subject to HIPAA, GDPR special-category requirements, or equivalent regulations. Do not use this service in regulated industries that require such compliance.
We do not sell your data to third parties. We do not use call content to train AI models.
We share data with the following sub-processors only as necessary to deliver the service:
If you choose to connect your Google Calendar, Offworkr requests the https://www.googleapis.com/auth/calendar.events scope. We use this access solely to create and update calendar events so the AI receptionist can book appointments on your behalf. We store only the Google authorization tokens needed to keep this connection active. We do not use Google Calendar data for advertising, we do not sell it, and we do not use it to train AI or machine-learning models.
No Google user data is sent to any AI/ML model. Our use of this scope is limited to writing new appointments to your calendar. The AI receptionist operates only on the live telephone conversation; it does not read, retrieve, or receive your existing Google Calendar or other Google Workspace data, and no such data is ever transferred to, processed by, or used to train any third-party AI or machine-learning service. The only information written to your calendar is the appointment detail gathered during the call (such as the caller’s name, requested time, and reason).
Limited Use. Offworkr’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
You can disconnect Google Calendar at any time from your dashboard, or revoke Offworkr’s access directly at myaccount.google.com/permissions. Revoking access stops all further calendar access; events already created remain on your calendar.
When enabled, the service may send text (SMS) messages on behalf of a client business - for example, to follow up with a caller whose call was missed, to confirm details, or to request a review after a completed service. Mobile numbers used for messaging are collected when an individual contacts, or is a customer of, a client business, or when a person provides their number directly.
No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties. Numbers are shared with our messaging carrier only to deliver the messages you have consented to, and are never sold or used for third-party marketing.
Message frequency varies. Message and data rates may apply. Reply STOP to opt out at any time; reply HELP for help.
Call recordings are stored by our third-party voice infrastructure provider on their own infrastructure. We store a reference URL and display it in your dashboard - we do not store audio files in our own database. If you need a recording deleted, email us and we will request its removal from that provider on your behalf.
Your responsibility: You are solely responsible for complying with all applicable call-recording consent laws in your jurisdiction before deploying the AI receptionist. Many US states require callers to be informed that a call may be recorded.
All data is transmitted over HTTPS. Our database uses encrypted storage. Access to production data is restricted to service-level credentials not exposed to end users. We review security practices periodically. No system is completely secure - if you believe there has been a data breach, please contact us immediately at [email protected].
You may contact us to:
Email requests to [email protected].
This service is intended for business use by adults. We do not knowingly collect personal data from individuals under 18 years of age.
We may update this Privacy Policy. We will notify you by email at least 14 days before any material changes take effect. The "Effective" date at the top of this page always reflects the current version.