Privacy
We use data for limited purposes.
Processed data
The microphone is used only when you initiate it. Audio and live transcripts are transmitted to the OpenAI service to generate a live response. Raw transcripts are not stored in the mobile app by default; If the company administrator enables retention, the retention period specified on the screen is applied. Call duration, status, brief summary and generated operation results can be recorded for business tracking.
Email, display name, company profile, team membership, verified product/service information, notification preference and device notification token may be processed within the scope of the account and workspace. Name, telephone, request detail and transaction time may be recorded for explicitly confirmed booking, support, callback or human transfer transactions. Customer phones are masked in the app's listing screens.
Purpose and storage
Web demo data is retained for a maximum of 7 days for the sole purpose of demonstrating flow and limiting abuse. Mobile workspace data is stored to provide the service, synchronize team operations, ensure security, and enforce usage limits. Raw casting storage time is managed by company setting; When storage is closed, out-of-scope raw castings are purged. Data is not sold.
Calendar and CRM links
When Google Calendar or Microsoft Outlook is connected, Kapsiva can check availability, add the confirmed appointment to the calendar, and remove the corresponding event when canceled. When HubSpot or Pipedrive is connected, the approved sales requisition can be matched with the contact record or the existing contact can be updated. These operations are carried out only with the authorizations given by the user on the OAuth screen.
OAuth access and renewal tokens are not sent to the mobile device; It is kept encrypted with AES-GCM in the server vault on the Cloudflare side. The link can be removed from the Links screen in the app. Access tokens in Kapsiva are deleted when the link is removed; Previously created records in the provider account may also need to be managed from the provider's own interface.
Service providers
The server and web infrastructure are provided by Cloudflare, the mobile account and workspace database is provided by Supabase, and the live voice AI functionality is provided by OpenAI. When the user specifically connects Google, Microsoft, HubSpot or Pipedrive processes the relevant integration data. These providers process data under their own contracts and security terms.
Check and delete
Transcript storage preference and duration can be changed from the management screen in the mobile application. The user can remove his own application data by deleting on the account screen; Joint records at the team or firm level may be considered separately due to the rights of other members and legal retention requirements.
Rights and communication
For access, correction or deletion requests within the scope of KVKK iletisim@dodeyazilim.com You can write to the address. For product support support@dodeyazilim.com available.