BellobelloBack

Privacy Policy

Last updated: March 15, 2026

1. Overview

This Privacy Policy explains how Bello ("we", "us", "our") collects, uses, stores, and protects your information when you use our voice agent platform, including the dashboard, APIs, embeddable widget, and SDK. We are committed to protecting your privacy and handling your data transparently.

2. Information We Collect

2.1 Dashboard Users (Account Holders)

When you create an account, we collect:

  • Email address — used for account authentication via one-time passcode (OTP). We do not collect passwords.
  • User ID — a unique identifier assigned by our authentication provider to associate you with your projects.

2.2 Project and Agent Configuration

When you create and configure voice agents, we store:

  • Agent settings (name, company name, voice, personality, language, temperature, system prompt, tool configurations)
  • Widget design settings (theme, colors, position, titles)
  • Deployment configuration (widget API keys, preview URLs)

2.3 Uploaded Content

When you build a knowledge base, we process and store:

  • Uploaded files — original filenames, file size, MIME type, and file content stored in secure cloud storage
  • Crawled websites — URL, page title, extracted text content, and page screenshots
  • Embeddings — vector representations of your content generated for semantic search

2.4 Voice Session Data

During voice interactions between end-users and your agent, we collect session-level metrics:

  • Session duration and timestamps
  • Message counts (number of messages sent and received)
  • Knowledge base query counts and response times
  • Tool usage counts
  • Error counts

We do not store conversation transcripts or audio recordings. Voice audio is processed in real-time by our AI providers and is not persisted by Bello.

2.5 Callback Requests

If your agent is configured with the callback request tool, end-users may voluntarily provide:

  • Name, email, phone number, and company
  • Reason for callback

This information is stored in association with your project and is accessible through your dashboard.

2.6 Widget End-Users (Website Visitors)

Website visitors who interact with embedded Bello widgets are not required to authenticate. We do not collect personal information from widget end-users unless they voluntarily submit it through agent tools (e.g., callback requests or info collection forms). We do not use cookies for widget visitors or track them across websites.

2.7 Usage and Operational Data

  • Daily session usage per project (seconds used, call counts) for enforcing usage limits
  • Application logs for debugging and service reliability (may include project IDs, error messages, and timestamps)

3. How We Use Your Information

We use collected information to:

  • Provide, operate, and maintain the Bello platform
  • Authenticate your identity and secure your account
  • Process and index your content for knowledge base search
  • Enable real-time voice agent interactions for your website visitors
  • Enforce usage limits and prevent abuse
  • Monitor service health, debug issues, and improve performance
  • Communicate with you about your account or service updates

4. Data Storage and Security

Your data is stored on secure, industry-standard cloud infrastructure provided by Microsoft Azure. We use encrypted databases for project configurations, secure cloud storage for uploaded files, and managed authentication services for account security.

All communication between your browser and our servers uses HTTPS encryption. API keys and authentication tokens are never exposed to client-side code — all backend requests are proxied through server-side API routes.

5. Data Retention

  • Project data (configurations, files, content) is retained for the lifetime of your project and deleted when you delete the project
  • Session usage metrics are retained for 48 hours for rate-limiting purposes
  • Callback requests are retained until you explicitly delete them
  • Account data (email, user ID) is retained until you request account deletion
  • Application logs are retained per our infrastructure provider's policies

6. Third-Party Services

We use third-party service providers to operate the platform. Your data may be processed by these providers in accordance with their respective privacy policies. These include:

  • Cloud infrastructure (Microsoft Azure) — file storage, AI processing, and search
  • Real-time communication — voice and audio streaming infrastructure
  • Authentication — managed identity and account services
  • Hosting — web application hosting and delivery

7. Data Sharing

We do not sell, rent, or trade your personal information. We share data only as necessary to:

  • Operate the Service through third-party infrastructure providers listed above
  • Comply with legal obligations, court orders, or enforceable governmental requests
  • Protect the rights, safety, or property of Bello, our users, or the public

8. Your Rights and Choices

You have the right to:

  • Access your data through the dashboard
  • Delete your projects and all associated data at any time
  • Request account deletion by contacting us
  • Export your project configurations

Deleting a project permanently removes all uploaded files, crawled content, embeddings, agent configurations, deployment settings, and callback requests associated with that project.

9. Responsibilities for Embedded Widget Users

If you embed the Bello widget on your website, you are the data controller for any personal information collected from your website visitors through agent tools (e.g., callback requests, info collection forms). You are responsible for:

  • Providing appropriate privacy disclosures to your website visitors
  • Obtaining consent for data collection where required by applicable law
  • Handling data subject requests from your end-users

10. Children's Privacy

The Service is not intended for use by individuals under the age of 16. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us and we will promptly delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or through the Service. Your continued use of the Service after changes constitutes acceptance of the updated policy.

12. Contact

If you have questions about this Privacy Policy or want to exercise your data rights, contact us at gautamprajapati06@gmail.com.