Privacy Policy

Last updated: 26 July 2026

Who we are

Covo ("we", "us", "our") is a UK-based AI receptionist service that catches and qualifies missed calls and enquiries for trade businesses. Our website is trycovo.com.

What data we collect

We collect only the data necessary to provide our service:

• Account information – name, email address, phone number and trade type.
• Call and enquiry data – caller details, call recordings or transcripts, and enquiry content from connected channels such as phone, WhatsApp, SMS, email and website forms.
• Calendar connection data – the connected Google account email, calendar identifiers and display metadata, selected calendars, imported event timing, visibility and titles where the event is not private, OAuth credentials and Covo-managed booking event data.
• Usage data – how you interact with the Covo app, including pages viewed and features used.
• Demo request data – email, mobile number and trade submitted through our landing-page form.

How we use your data

• To catch and qualify missed enquiries on your behalf.
• To schedule jobs, prevent double-booking and update the calendar you select.
• To communicate with you about your account and our service.
• To protect, maintain and improve Covo's features and performance.

Google Calendar data

When you choose to connect Google Calendar, Covo requests access only to provide the calendar connection and scheduling features described below.

Data Covo accesses

• Your connected Google account email, so you can identify which account is connected.
• Calendar identifiers, names, primary status, access roles and display metadata, so you can select availability calendars and one destination calendar.
• Upcoming event start and end times, visibility and event titles where the event is not private, from calendars you select, so Covo can avoid double-booking and show imported calendar entries. Private events are represented as "Busy". Covo does not use event descriptions for availability.
• Covo-managed booking event data required to create, update or remove those booking events in your selected destination calendar.

How Covo uses and protects Google data

Covo uses Google user data only to identify the connected account, show available calendars, calculate availability, display imported calendar entries and maintain bookings requested through Covo. Calendar access is scoped to the relevant Covo tenant. Refresh tokens are encrypted at rest, access is restricted to authorised application services, and stored calendar-derived event data is limited to what is needed to provide scheduling.

Sharing and prohibited uses

We do not sell Google user data. We do not use it for advertising, credit decisions, data-broker activity or to train general-purpose AI models. We share it only with infrastructure processors required to operate the requested Covo functionality, under appropriate contractual and security safeguards, or where required by law.

Retention, disconnection and deletion

We retain Google connection data only while needed to operate the integration and meet applicable legal obligations. Disconnecting Google Calendar in Covo removes the stored connection and stops future Covo access. You can also revoke Covo's access from your Google Account. Existing calendar events may remain in Google Calendar unless you remove them. To request deletion of Covo-held data, follow our data deletion instructions or email privacy@trycovo.com.

Google API Services User Data Policy

Covo's use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Legal basis for processing

We process your data under:

• Contract – to provide the Covo service you signed up for.
• Legitimate interest – to protect and improve our product and communicate relevant service updates.
• Consent – where you choose to connect an external service or receive marketing communications. You can withdraw consent at any time.

Where your data is stored

Customer call and enquiry data is hosted on servers in the United Kingdom. We do not transfer personal data outside the UK unless required to provide the service and appropriate safeguards are in place.

Data sharing

We do not sell your data. We share data only with:

• Infrastructure and service providers who process data on our behalf, such as hosting, telephony and connected-service providers, and who are bound by appropriate contractual safeguards.
• Authorities or other parties where required by law or necessary to protect legal rights.

Data retention

We retain data only for as long as it is needed for the purposes described in this policy, while your account or an integration is active, and for any reasonable legal or operational wind-down period. Demo request data is retained for up to 12 months. You can request deletion at any time.

Your rights

Under UK GDPR, you have the right to:

• Access your personal data.
• Correct inaccurate data.
• Request deletion of your data.
• Object to or restrict processing.
• Data portability.
• Withdraw consent at any time.

To exercise any of these rights, email us at privacy@trycovo.com.

Cookies

Our landing page does not use tracking cookies. If we introduce cookies in the future, we will update this policy and obtain consent where required.

Changes to this policy

We may update this policy from time to time. Material changes will be communicated by email or through a notice on our website.

Contact

For privacy-related questions, contact us at privacy@trycovo.com.

← Back to Covo