This Privacy Policy explains how Dinero Technologies ("we", "us") collects, uses, and shares information when you use Dinero (the "Service") at dinerotech.online.
1. Information We Collect
Account data: name, business name, email, phone number, timezone, assistant name, and business profile you configure in Settings. Call data: call recordings, transcripts, AI-generated summaries and outcomes, caller phone number, call duration, and appointment details (customer name, phone, address, job summary) written to your calendar. Integration data: if you connect Google Calendar, we store the OAuth tokens needed to read availability and create events on your calendar; tokens are held in a service-role-only store and are not readable by other users. If you connect a third-party CRM or field-service platform (currently ServiceTitan, Housecall Pro, or Jobber), we store the API credentials, tenant identifiers, and any account-level configuration you provide (such as client id, client secret, tenant/app key, API token, default job type, or business unit). These credentials are encrypted at rest using AES-256-GCM with a server-side key, are never returned to the browser after they are saved, and are used solely to push appointments and customer records you authorize into that CRM on your behalf. You can disconnect either integration at any time from Settings, which revokes our access and deletes the stored credentials. CRM sync data: when a CRM integration is active, we transmit the appointment details (customer name, phone, address, job summary, scheduled time) and may store the CRM-side record id and sync status/error messages so you can retry or audit failed pushes. Usage data: dashboard activity, IP address, browser type, device information, and diagnostic logs. Billing data: processed by a third-party PCI-compliant payment provider; we do not store full card numbers on our systems.
2. How We Use Information
To operate the Service, answer and route inbound calls, qualify leads, book appointments in your calendar, generate call summaries, send you email notifications (call summaries, billing, account, and lifecycle emails), calculate usage and billing, prevent fraud and abuse, and improve the Service. We do not sell personal information and we do not use call content to train third-party general-purpose AI models.
3. Sharing
We share data only with trusted third-party service providers strictly to operate the platform — including providers for voice processing and transcription, cloud hosting and database storage, calendar scheduling (when you choose to connect it), CRM and field-service platforms you connect (ServiceTitan, Housecall Pro, Jobber), transactional email delivery, and payment processing. When you enable a CRM integration, appointment and customer information is transmitted directly to that CRM using the credentials you supplied; your use of the CRM is governed by that provider's terms and privacy policy. Each provider is bound by contractual confidentiality and data-protection obligations. We may also disclose information where required by law.
4. Call Recording & Consent
The Service records and transcribes inbound calls by default so it can generate summaries and improve routing accuracy. You are responsible for ensuring that recording calls complies with the consent laws of every jurisdiction in which your callers are located. The Service can play a recording disclosure on call connection upon request.
5. Data Retention
Call recordings, transcripts, and summaries are retained for 12 months by default and then deleted, unless you request earlier deletion or longer retention in writing. CRM sync logs (record ids and status/error messages) are retained for 90 days for troubleshooting and then purged. Encrypted CRM credentials are retained only while an integration is connected and are deleted when you disconnect it. Account and billing records are retained for as long as your account is active and for the period required by law after closure.
6. Security
We use row-level security, encrypted transport (TLS), encryption at rest, AES-256-GCM envelope encryption for third-party CRM credentials, per-customer assistant and phone-number isolation, role-based access, and signature-verified webhooks. No system is perfectly secure; you use the Service at your own risk.
7. Your Rights
You may request access, correction, export, or deletion of your personal information, and disconnect any integration from Settings at any time. To exercise any right, email support@dinerotech.online. We respond within 30 days.
8. Children
The Service is not directed to anyone under 16. We do not knowingly collect personal information from children.
9. International Users
By using the Service you consent to the transfer of your information to the United States and other jurisdictions where our service providers operate.
10. Changes
We may update this policy and will post the new "Last updated" date above.
11. Contact
Dinero Technologies · support@dinerotech.online