Privacy Policy
Last updated October 9, 2026
This describes what Cleo collects, why, who processes it, and the choices you have.
What we collect
Account details (name, email, phone), your business profile, the conversations, calls, messages and emails Cleo handles for you, contacts and leads, documents you upload, connected-account tokens, and usage and billing records. Card details are handled by our payment processor; we never see the full number.
Why we use it
To run the service: answer your customers, book appointments, send the messages you set up, bill you, keep the platform secure and support you. We don't sell data and don't use it for advertising.
How it's protected
Connector credentials and MFA secrets are encrypted at rest. Every organization's data is isolated from every other's, and staff access is limited and audited.
AI and voice providers
To answer your customers, the conversation and your business information are processed by the artificial intelligence, voice and telephone services that run Cleo. They use it only to produce each reply, under data-protection agreements, and never for advertising.
Other service providers
Payments, hosting, database, email delivery and error monitoring services, and the Google, Microsoft and Meta accounts you choose to connect. Each processes only what it needs to provide its part of the service.
Calls and recordings
Calls Cleo answers are transcribed so the agent can reply and you can review them; audio may be processed by the voice provider. You're responsible for telling callers that an AI answers and, where required, that the call may be recorded.
Improving Cleo's models
Cleo trains its own AI models. It uses your business's data for that only if an owner turns on "Help improve Cleo's models" in Cleo controls, and only after removing personal data such as emails, phone numbers and card numbers. Turning it off stops your data from entering any later training. Learning for your own business, a separate switch, never shares your data with anyone else.
Retention and deletion
We keep your data while your account is active. When you delete your account, your business stays restorable for 30 days and is then permanently deleted, except records we must keep for billing, tax or legal reasons.
Your choices
You can export or correct your data, turn off model training, disconnect any connected account, or delete your account from settings at any time. For anything else, write to hello@cleodesk.com.