Privacy Policy

Nevermiss AI LLC, a Florida limited liability company (“Nevermiss,” “we,” or “us”), is an AI receptionist that answers phone calls on behalf of your business. Calls are handled by an automated AI assistant (not a live person). The service processes live call audio and speech so the assistant can understand and act on the call. Depending on the call-data setting you choose, Retell either stores a privacy-scrubbed transcript and recording or stores basic call attributes without a transcript or recording. We also process caller phone numbers and details a caller provides (such as their name, address, and the service they need), and the business information you give us during setup, like your company name, services, hours, team members, and where to send lead alerts.

You can change this setting yourself in Settings. With “Basic call attributes only,” Nevermiss instructs Retell on each new inbound call not to store a transcript or recording, and Nevermiss does not retain those fields. Nevermiss still keeps limited call timing and lead details needed for alerts, follow-up, security, and service operation. The choice applies to new calls and does not itself erase data from earlier calls.

If you connect Google Calendar, Google shares your account identity and email plus an OAuth grant. The requested scopes permit Nevermiss to view calendar details and events and to create or edit events. Booking reads and writes are currently paused. While a separately reviewed booking release is active, we use that access only to identify your primary calendar and time zone, check free/busy availability, create an approved booking, or remove an incomplete booking created by Nevermiss.

On sign-up, sign-in, password-recovery, and account-email request forms, Cloudflare Turnstile assesses whether a request appears automated or abusive. Cloudflare may process technical and interaction data such as IP address, country, hostname, browser and operating-system details, user agent, and the challenge result. We use that result only to protect these account and email flows. It reduces abuse risk but does not guarantee that every automated request is blocked.

We use this information to answer calls, understand what a caller needs, capture their details, save requested follow-up—including a request for a link—in your secure account, and queue an account-email notice for an actionable call. We also use aggregated, de-identified data to monitor quality and improve how the assistant handles conversations. We do not sell your data or your callers’ data.

All customer-facing SMS delivery is currently paused, including owner and teammate lead texts, usage notices, Settings test texts, and caller-requested links. Saved phone numbers, consent records, link settings, or caller requests do not reopen a paused sending path. If recurring alerts are offered in a later reviewed release, recipients can opt out by replying STOP (reply HELP for help).

We do not sell, rent, or share your mobile phone number or your SMS consent with any third parties or affiliates for their own marketing or promotional purposes. No mobile information is shared with third parties for marketing. We use a mobile number only for the exact messaging purpose authorized for it, through providers that operate texting on our behalf.

Message frequency varies and depends on your call volume. Message and data rates may apply.

Call data uses a 90-day retention window by default. In Settings, you can choose 7, 30, 90, or 365 days. Calls older than the selected window are queued for deletion from Retell and our active call-data systems. Shortening the window also applies to existing calls. You can also open an individual call in Calls and queue its deletion sooner; it is hidden from your dashboard immediately while our background process confirms provider deletion before removing linked local call data. Provider reconciliation can take additional time after an ambiguous network response.

After provider confirmation, call content and contact metadata are erased. A minimal rounded-minute usage entry—without the provider call ID, phone numbers, transcript, recording, or contact details— remains linked to your account for current-period metering and is removed when the full account is anonymized. Each call is rounded up to the next whole minute.

We may retain limited non-content records needed to prevent a deleted call from being recreated by a delayed provider event, and records that law, security, fraud prevention, or billing requires. You can schedule deletion of your Nevermiss account from Settings. Irreversible work begins after a 24-hour cooling-off period, and the account is removed only after Nevermiss reconciles billing, forwarding, provider-held call data, and connected-calendar cleanup. The deletion screen identifies the limited legal, billing, consent, security, and lifecycle records that must remain after account removal. You can also contact support@nevermiss.com for help exercising your privacy rights.

We retain Google Calendar access and refresh tokens while the connection is active so a separately reviewed booking release can use the approved connection without asking you to sign in for every call. Booking reads and writes are currently paused. Disconnecting Calendar asks Google to revoke the grant and deletes our stored tokens; account deletion also removes them.

We rely on a small set of trusted service providers to run Nevermiss. They handle the data described below under the terms and privacy commitments that apply to each service:

• Retell AI: voice and telephony infrastructure that powers the live call, including real-time speech-to-text and the conversational AI that responds. Retell in turn uses vetted providers for speech-to-text, language models, and text-to-speech to deliver the call.
• Anthropic: reading your website during setup to prefill your receptionist’s details.
• Supabase: database, authentication, and storage for your account and call records.
• Cloudflare: Turnstile anti-abuse checks on account and authentication forms.
• Stripe: subscription billing and payment processing.
• Twilio: reconciling historical delivery receipts; this release does not initiate new customer SMS delivery.
• Google: address lookup and, only when you connect Google Calendar, OAuth identity, calendar availability, and booking events as described above. When Google Ads campaign measurement is enabled and the reviewed consent state permits it, we return only approved Google advertising click identifiers plus the conversion event, time, value, currency, and a one-way order identifier through Google Ads or Google Data Manager. We do not send a name, email address, phone number, IP address, or Google Data Manager userData fields for this measurement.
• Resend: sending account and operational email, including the recipient address and the content needed for that email.
• Vercel: application hosting and delivery.

Cookies and campaign measurement.We use cookies needed to sign you in and keep your session secure. We also store a small first-touch record in your browser when you visit: the campaign tags or advertising click identifier in the link, the referring site’s hostname, the landing-page path, and the time of that first visit. We do not store the full referring URL or unrelated query parameters. If you create an account, we associate that record with your business and billing conversion so we can measure which campaigns lead to customers. We do not sell this information or use it to build a profile of your activity on other sites.

A provider’s legal role depends on the specific service and applicable terms: it may act as our processor, an independent controller, or both for different activities. Google describes Google Ads generally as an independent-controller product except for identified processor features, and says it may use conversion event data for campaign reporting, bidding, analysis, and aggregate advertiser benefit. Before enabling Google Ads measurement, we document the terms that apply to the configured feature and the reviewed consent basis. In particular, under our data processing agreement with Retell, Retell processes call data only to provide the service to us and does not use it to train its AI models.

We don’t sell your data, and we don’t share it with anyone else for their own marketing. We may disclose information if required by law. This list can change as we improve the service; if it does, we’ll update this page.

You can request access to, correction of, or deletion of the information we hold about your business and your calls. Just email us. Depending on where you live, you may have additional rights under laws like the California CCPA/CPRA and other U.S. state privacy laws (for example, to know what we hold, to delete it, and to not have it sold, and we do not sell it).

Because Nevermiss answers calls on your behalf, you control the caller information collected on your line and we process it for you. You are responsible for giving your callers any notice and obtaining any consent the law requires, including, where applicable, that the call is recorded or transcribed and handled by an automated assistant.

We protect your data with encryption in transit and at rest, access limited to what’s needed to run the service, and providers who maintain their own security programs (our voice provider, for example, is SOC 2 audited). No method of storage or transmission is 100% secure, but we work to safeguard your information and to notify you of a material breach as required by law.

We and our providers process and store data primarily in the United States.

Nevermiss is a business tool and is not directed to children. We do not knowingly collect personal information from children under 13.

We may update this policy from time to time. When we do, we’ll revise the “last updated” date above, and for material changes we’ll take reasonable steps to let you know.

Questions about this policy or your data? Email support@nevermiss.com.

Nevermiss AI LLC
1200 Riverplace Blvd, Suite 105 #1544
Jacksonville, FL 32207