Each section says what it means before the full operating language. This is meant to be readable without hiding the important parts.
Plain-English summaries help explain the terms. The full clause remains the operating text.
Privacy
In plain English
Who we are and what this covers
This explains what Lobby collects, why, and your choices. It covers your use of the website and the Lobby service.
Lobby, operated by AGI Solutions, LLC (“Lobby,” “we,” “us”), provides an AI receptionist for businesses. This Privacy Policy describes how we handle information when you visit our website and when you use the service to answer calls. For caller information processed on behalf of a business customer, that business is the controller of the data and Lobby acts as its processor under its instructions.
In plain English
Information we collect
Account and business details, your receptionist setup, call content (audio and transcripts where enabled), caller details, leads and bookings, calendar data you connect, payment info via our processor, and technical usage data.
We collect: (1) account data: name, email, password hash, team members; (2) business configuration: receptionist persona, hours, knowledge, routing, phone numbers; (3) call data: call metadata, transcripts, and audio recordings where you enable recording, plus the names, phone numbers, and reasons callers provide; (4) leads and bookings created from calls; (5) calendar data from an integration you connect, used to check availability and create or read events; (6) billing data processed by our payment provider (we do not store full card numbers); and (7) device, log, and usage data such as IP address, browser, and feature usage.
In plain English - important
Google user data and calendar access
If you connect Google Calendar, we access only what’s needed to check availability and create or read your booking events. We follow Google’s Limited Use rules and never sell this data.
Important
When you connect Google Calendar, Lobby requests calendar scopes solely to read free/busy availability, list your calendars to pick a booking destination, and create or read appointment events for your account. Lobby’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, do not sell it, and do not transfer it to others except as needed to provide this feature, to comply with law, or as part of a merger with comparable protections. You can revoke access at any time by disconnecting in your dashboard or in your Google Account permissions.
In plain English
How we use information
To answer calls, book appointments, route callers, capture leads, support your account, meter usage, secure the service, and communicate with you.
We use information to operate and deliver the service (answering calls, booking, routing, lead capture), to provide support and notifications, to bill and meter usage, to secure and troubleshoot the service, to comply with legal obligations, and to improve the product using aggregated or de-identified data. We do not sell account or caller data, and we do not use it for third-party advertising.
In plain English - important
AI processing of calls
Your calls are handled by AI speech and language models, including trusted third-party model providers, purely to operate your receptionist.
Important
To answer calls, Lobby streams call audio and context to speech-to-text, text-to-speech, and language-model providers that process it on our behalf to generate responses, transcripts, and summaries. These providers act as processors under contract and are not permitted to use your or your callers’ content to train their models for their own purposes. AI output can be imperfect and should be reviewed.
In plain English
Recordings and transcripts
If recording is enabled, recordings and transcripts may contain personal information callers share. Owners control these settings and can request deletion.
Recordings and transcripts are stored with your account and may include personal information provided by callers. Recording is controlled by the account owner, who is responsible for the caller disclosure their jurisdiction requires. Recordings and transcripts are subject to the retention, export, and deletion controls described below.
In plain English
How we share information
Only with the service providers needed to run Lobby (hosting, telephony, email, payments, AI), and when required by law. We don’t sell your data or share mobile opt-in data for marketing.
We share data with sub-processors that help us operate the service, including cloud hosting, telephony and messaging carriers, email delivery, payment processing, AI model providers, and analytics, under agreements that limit their use to providing those services. We may disclose information to comply with law, enforce our terms, or protect rights and safety, and we may transfer data as part of a merger or acquisition with comparable protections. We do not sell personal information. We do not share mobile phone numbers, SMS opt-in data, or SMS consent with third parties or affiliates for their marketing or promotional purposes.
In plain English
Text alerts and consent
Account owners can add a phone number for Lobby alerts. Message and data rates may apply, and STOP/HELP work on every text thread.
If an account owner adds a phone number for text alerts, Lobby sends operational account messages such as call, lead, booking, and setup alerts. Message frequency varies based on account activity. Message and data rates may apply. Reply STOP to opt out, START to resubscribe, or HELP for support. Text alert consent is used only to provide Lobby alerts and is not shared for third-party marketing.
In plain English
Data retention
We keep data while your account is active and for a reasonable period after, unless you ask us to delete it sooner or the law requires us to keep it.
We retain account and call data for as long as your account is active and as needed to provide the service. After closure, we delete or de-identify data within a reasonable period, except records we must keep for billing, tax, security, or legal-compliance reasons. You can request earlier deletion of recordings, transcripts, leads, or bookings through account controls or support.
In plain English
How we protect information
We use encryption in transit, access controls, and encrypted storage of sensitive tokens. No system is perfectly secure.
We apply administrative, technical, and physical safeguards appropriate to the data, including encryption in transit, restricted access, and encryption of sensitive credentials such as connected-calendar tokens. While we work to protect your information, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
In plain English
International data transfers
We and our providers may process data in other countries. Where required, we use appropriate safeguards for those transfers.
Lobby and its sub-processors may store and process data in countries other than where you or your callers are located. Where such transfers are subject to data-protection law, we rely on appropriate safeguards (such as standard contractual clauses) to protect the information.
In plain English
Your privacy rights
Depending on where you live, you can access, correct, export, or delete your data, and opt out of certain processing. We do not sell personal data.
Subject to applicable law (such as GDPR and CCPA/CPRA), you may request access to, correction, export, or deletion of personal data, and may object to or restrict certain processing. Account owners can manage much of this directly in the dashboard. Because Lobby acts as a processor for caller data, requests from a caller are generally directed to the business that operated the call; we will assist that business as required. We do not sell personal information and do not discriminate against you for exercising your rights. To make a request, contact [email protected].
In plain English
Children’s privacy
Lobby is for businesses and is not directed to children. We don’t knowingly collect data from anyone under 18.
The service is intended for use by businesses and adults. We do not knowingly collect personal information from children under 18. If you believe a child has provided us information, contact us and we will delete it.
In plain English
Cookies and analytics
We use essential cookies to keep you signed in and limited analytics to understand and improve the website.
We use strictly necessary cookies for authentication and security and may use limited analytics to measure and improve the website and product. We do not use cookies to build advertising profiles. You can control cookies through your browser settings; disabling essential cookies may break sign-in.
In plain English
Changes to this policy
We’ll update this policy as the product evolves and post the new date. Material changes get reasonable notice.
We may update this Privacy Policy from time to time. When we make material changes we will update the “last updated” date and provide reasonable notice through the service or by email. Your continued use after changes take effect means you accept the updated policy.
In plain English
Contact us
Privacy questions or requests? Reach a real person.
For privacy questions or to exercise your rights, contact [email protected] or use the contact page. Mailing address: 131 Continental Dr, Suite 305, Newark, DE 19713, US.