Privacy Policy

Up Acquisition builds software for insurance agencies, including AI Caller, a platform that places outbound calls on behalf of our customers and books appointments on their calendars. This policy covers upacquisition.com and the products hosted on its subdomains.

Questions about this policy or about data we hold can go to tobias@nowbookedmarketing.com.

Account data. The name, email address, and phone number of people who sign in to our products, and the organization they belong to.

Contact data supplied by our customers. Our customers upload lists of the people they want to call. These typically contain a name, phone number, email address, and state. This data belongs to our customer. We process it on their instructions and do not use it for our own purposes.

Call data. When a call is placed we record the time, duration, outcome, and cost, and we retain the call recording and a transcript so our customers can review what was said. Calls announce that they are recorded.

Calendar data. Where a customer connects a calendar, we read availability and write appointments. See the Google section below.

To operate the product: to place the calls our customers ask us to place, to check a calendar for open times, to book an appointment on it, to classify what happened on a call, and to show our customers the results.

To send our customers alerts about their own activity, such as an email when an appointment is booked, and to forward outcomes to a CRM the customer has configured.

To keep the service running and secure: diagnosing faults, preventing abuse, and meeting our legal obligations.

We do not sell personal information. We do not use customer contact data, call recordings, transcripts, or calendar data to train machine learning models.

A customer may connect a Google Calendar so the AI agent can offer real open times and book the one the person on the call chooses. If they do, we request only the narrowest access that makes that work:

• calendar.freebusy to see which times are already taken. This returns busy and free intervals only. It does not expose event titles, guests, or descriptions.
• calendar.events to create the appointment, and to update it if the same call books again so a retry never produces a duplicate.

We use this access for nothing else. We do not read a customer's existing events beyond their busy intervals, we do not modify or delete events we did not create, and we do not retain calendar contents. What we store is the time of the appointment we booked and the identifier of the event we created, so the appointment can be shown in our dashboard and matched back later.

Limited Use.Up Acquisition's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is never sold, never used for advertising, and never used to train generalized AI or ML models.

A customer can disconnect their calendar at any time from the product, or revoke our access directly at myaccount.google.com/permissions. Revoking stops all further access immediately.

We share data only with the services required to deliver the product, and only what each one needs: telephony providers to carry the call, voice AI providers to conduct it, our hosting and database providers to run the application, an email provider to send alerts, and any CRM or calendar a customer has chosen to connect.

Several of these run on credentials the customer supplies from their own accounts, in which case the data flows directly between our customer and their own provider.

We may disclose information if the law requires it, and we will tell the affected customer unless we are prohibited from doing so.

We do not sell personal information, and we do not share it with third parties or affiliates for their own marketing or promotional purposes.

Text messaging originator opt-in data and consent are excluded from every category above. That information is never shared with any third party or affiliate for marketing or promotional purposes. It is used only to deliver the messages the recipient asked for, and it is passed to a telephony provider solely to carry those messages.

Where a customer uses AI Messenger, we process the phone numbers and message content needed to send and receive SMS on that customer's behalf. The customer is the sender of record and is responsible for holding the recipient's consent.

Message frequency varies. Message and data rates may apply. Reply STOP to any message to opt out, or HELP for assistance. Opt-out requests are recorded against the contact and suppress further messages immediately.

We keep a record of consent and opt-out events because carrier rules and the Telephone Consumer Protection Act require it to be demonstrable. Full messaging terms are in our Terms of Service.

Account data is kept while the account is open. Contact data, call recordings, transcripts, and appointment records are kept while our customer's account is open, because they are our customer's working records. On request or on account closure we delete them within 30 days, except where we must keep something to meet a legal obligation.

If you received a call from an agency using our platform, that agency is the controller of your information. You can ask to be added to their do-not-call list on the call itself, and the request is honored across every campaign in that workspace. You can also contact us at the address above and we will route your request to the agency and act on their instruction.

Depending on where you live you may have the right to access, correct, or delete your personal information, or to object to its processing. We honor these requests.

Data is encrypted in transit. Access to production systems is limited to personnel who need it. Credentials our customers give us are stored per workspace and are never returned to the browser or exposed in our interface once saved.

If we change this policy we will update the date at the top of this page, and for material changes we will notify account holders by email.