Privacy Policy

Nerro provides AI employees that answer phone calls for businesses. Questions about this policy go to support@nerro.si.

For calls, Nerro acts on behalf of the business you called: that business decides how your information is used, and Nerro processes it for them.

Business accounts: name, email, password (stored hashed), business details you enter (services, hours, policies, knowledge), team members, and settings.

Callers: the calling number, what was said on the call (as a text transcript), and details the caller gives, such as name, phone number, address, appointment times and messages. Nerro does not record call audio. Each AI employee tells callers it is an AI assistant when it answers.

People who contact us: the name, email, business and message you send through the Contact form or a waitlist.

Connected tools: when a business connects a calendar, Nerro reads only the start and end times of busy events and writes the appointments it books. When it connects a CRM, Nerro sends a note of each real call (caller number, outcome and summary). Access tokens are encrypted at rest and never shown in the browser.

To answer calls, book and change appointments, take messages, hand calls to a person, send confirmations, show the business what happened, and keep the service secure and working. We don't sell personal information, and we don't use it for advertising.

These providers process information so Nerro can work:

• Vercel: Hosts the Nerro app and website.
• Supabase: Our database (United States).
• LiveKit: Carries call audio between the phone network and your AI employee.
• Deepgram: Turns caller speech into text and your employee's replies into speech.
• xAI (Grok), with Google (Gemini) as a fallback: The AI models that decide your employee's replies.
• Twilio: Phone numbers, text messages and outbound calls.
• Fly.io: Runs the voice worker that handles live calls.
• Resend: Sends account and alert emails.

Tools a business chooses to connect (Google Calendar, Outlook, HubSpot, Salesforce, Slack, its own webhook) receive the data described above.

Nerro sends texts (such as appointment confirmations) only to people who called the business or asked to be contacted. Reply STOP to stop texts from a business, or HELP for help. Message and data rates may apply. Mobile numbers and text-message consent are never shared with third parties or affiliates for marketing or promotional purposes.

Nerro uses only essential cookies: one to keep you signed in, one to remember your light or dark theme, and a short-lived one that protects connecting a calendar or CRM. There are no advertising or analytics cookies, so there is nothing to opt out of.

Call transcripts and their step-by-step logs are deleted after the period the business chooses, from 30 days to 2 years (1 year by default). The call record itself (date, length, outcome, summary) stays in the business's history. Account data is kept while the account is open.

To see, correct, export or delete information about you, email support@nerro.si. We reply within 45 days. If you called a business that uses Nerro, you can also ask that business directly, since it decides how your call information is used. A business can disconnect any tool at any time; Nerro then deletes the stored access for it.

Depending on where you live (for example California and other US states, or the EU and UK), you may have the right to know what we hold about you, to correct or delete it, to get a copy, and to object to how it's used. We don't sell or share personal information for advertising, and we won't treat you differently for using these rights.

Data is encrypted in transit, connection tokens are encrypted at rest, and every business's data is kept separate by database rules, not just application code. More on the Security page.

Nerro is a service for businesses and isn't meant for children under 16. We don't knowingly collect information about them through accounts.

When this policy changes, we update the date above, and tell account owners by email about any significant change.