Privacy policy

Who we are

Isa operates business automation products for companies: Isa (customer service and contact qualification through WhatsApp and email) and Mira (sales meeting intelligence). The Isa team is the data controller. Contact: isa@getisa.ai.

What data we process

• Isa: messages that contacts send to the WhatsApp lines or email addresses of companies using the service, along with the contact’s name and phone number.
• Mira: recordings and transcripts of meetings to which an assistant visible in the video call is invited, and evaluations generated from those transcripts.
• Mira with Google Calendar: if you connect your calendar, we read events (title, time, participants and meeting link) to schedule the assistant. We use the read-only calendar.events.readonly permission and your account email address.
• Portal accounts: email address, name and profile photo if you upload one.

How we use it

Only to provide the service to the company that contracts it: respond to and qualify conversations, schedule the assistant for meetings, transcribe, evaluate sales conversations and provide reports to that company. We do not sell personal data or use it for advertising.

Google data

The use of information received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements. We use calendar data only to schedule the assistant for your meetings. We never transfer it to third parties except providers needed to operate the service, and we do not use it for advertising. People do not review this data unless you authorize it or the law requires it.

Providers

We use infrastructure providers that process data on our behalf: Vercel (hosting), Supabase (database), Meta (WhatsApp Business), Resend (email), Recall.ai (meeting assistant and transcription) and OpenAI or Anthropic (language processing). Each receives only what it needs for its function.

Retention and security

Data is retained while the client company maintains the service and is deleted at its request. Access is restricted through credentials and encryption in transit. Meetings are recorded with a visible participant in the call; each company is responsible for notifying its attendees as required by applicable law.

Your rights

You can request access to, correction of or deletion of your data by writing to isa@getisa.ai. If you connected Google Calendar, you can revoke access at any time through your Google account permissions.