Privacy Policy

Information We Collect

Drexo AI collects information in two contexts: (1) when businesses sign up to use our platform, and (2) when callers interact with AI agents we operate on behalf of those businesses.

From Business Clients (our direct customers):

• Business name, contact name, address, email address, and phone number
• Billing information (processed securely through Stripe — we do not store full card numbers)
• Business configuration data: hours of operation, service offerings, pricing, and FAQs provided to configure your AI agent
• Usage data: call volumes, appointment bookings, and CRM activity within the Drexo AI platform

From Callers (end users who contact Drexo AI-powered businesses):

• Name and contact information voluntarily provided during a call
• The content of your call conversation (audio and transcript)
• Appointment details, service requests, and other information you share during the call
• Caller ID / phone number as provided by your carrier

How We Use Your Information

For Business Clients, we use your information to:

• Provision, operate, and improve the Drexo AI platform and your AI agent
• Process payments and send billing communications
• Send service-related emails (usage notifications, overage alerts, support responses)
• Provide customer support and troubleshoot issues
• Comply with legal obligations

For Caller data, we use it to:

• Complete the purpose of the call (booking appointments, answering questions, routing to the right person)
• Generate call transcripts and summaries delivered to the business you called
• Enable the business to follow up with you regarding your inquiry
• Improve the accuracy and quality of our AI models using anonymized, aggregated data

We do not use caller data for advertising, and we do not sell it to any third party.

Call Recording & AI Processing

When you call a business powered by Drexo AI, your call may be answered and recorded by an AI system. The business you are calling is responsible for ensuring that applicable call-recording disclosure laws are followed in their jurisdiction (e.g., two-party consent states such as California, Florida, and Illinois require that all parties be notified of recording).

Call audio is processed in real time by our AI voice platform to generate a transcript, identify your intent, and complete your requested action (such as booking an appointment). Processed transcripts and recordings are stored and made available to the business you called through the Drexo AI CRM.

Drexo AI uses aggregated, de-identified call data — with all personally identifiable information removed — to train and improve our AI models. Individual call recordings and transcripts are never used to train our models without removal of personally identifiable information first.

Information Sharing

Drexo AI does not sell, rent, or trade personal information. We share information only in the following limited circumstances:

• With the business you called: Call transcripts, recordings, your name, and contact details are shared with the Drexo AI business client whose AI agent you interacted with, so they can fulfill your request and follow up.
• With service providers: We use third-party infrastructure providers to operate the platform, including AI voice processing (VAPI), telephony (Twilio), payment processing (Stripe), and cloud hosting. These providers are contractually prohibited from using your data for any purpose other than providing services to Drexo AI.
• For legal compliance: We may disclose information if required by law, regulation, court order, or legal process, or to protect the rights, property, or safety of Drexo AI, our clients, or others.
• In a business transfer: If Drexo AI is acquired or merges with another company, your information may be transferred as part of that transaction. We will notify affected parties of any such change.

Data Retention

We retain different types of data for different periods:

• Business client account data: Retained for the duration of the active subscription, plus 90 days following account termination to allow for data export.
• Call transcripts and recordings: Retained for a minimum of 12 months from the date of the call, then deleted unless the business client has extended retention settings enabled.
• Billing records: Retained for 7 years as required by applicable tax and accounting laws.
• Anonymized usage data: May be retained indefinitely for analytical and product improvement purposes.

Upon account termination, business clients may request an export of their data within 30 days. After that window, Drexo AI may permanently delete all associated data.

Your Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete information.
• Deletion: Request deletion of your personal information, subject to legal retention requirements.
• Portability: Request your data in a machine-readable format.
• Opt-out of marketing: Unsubscribe from marketing emails at any time using the link in any email we send.

To exercise any of these rights, contact us at privacy@getdrexoai.com. We will respond within 30 days. Note that some requests may be limited where we have a legal basis for retaining data or where fulfilling the request would require us to delete information on behalf of a third party.

California Residents (CCPA): You have the right to know what personal information we collect and how it is used, the right to delete your personal information, and the right to opt out of the sale of personal information. Drexo AI does not sell personal information.

Florida Residents (FDBR): Florida residents have rights under the Florida Digital Bill of Rights to access, correct, delete, and port personal data, as well as to opt out of targeted advertising and profiling. To exercise these rights, contact us at privacy@getdrexoai.com.

Cookies & Tracking

The Drexo AI marketing website uses cookies and similar tracking technologies to understand how visitors use the site and to improve our content.

• Essential cookies: Required for the website to function properly. Cannot be disabled.
• Analytics cookies: Help us understand visitor behavior in aggregate (e.g., which pages are most visited). We use privacy-respecting analytics tools that do not track individuals across the web.
• Email tracking pixels: Our CRM uses invisible 1×1 pixel images embedded in emails to record when an email has been opened, along with approximate location and device type. This information is only visible to the Drexo AI business client who sent the email, not to third parties.

You can control cookie settings in your browser preferences. Disabling cookies may affect some website functionality.

Data Security

Drexo AI implements industry-standard administrative, technical, and physical safeguards to protect the information we store and process. This includes encrypted data transmission (TLS), access controls limiting data access to authorized personnel only, and regular security reviews.

No system is completely immune to security risks. In the event of a data breach affecting your personal information, we will notify affected parties within 72 hours of becoming aware of the breach and will cooperate with any required regulatory reporting.

Business clients are responsible for maintaining the security of their own login credentials and for any activity that occurs under their account.

Children's Privacy

Drexo AI's services are not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If we become aware that we have inadvertently collected such information, we will delete it promptly. If you believe a child under 13 has provided us with personal information, please contact us at privacy@getdrexoai.com.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the "Last updated" date at the top of this page and — for business clients — send an email notification to the address on file at least 30 days before the changes take effect.

Your continued use of Drexo AI's services after the effective date of any changes constitutes your acceptance of the revised Privacy Policy.

Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, please reach out:

• Email: privacy@getdrexoai.com
• General support: support@getdrexoai.com
• Mailing address: Drexo AI, Tampa, Florida