This agreement covers how Midebo handles personal information on your behalf when you use the service. It forms part of our Terms of Service. It is written to be read — if your own lawyer needs different wording, ask us and we will talk.
1.Who is responsible for what
1.1You are the controller of the personal information that passes through Midebo: it is your business, your callers and your customer records, and you decide what happens to them. We are the processor, which means we handle that information to run the service and only on your instructions.
1.2Your instructions are the settings you configure and the Terms of Service between us. If we ever think an instruction would break the law, we will tell you rather than quietly follow it.
2.What we process, and about whom
2.1About the people who call you: their phone number, their name if they give it, the address and job details needed to book work, the recording and transcript of the call, and a short summary of what they wanted.
2.2About you and your staff: the names, email addresses, phone numbers and login details of the people you give access to, plus billing contact details.
2.3We process it for as long as you are a customer, and then on the timetable in our Privacy Policy. Call audio and transcripts age out at thirty days; the call summary, your customer list and your bookings are your business record and do not.
3.Keeping it safe
3.1Access is limited to the people who need it to run or support the service. Information is encrypted in transit, each shop's data is separated at the database level so one customer's queries cannot reach another's rows, and the public website is kept apart from customer data entirely.
3.2Everyone with access is under a duty of confidentiality that outlasts their involvement with Midebo.
4.The companies that help us
4.1We use the providers below to deliver the service, and each is bound to protect the information it handles. This list is current as of the date above.
4.2Vapi — Runs the call — routes speech-to-text, the language model and the voice. Sees: call audio, transcript, caller number.
4.3Twilio — Phone numbers and inbound call carriage. Sees: caller number, call metadata.
4.4Deepgram — Speech-to-text, used through Vapi. Sees: call audio, and the transcript it produces.
4.5ElevenLabs — The assistant's synthesised voice. Sees: the words the assistant speaks — not the caller's audio.
4.6Anthropic — The language model that understands the call and books the job. Sees: transcript text and booking details.
4.7Microsoft Azure — Hosting, database and secret storage. Sees: all of your data, at rest.
4.8Google Calendar — Only where you have connected your own Google calendar. Sees: appointment times, customer name and number.
4.9Resend — Transactional email — alerts, activations, password resets. Sees: your email address and the contents of those messages.
4.10Stripe — Subscription billing. Sees: billing contact and card details, which stripe holds, not us.
4.11Everything above runs in the United States.
4.12If we add or replace one of these in a way that affects your data, we will tell you before it starts. If you object on reasonable grounds, tell us and we will work it out with you or you can end the agreement without penalty.
5.When someone asks about their information
5.1If one of your callers or customers asks us directly to see, correct or delete what we hold, we will point them to you, because it is your information to decide about. We will help you answer them — that is part of the service, not an extra.
5.2If we are legally compelled to hand something over, we will tell you first unless we are forbidden from doing so.
6.If something goes wrong
6.1If personal information is exposed, lost or accessed by someone who should not have it, we will tell you without undue delay once we know, with what happened, what was affected, and what we are doing about it. We will not wait until we have a complete picture to make the first call.
7.Getting your data back, and deletion
7.1While your account is open you can export your customer list and your bookings yourself at any time. If you cancel, you can sign in for thirty days to download them, and we then delete on the schedule in our Privacy Policy.
7.2Two things deliberately survive. If the law requires us to keep something — a legal hold, a dispute, a regulator — we keep that part and nothing more, and the audit log records what was removed and when. And the billing record outlasts the personal data, because a charge that is ever disputed still has to be explainable.
8.Where it is handled
8.1In the United States. Midebo is built, run and supported here, and the providers listed above process the information in United States regions.
9.Checking up on us
9.1Ask, and we will answer honestly and in writing about how we handle your data, including anything on this page. We are a small company and we do not have a certification to hand you; what we have is a straight answer and a willingness to show you how it works. If you need a formal audit, talk to us first.
10.Contact
10.1Questions about this agreement, or a request under it: support@midebo.com, or write to Midebo LLC, 237 E 5th St #226, Eureka, MO 63025.
This page is provided for transparency and is not legal advice.