Telvy AI app privacy policy

Company

WOW Services B.V.

Legal form

Private limited company (B.V.), the Netherlands

Chamber of Commerce (KvK)

34249792

VAT number

NL815900168B01

Registered address

Cannenburgh 10, 1121 DZ Landsmeer, the Netherlands

Email

thijnoorbals@gmail.com

Trade name

Telvy AI

The owner is the controller of the personal data processed in the Telvy AI app (iris-asistente.vercel.app), under the GDPR (EU Regulation 2016/679) and the Dutch GDPR Implementation Act (UAVG).

Telvy AI is a voice assistant app on your phone, and Iris is the assistant in it. You talk to her; she can read your calendar, email, contacts and files, make phone calls for you and remember what you tell her.

During early access, only people we have invited can sign in. Each person's data is kept separately: nobody can see another person's memories, documents, calls or conversations.

With your permission, and only when you ask for it in a conversation:

• Google Calendar: she reads your appointments and can add, move, change or delete them, only after you tap Add, Change or Delete on a screen that first shows exactly what will happen.
• Gmail: she can search and read your email, and send an email you asked for. The screen first shows the whole email (from, to, subject and text) and it is only sent when you tap Send. She never changes or deletes your email.
• Google Contacts: read-only, to find phone numbers.
• Google Drive: she can search and read your files when you ask (never changing or deleting them), and saves the documents she makes for you (letters, quotes, invoices) in a folder called “Iris” in your Drive.

Email, calendar, contact and Drive details are read when you ask and are not copied into Telvy AI's database, unless you ask Iris to remember or save something, or to read an email attachment.

You can also connect an Outlook account (work Microsoft 365 or personal Outlook.com) in the + menu. With your permission, and only when you ask:

• Outlook mail: she can search and read your email, and send an email you asked for, only after you tap Send on the screen that shows the whole email. She never changes or deletes your email.
• Outlook calendar: she reads your appointments and can add, move, change or delete them, only after you tap on the screen. She can create Microsoft Teams meetings and invite the people you name; the screen shows who gets an invitation before you tap.
• Outlook contacts: read-only, to find phone numbers.

Iris only reaches the mailbox of the person who signed in, never anyone else's in your organisation. Your Microsoft sign-in is stored encrypted in the database so she can stay connected; Disconnect in the + menu deletes it.

When you ask Iris about an attachment (a PDF, Word or Excel file, or a photo, up to 15 MB), she downloads that one file, reads its text, has Claude analyse it and saves the file, its text and the analysis in your documents, so you can ask about it later. Only the attachment you ask about is read. Web pages, archives, programs and macro files are never opened. You can delete it like any other document.

Iris only phones someone after you tap Call on the screen. At the start of every call she says she is an AI assistant calling on your behalf. She never gives out ID, bank or card numbers, passwords or codes.

What the person she calls says is used only to carry out your request and report back to you.

Iris has her own WhatsApp Business number (not your personal WhatsApp). She only sends a WhatsApp message after you tap Send on the screen that shows the message and who gets it. Messages people send to that number are stored with your account so she can read them to you, and you get a notification. WhatsApp messages go through Meta (WhatsApp Business Platform).

If a company CRM is connected, Iris can read leads, deals and figures from it when you ask, with a read-only key. She can't change anything in the CRM, and what she reads is not copied into her database.

When you ask how long it takes to get somewhere, Iris asks your phone for its location (your phone asks your permission first), rounded to about 100 metres, and sends it with the destination to Google Maps to work out the route. Your location is not stored. If you prefer, you can tell her your home address; it is saved with your account and used as the starting point.

• Your account: your email address and, if set, your name, phone number and home address.
• What you ask Iris to keep: memories, notes and to-dos.
• Files, photos, pasted texts and Claude chats you add, with the text read from them and a short summary.
• Email attachments you asked her to read, with their text and analysis.
• WhatsApp messages sent to Iris's number, and the ones she sent for you.
• A log of emails she sent for you (account, recipients, subject and the first words), for the daily limit and so you can check what was sent. The email itself stays in your Sent folder.
• Documents she creates for you (PDF, Word, Excel).
• Phone calls she makes for you: who was called, the number, the goal, the details you gave and the result.
• Your conversations with Iris (what you said and what she answered), so she can remember earlier conversations. These are kept by ElevenLabs.
• Your Google sign-in, encrypted, in a cookie on your own device. It is never stored in the database.
• If you connected Outlook: your Outlook address and your Microsoft sign-in, encrypted, in the database.

To give you the assistant you signed up for: performance of our agreement with you (article 6.1.b GDPR).

Your phone's location for travel times: your consent, which your phone asks for (article 6.1.a GDPR).

Keeping Telvy AI safe and preventing abuse, such as the daily limits on calls and emails: legitimate interest (article 6.1.f GDPR).

These services do the work behind Telvy AI, each under a data processing agreement and each with only what it needs for its part:

• Supabase: the database and file storage.
• Vercel: hosts the app.
• ElevenLabs: the voice, the conversation itself, conversation transcripts and the phone calls.
• Anthropic (Claude): the language model that understands and answers you, reads your documents and photos, writes summaries and documents, and searches the internet for you.
• Zadarma or Twilio: connect the phone calls Iris makes to the phone network.
• Google: sign-in, and your calendar, email, contacts and Drive; Google Maps for travel times.
• Microsoft: your Outlook mail, calendar and contacts, if you connected them.
• HubSpot: the company CRM, read-only, if connected.
• Meta (WhatsApp Business Platform): WhatsApp messages to and from Iris's number.

Several of these companies are based in the United States. Those transfers are protected by the European Commission's standard contractual clauses and, where the provider is certified, the EU-US Data Privacy Framework.

Your data is not sold, not used for advertising and not used by us to train AI models.

Memories, notes, to-dos, documents and call records are kept until you delete them: ask Iris to forget something, then tap Delete on the screen. The file of a Claude chat export is deleted as soon as its chats are read. Conversation transcripts at ElevenLabs are kept under ElevenLabs' own retention policy.

To delete everything, write to the email address above and your account and all its data will be removed.

Telvy AI's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Signing out of Telvy AI also cancels Iris's access to your Google account. You can check or withdraw the permission at any time at myaccount.google.com/permissions. For Outlook, tap Disconnect in the + menu; you can also remove Iris at myapps.microsoft.com.

You can ask to see, correct or delete your data, to limit or object to its use, to receive it in a portable format, and to withdraw your consent at any time. Write to the email address above; we reply within one month.

If you think your data is handled wrongly, you can complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl) or to the data protection authority where you live, such as the Spanish AEPD (www.aepd.es).

Telvy AI is for adults (18 or older).

If this policy changes, we'll update it here and change the date at the top.