Privacy Policy
Effective Date: March 1, 2026 · Last Updated: March 24, 2026
1. Introduction
Apivo ("we," "us," or "our") is an AI-powered appointment booking service operated by Apivo, located in Hampton, Virginia. This Privacy Policy explains how we collect, use, disclose, and protect information when you use our services, including our AI chat widget, website (apivo.ai), and related tools.
By using Apivo, you agree to the terms of this Privacy Policy.
2. Information We Collect
Information collected through the chat widget:
- Full name
- Email address
- Phone number
- Appointment preferences (date, time, service type)
- Responses provided during the booking conversation
Information collected automatically:
- IP address
- Browser type and version
- Device type
- Pages visited and time spent
- Referring URLs
- Cookies and similar tracking technologies
Information from business clients (B2B):
- Business name and address
- Contact person name and email
- Calendar and integration credentials (OAuth tokens, stored encrypted at rest)
- Business FAQs and service information uploaded to the knowledge base
3. How We Use Your Information
We use collected information to:
- Book, reschedule, and cancel appointments on behalf of our business clients
- Send automated email confirmations to end users
- Sync appointment data with connected calendar and CRM integrations
- Respond to inquiries submitted through the chat widget
- Improve our AI workflows and booking experience
- Communicate with business clients about their accounts
- Comply with legal obligations
4. Third-Party Processors
Apivo uses the following third-party services to deliver our product. Each may process personal data on our behalf:
| Service | Purpose | Privacy Link |
|---|---|---|
| VAPI | AI conversation engine, agent system prompt, tool calls | vapi.ai/privacy |
| ElevenLabs | Multi-language voice and text processing | elevenlabs.io/privacy |
| Azure OpenAI (GPT) | Language model inference and AI response generation | microsoft.com/privacy |
| n8n | Workflow automation and data routing | n8n.io/privacy |
| Acuity Scheduling | Appointment scheduling and calendar sync | acuityscheduling.com/privacy |
| Supabase | Database storage for bookings, knowledge base, and client profiles | supabase.com/privacy |
| Vercel | Chat widget deployment and hosting | vercel.com/legal/privacy-policy |
| GitHub | Website file hosting and version control | docs.github.com/privacy |
| Google Workspace | Business communications and consultation scheduling | policies.google.com/privacy |
We do not sell your personal data to any third party.
Business clients may request a Data Processing Agreement (DPA) by contacting us at hello@apivo.ai.
5. HIPAA Notice
Apivo is not a covered entity under HIPAA. Business clients who operate as covered entities or business associates under HIPAA are solely responsible for their own HIPAA compliance obligations. Clients are encouraged to evaluate their own compliance requirements independently.
6. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to analyze site traffic, remember preferences, and improve our service. You may disable cookies in your browser settings; however, some features of our service may not function properly without them. We do not use cookies for advertising purposes or share cookie data with advertising networks.
7. Data Retention
- End-user booking data is retained for as long as the business remains an active Apivo client, or until deletion is requested
- Chat conversation logs are retained for up to 12 months for quality and support purposes
- Client account data is retained for the duration of the service agreement plus 90 days after cancellation
- Clients may request immediate data deletion upon cancellation by contacting hello@apivo.ai
- You may request deletion of your data at any time by contacting hello@apivo.ai
8. Data Security
We take reasonable technical and organizational measures to protect your data, including:
- Encrypted data transmission (HTTPS/TLS)
- OAuth tokens and integration credentials encrypted at rest
- Privacy-conscious infrastructure settings on all AI processing services
- Access controls limiting who can view client and end-user data
- Regular review of third-party vendor security practices
Note: While we implement these measures, no system is completely secure. Business clients are encouraged to evaluate their own compliance obligations independently.
9. Your Rights (U.S. Residents)
Depending on the state in which you reside, you may have the following rights regarding your personal data:
- Right to access — know what personal data we hold about you
- Right to correct — request corrections to inaccurate data
- Right to delete — request deletion of your personal data
- Right to data portability — receive a copy of your data in a portable format
- Right to opt out — opt out of the sale of personal data (note: we do not sell personal data)
These rights apply to residents of Virginia (VCDPA), California (CCPA), Colorado, Connecticut, and other states with applicable privacy laws. To exercise any of these rights, email us at hello@apivo.ai. We will respond within 45 days.
10. Children's Privacy
Apivo is not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe a child has submitted data through our widget, contact us immediately at hello@apivo.ai.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify active clients of material changes via email. Continued use of Apivo after changes constitutes acceptance of the updated policy.
12. Contact Us
Apivo
Hampton, Virginia
