Privacy Policy

When you visit our site or contact us: the contact details you submit (name, email, phone number, business name), the contents of your messages, and standard technical logs such as IP address and browser type. Bookings made through our site are handled by Calendly.

Advertising measurement: our site loads the Google Ads tag. If you arrive by clicking one of our Google ads, Google sets a cookie and we keep the ad click identifier in your browser for up to 30 days, and pass it to Calendly if you book a call, so we can tell which ads lead to bookings. We do not use it to build a profile of you. You can block it with your browser’s cookie settings or at adssettings.google.com.

When we operate services for a client business:

• Call recordings and transcripts. Calls answered by the AI receptionist are recorded and transcribed so the request can be understood, qualified, routed, and, where appropriate, booked as an appointment, and so the business has a record of the conversation.
• Lead contact information. Names, phone numbers, email addresses, message contents, and appointment details captured from calls, text messages, web chat, and landing-page forms.
• Ad performance data. Impressions, clicks, spend, and conversion metrics reported by Google and Meta for the campaigns we manage. This is aggregate campaign data, not a profile of individual people.

We use this data to deliver the services our clients hire us for:

• Answering and routing calls, responding to and qualifying leads, and booking appointments.
• Creating, running, and optimizing advertising campaigns, and reporting results to the client.
• Monitoring quality, billing, and complying with legal obligations.

We do not sell personal information. We do not use lead or caller data to advertise our own business, and our AI providers process data solely to provide their service to us. Call and lead data is not used to train their models.

Calls handled by the AI receptionist are recorded and transcribed as part of the service. Where the law requires, callers are notified that the call is recorded or handled by an automated assistant.

We use a small set of established providers, each processing data only as needed to provide their service to us:

• Google Ads: Delivering and measuring advertising campaigns we manage for clients.
• Meta (Facebook / Instagram): Delivering and measuring advertising campaigns we manage for clients.
• VAPI: The voice-AI infrastructure that answers and handles phone calls.
• Twilio: Phone numbers, call routing, and text messaging.
• Anthropic: AI language processing: call handling, transcript analysis, message drafting, and ad copy generation.
• Supabase: Databases and file storage for leads, transcripts, and campaign data.
• Resend: Transactional email, such as lead notifications and performance reports.
• Calendly: Scheduling calls booked through our website.
• Vercel & Railway: Hosting for our websites and backend services.

Our advertising-management application (“Vesko Ads”) connects to Google Ads through Google’s OAuth consent screen using the Google Ads API scope (https://www.googleapis.com/auth/adwords). This section describes exactly how Google user data obtained that way is handled.

What we access. With your authorization, the application reads and writes data in the Google Ads accounts you manage: account identifiers, campaign, ad group, and ad configuration, and campaign performance data such as impressions, clicks, spend, and conversions. We do not access your Gmail, Drive, contacts, or any other Google service.

How we use it. Solely to provide our advertising-management features to you: creating and managing campaigns (new campaigns are created in a paused state for your review), reading performance metrics, and reporting those results back to you as the account owner. We use Google user data for no other purpose.

Transfers. We never sell Google user data, and we never transfer it to third parties except where required to provide the service (for example, processing it on the servers that run our platform, listed in section 4) or to comply with applicable law. In particular, Google user data is not shared with data brokers or advertisers, and it is not used for targeted advertising, credit or lending decisions, or any purpose unrelated to managing your own advertising.

Protection. Google user data is encrypted in transit (TLS) and at rest. OAuth credentials are stored server-side, never in the browser, with access restricted to the systems and people that need them, and every record is scoped to your organization using row-level security so no other customer can reach it.

Retention and deletion. We keep Google user data only while your account is active. You can revoke our access at any time from your Google account’s third-party access settings, and you can request deletion at any time by emailing max@vesko.agency; we delete the data within 30 days of a verified request.

AI and machine learning. Google user data is not used to develop, improve, or train artificial intelligence or machine-learning models, whether ours or anyone else’s.

Limited Use. Vesko’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. The use of raw or derived Google user data received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

• Call recordings, transcripts, and lead data are kept for the duration of our relationship with the client and deleted within 90 days of the client ending service, or sooner on request.
• Website inquiries are kept as long as needed to respond and work together.
• Ad performance data is kept for reporting history.

Verified deletion requests are honored within 30 days.

You can request access to, correction of, or deletion of your personal information by emailing max@vesko.agency. If your data came from a call or message we handled on behalf of a client business, that business controls the record. We will forward your request to them and help fulfill it.

Data is encrypted in transit, access is limited to the people who need it to do their jobs, and we rely on established infrastructure providers with their own security programs.

Our services are for businesses and are not directed to children under 13. We do not knowingly collect information from children.

If this policy changes, we will post the new version here with an updated date.

Vesko
12607 West County House Road
Albion, NY 14411
max@vesko.agency