Privacy Policy
Last updated: 14 July 2026
Shannon AI is an appointment-setting platform operated by «CONFIRM» (registered legal entity). Businesses (“customers”) use Shannon AI to nurture their own sales leads over WhatsApp and phone and to book appointments on the customer’s calendar. This policy explains what data we handle, why, and the choices you have. It applies to the Shannon AI application and covers our access to Google user data.
Who this policy is for
- Customers & operators — the businesses and their staff who sign in to Shannon AI, connect a calendar, and review messages.
- Leads — the individuals a customer contacts through Shannon AI. We process a lead’s data as a service provider on behalf of the customer, under the customer’s instructions.
Information we collect
- Account data — name, work email, and organisation details for people who sign in.
- Lead & conversation data — contact details a customer provides, and the WhatsApp and phone-call content exchanged with a lead. Calls handled by the AI voice agent are recorded, and the lead is told so at the start of the call.
- Calendar data — availability and the appointments we create, via the Google account a customer connects (see the Google section below).
- Operational data — logs, audit records, and metrics needed to run the service securely and measure results.
How we use information
- To nurture leads and book appointments on the customer’s behalf.
- To provide, secure, debug, and improve the Shannon AI service.
- To meet legal, consent, and record-keeping obligations (including recording disclosure, opt-out handling, and audit logging).
We do not sell personal data, and we do not use it to serve advertising.
Google user data
When a customer connects their Google Calendar, Shannon AI requests the narrowest scopes needed to offer times and book appointments. For each scope we request:
- Calendar events. Create, view, and update calendar events. Google grants this permission across the calendars your account can access; in practice we use it only for the calendar you connect, to book, reschedule, and cancel the appointments your assistant arranges for your leads. We do not use this data for advertising or to train generalised AI models.
- Calendar availability (free/busy). Read free/busy availability. Google grants this permission across the calendars your account can access; in practice we query only the calendar you connect, to find open time slots to offer when booking. Free/busy shows when you are available; it does not reveal the details of your events.
- Sign-in identity (OpenID Connect). A standard OpenID Connect identifier for the Google account you connect. Used only to complete the secure Google sign-in that authorises the calendar connection.
- Email address. Read the email address of the Google account you connect. Used only to display which Google account is connected so you can confirm and manage the connection. It is not used to email you or for any marketing.
Shannon AI's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
We access Google data only to provide the booking features described above. We do not transfer it to others except as needed to provide the service or as required by law, we do not use it for advertising, and we do not use it to train generalised or standalone AI/ML models. A customer can disconnect the calendar at any time, and can revoke our access directly from their Google Account permissions.
How we share information
- With the customer whose leads and appointments the data belongs to.
- With service providers that power the platform (messaging, telephony, speech, calendar, hosting, and evaluation vendors), bound to process data only on our instructions.
- Where required by law, or to protect the rights and safety of users and the public.
Data retention & deletion
We keep personal data only as long as needed to provide the service and to meet legal obligations, then delete or anonymise it on a scheduled retention purge. A lead who opts out is added to a do-not-contact list and receives no further outreach. To request access or deletion, contact us at «CONFIRM»@shannon.so.
Security
We protect data with access controls, encryption in transit, secret management for third-party credentials, and audit logging. No system is perfectly secure, but we work to safeguard the data we hold.
Your rights
Depending on your location, you may have rights to access, correct, or delete your personal data, or to withdraw consent, under Singapore’s Personal Data Protection Act and other applicable laws. Leads should contact the business that reached out to them; that business is the controller of their data. You may also contact us at «CONFIRM»@shannon.so and we will route the request appropriately. Our designated Data Protection Officer can be reached at Data Protection Officer, «CONFIRM»@shannon.so.
Changes to this policy
We may update this policy from time to time. Material changes will be reflected by the “last updated” date above.
Contact
«CONFIRM» (registered legal entity) — «CONFIRM»@shannon.so.