Theo Privacy Policy

What we collect

We collect your phone number, name, account details, messages, attachments, voice-note transcripts, preferences, and information inferred from your conversations. We also collect task and booking details, connected-account information, payment authorizations and transaction records, and results from websites or businesses Theo interacts with for you. Automated calls can produce transcripts and summaries.

Our systems and providers process IP addresses, device and browser information, cookies, usage records, and diagnostics. Remote browser sessions can retain signed-in cookies, page contents, screenshots, and activity logs, including information entered during checkout.

How we use and share it

We use information to respond, remember your preferences, complete tasks, send updates, improve and evaluate Theo, investigate problems, prevent abuse, and meet legal obligations. Authorized staff can review conversations, saved memories, and task records for these purposes. Conversations are not confidential communications with a professional.

Information goes to providers for AI, hosting, storage, messaging, transcription, calls, remote browsing, payments, maps, and monitoring. These include Vercel and its model providers, Linq or Blooio, Twilio, Kernel, Stripe/Link, Google, Bland, and Braintrust, depending on the feature and configuration. AI and diagnostic providers may receive conversation content and tool results. We do not promise that every provider has the same retention or model-training practices.

We share relevant details with businesses to carry out your requests, and may disclose data for legal requirements, security, disputes, or a business transaction such as an acquisition. Independent businesses handle data under their own policies. Anyone with a Theo map link can view its contents; share those links carefully.

Model training and data sales

We may use conversations and other information to develop and train models, and may share or sell information to commercial partners, including for advertising. We are not currently training models on Theo conversations or selling or sharing personal information for targeted advertising. Before starting these uses, we will provide applicable notices and choices and obtain consent where required. These terms do not waive your privacy rights.

Retention and deletion

We keep information as needed to operate and improve Theo, maintain security, resolve disputes, and meet legal obligations. There is no automatic expiration for conversation history or saved memories. Resetting your account or asking Theo to forget something does not erase historical records or provider copies.

Email legal@merit.systems to request deletion. We will delete your personal information within 30 days of receiving your request, subject to verifying your identity and exceptions permitted or required by law, such as fraud prevention and transaction recordkeeping. We will explain any exception and direct our service providers to delete applicable data. This does not cancel bookings or delete records independently held by merchants.

Your choices

Email legal@merit.systems for access, correction, a copy of your data, deletion, or to opt out of sale, advertising sharing, or model training. Depending on your location, you may have additional rights, including limiting certain uses, appealing a decision, or complaining to a regulator. We will not discriminate against you for exercising legal privacy rights. We may need to verify identity for access or deletion requests.

You can disconnect Link, request that messages or scheduled tasks stop, and block cookies in your browser, though some features may stop working. Cookies support sign-in and preferences. We do not currently respond to browser Do Not Track signals.

Other essentials

Data may be processed in the US and other countries where our providers operate. No system is completely secure; only send sensitive information needed for your request. Theo is for adults 18 and older. Contact us if a child has provided personal information.

We will post updates here and notify you before material changes take effect, obtaining consent where required. Contact: legal@merit.systems.