Interpretation and definitions
Capitalized terms have meanings as defined in this section and apply regardless of whether they appear in singular or plural form.
- Account: A unique account created to access parts of our Service.
- Affiliate: An entity that controls, is controlled by, or shares common control with the Company.
- Company: Refers to StudioMeta Lte.., headquartered in Montreal, QC, Canada.
- Cookies: Small files stored on your device that track activity and improve your experience.
- Country: Refers to Quebec, Canada.
- Device: Any device capable of accessing our Service, including computers, smartphones, or tablets.
- Personal Data: Information that identifies or can be used to identify an individual.
- Plugin: The StudioMeta Voice AI WordPress plugin, available at wordpress.org/plugins/studiometa-voice-ai.
- Service: The website at https://studiometa.io and the StudioMeta Voice AI plugin and hosted API.
- Service Provider: A third party processing data on behalf of the Company.
- Usage Data: Information collected automatically during your interaction with our Service.
- You: The individual accessing our Service or the organization you represent.
Data we collect
From website visitors
- Name and email address
- Phone number and mailing address (if provided)
- Device details such as IP address, operating system, and browser
- Website interaction metrics including pages visited and time spent
From WordPress plugin users (site owners)
- WordPress site URL and admin email address
- Business name and plugin/WordPress version
- Agent configuration: name, voice, system prompt, knowledge base, and widget settings
- Usage data: voice minutes used and chat messages sent per billing period
- Stripe payment information (processed directly by Stripe — we do not store card details)
- If you connect Google Calendar: an encrypted OAuth token used to check availability and create appointments on your behalf (see “Google Calendar Integration” below)
From your website visitors (end users of the widget)
- Voice audio and chat messages, transmitted to our API solely to generate AI responses
- Conversation transcripts stored temporarily and associated with your license
- IP address for rate limiting and abuse prevention
- If the AI assistant books an appointment on your behalf: your name, email, and the requested appointment time
Cookies and tracking
We use cookies and similar technologies to monitor and enhance your experience. You can adjust your browser settings to control cookie preferences, though some features may not function properly if cookies are disabled.
- Essential cookies: Required for basic functionality
- Preference cookies: Store your preferences for a customized experience
- Analytics cookies: Help us understand usage trends and improve the Service
How we use your data
We use your Personal Data to:
- Deliver and improve the Service and WordPress plugin
- Manage your account, license, and billing
- Fulfill contracts such as processing purchases and activating licenses
- Send transactional emails (license keys, usage alerts, monthly reports)
- Share relevant offers or product updates (you may opt out at any time)
- Conduct internal analysis to improve performance and security
We may share your data in the following scenarios:
- Service Providers: Including Google (Gemini AI API and, if you connect it, Google Calendar API), Stripe (payments), and n8n (workflow automation) to support our operations
- Business transactions: Such as mergers or acquisitions
- Legal compliance: When required by law or to protect our rights
- With your consent: For any other specific purpose
Third-party services
The StudioMeta Voice AI plugin uses the following third-party services to function:
- Google Gemini API — Powers AI voice and chat responses. Your conversation data is transmitted to Google’s servers. See Google Gemini Terms and Google Privacy Policy.
- Google Calendar API — Used only if you choose to connect your calendar, to check availability and create appointments. See “Google Calendar Integration” below and the Google Privacy Policy.
- Stripe — Processes subscription payments. We do not store card details. See Stripe Privacy Policy.
- n8n (self-hosted) — Sends transactional emails and usage alerts via our own infrastructure.
Google Calendar Integration
If a website owner using our plugin chooses to connect their Google Calendar, StudioMeta acts on their behalf to enable the AI assistant to check availability and book appointments for site visitors.
What we access
With the website owner’s explicit consent, granted through Google’s own OAuth consent screen, we request two limited permissions:
- View free/busy time on the connected calendar, to avoid double-booking
- Create, update, and delete calendar events that our system creates for appointments booked through the AI assistant
We do not request, and cannot access, the content of any other calendar events, contacts, or any other Google account data.
How we use this data
Calendar data is used exclusively to power the appointment-booking feature: determining open time slots and creating the corresponding calendar event when a visitor books an appointment. It is not used for advertising, analytics, or any purpose other than providing this feature to the website owner.
Storage and security
OAuth access and refresh tokens are encrypted at rest (AES-256-GCM) on our servers and are never exposed to the website’s visitors or stored in the WordPress database. Tokens are used only to make the specific API calls described above.
Retention and revocation
Tokens are retained only while the calendar connection remains active. A website owner can disconnect their calendar at any time from their WordPress admin dashboard, or by revoking access directly from their Google Account permissions page, which immediately invalidates our access.
Data retention
We keep Personal Data only as long as necessary for the stated purposes. Conversation transcripts associated with a license are retained while the license is active and for 90 days after termination. Usage data is retained for analysis and billing purposes. Appointment records (name, email, requested time) are retained only as long as needed to fulfill and support the booking. Google Calendar tokens are retained only while the calendar connection remains active, as described above.
Data transfers
Your information may be processed outside your jurisdiction, including in countries with different privacy laws. We ensure appropriate safeguards are in place for such transfers in accordance with applicable law.
Your privacy rights
You have the right to:
- Access, correct, or delete your Personal Data
- Opt out of marketing communications
- Request data portability in applicable cases
- Withdraw consent where processing is based on consent, including disconnecting Google Calendar access at any time
To exercise your rights, contact us at [email protected].
Security
We implement robust security measures to protect your data, including encrypted connections (HTTPS/WSS), token-based license authentication, domain locking, and encryption at rest for third-party access tokens such as Google Calendar credentials. However, no method of transmission or storage is completely secure.
Children’s privacy
Our Service is not intended for children under 13. If you believe we have collected information from a minor, contact us immediately at [email protected] and we will remove the data promptly.
Links to third-party websites
We may link to external websites. We are not responsible for their privacy practices and encourage you to review their policies independently.
Changes to this policy
We may update this policy periodically. Significant changes will be notified via email or prominent website notices. The “Last updated” date at the top of this page reflects the most recent revision.
Contact us
If you have any questions or concerns about this Privacy Policy, reach out to us:
- Email: [email protected]
- Website: studiometa.io/contact