Privacy Policy

Last updated: July 16, 2026

1. Overview

Sarase, a product of Mangu Dev LLC (“Sarase,” “we,” “our”), provides an AI-powered virtual receptionist service for small businesses. Mangu Dev LLC is the legal entity responsible for the information described in this policy. This Privacy Policy explains what information we collect, how we use it, and the choices you have regarding your information. It applies to both the businesses that use Sarase (“Customers”) and the end users who call or text those businesses (“End Users”).

2. Information we collect

From businesses (Customers)

  • Account information: name, email, password hash, business name, website.
  • Business configuration: business hours, services offered, pricing, receptionist personality settings, custom instructions.
  • Billing information: processed by our payment provider (Stripe); we do not store full card numbers on our servers.
  • Phone number provisioning data: the Twilio phone number assigned to the business and its identifiers.
  • Calendar integration tokens (OAuth) if the business connects Google Calendar.

From end users (callers and texters)

  • Phone number (the number the end user is calling or texting from).
  • Name and email, if provided during the booking flow.
  • Call transcripts and voice recordings of conversations with the AI receptionist.
  • SMS message content exchanged with the AI receptionist.
  • Appointment details: date, time, requested service, special notes you provide.
  • Call metadata: duration, timestamps, and the phone number that was dialed.

3. How we use information

  • To operate the AI receptionist: route inbound calls and texts to the correct business, understand what the end user is asking for, and generate a helpful response.
  • To create, modify, and cancel appointments on behalf of the business, and to sync them with the business’s calendar if connected.
  • To send appointment confirmations, reminders, and status updates to end users via SMS or email.
  • To provide the business with a dashboard showing call history, transcripts, customer contact information, and analytics.
  • To detect abuse, prevent fraud, and comply with applicable laws and carrier regulations (including U.S. A2P 10DLC rules).
  • To improve the quality and accuracy of the AI receptionist through aggregated, anonymized metrics. We do not use individual conversation content to train third-party AI models.

4. How we share information

We share the minimum information needed with the following categories of service providers, each under a data processing agreement:

  • Twilio - telephony carrier for phone numbers, SMS delivery, and voice routing.
  • LiveKit - real-time voice infrastructure for AI phone calls.
  • Deepgram - speech-to-text transcription of voice calls.
  • Google Gemini - the large language model that powers the AI receptionist’s understanding and responses.
  • Cartesia - text-to-speech synthesis for the AI receptionist’s voice.
  • Stripe - payment processing for business subscriptions.
  • Google Calendar - if the business opts in to calendar sync, appointment data is written to their Google Calendar.
  • Railway - hosting and database infrastructure.

We do not sell personal information. We do not share personal information for cross-context behavioral advertising. We do not share conversation content with any third party for purposes other than operating the service.

Mobile information and phone numbers collected as part of our SMS messaging program will not be shared with third parties or affiliates for marketing or promotional purposes. SMS opt-in data and consent records are not sold, rented, or shared with any third party under any circumstance. This restriction applies regardless of the legal basis under which the original phone number was collected.

5. Data retention

Conversation transcripts, call recordings, and appointment records are retained for as long as the business remains an active Customer of Sarase. Once a business cancels its subscription, its associated data is deleted within 30 days, except where longer retention is required by law. End users may contact the business they interacted with, or contact Sarase directly, to request deletion of their specific information earlier.

6. Your rights and choices

  • Opt out of SMS: end users can reply STOP to any SMS from a Sarase-powered business to immediately stop receiving further messages. Replying HELP returns support information.
  • Access and deletion: end users may request a copy of their data or its deletion by contacting the business directly or emailing [email protected].
  • Calendar disconnection: businesses can revoke Google Calendar access at any time from the Sarase dashboard.

7. Security

We use industry-standard safeguards including TLS encryption in transit, encrypted database storage at rest, scoped API keys with least-privilege access, and cryptographic signature verification on every inbound webhook. No system can be perfectly secure; we will notify affected users of a material breach in accordance with applicable law.

8. Children

Sarase is not directed to children under 13 and we do not knowingly collect information from them. If you believe a child has provided us with information, contact us and we will delete it.

9. International users

Sarase is operated from the United States and data is processed in the United States. If you are accessing Sarase from outside the U.S., you consent to the transfer of your information to the U.S.

10. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be announced on this page with an updated revision date. Continued use of Sarase after a change indicates acceptance of the updated policy.

11. Contact us

For questions about this Privacy Policy or to exercise your rights, contact us at [email protected].