Privacy Policy

1. Who we are

2gether AI is a service of 2gether Marketing LLC, doing business as 2gether AI, a Florida company. Questions and requests: admin@2gethermktg.com.

2. Businesses and their customers

For business users (owners and team members who sign in), 2gether AI decides how data is handled. For the leads and customers of those businesses, the business is the controller and 2gether AI is its service provider: we process their information on the business's instructions and never for our own marketing. Each business's own policy is at api.2getherai.com/legal/<business>/privacy.

3. Information we collect

• Account: name, phone, email, business name, role, notification preferences, and the Terms version you accepted (date, IP address, browser).
• Leads and conversations: contact details, messages across SMS, email, Facebook Messenger, Instagram DM, WhatsApp, and AI phone calls and voicemails, photos people send, appointments and orders, lead status, and each contact's consent record.
• Phone calls: AI calls are transcript-only by default; audio is streamed to our voice provider and transcribed, and the audio is kept only if the business turns recording on. Dialer calls by a person are recorded only when the business enables it.
• Email: with a connected Gmail or Outlook mailbox we read and send mail as described in section 6; open and click tracking is off unless the business turns it on.
• Device and usage: in the app, device identifiers, push tokens, app version, crash logs and basic usage events; in the dashboard, local storage for sign-in and preferences. The logged-in dashboard sets no advertising cookies.
• Public pages: our marketing site and the forms, booking pages and landing pages we host for businesses may load the Meta pixel and Google Ads tag, which set cookies and record page views and form submissions.

4. How we use information

• Operate the Service for each business: reply to leads, qualify them, book appointments, follow up, send reminders and reports.
• Send business users the notifications they opted into.
• Measure a business's advertising (section 7).
• Improve the Service using operational metrics, and keep it secure.

5. Automated and AI communications

Texts the Service sends to a business's leads are written and sent by an AI assistant working for that business, automatically; AI calls and voicemails may use an AI-generated voice, and the assistant says it is an AI when asked. Consent is never a condition of purchase: reply STOP to end texts or say “please don't call me” to end calls, and we honor both across every channel.

6. Connected accounts: Google and Microsoft

When a business connects an account we request only the scopes the enabled features need, through the provider's consent screen; access can be revoked at Google, Microsoft, or Settings → Integrations.

• gmail.modify, gmail.send, gmail.compose — read, label (“2gether AI”) and archive mail, send replies, create drafts in the business mailbox; gmail.readonly + gmail.send for a team member's own mailbox.
• calendar, drive, photoslibrary.readonly — availability and appointment events, business documents, photos for social posting.
• business.manage — read the listing, reviews and ranking data; post replies, updates and job photos on the business's behalf (drafted by AI, attributed to the business).
• adwords — read campaign performance; create and manage search campaigns (new campaigns are created paused); upload conversion results (section 7).
• Microsoft Mail.Send, Mail.ReadWrite, User.Read, offline_access — send as the connected person, create the drafts it sends, read mail and replies.

Tokens are encrypted before storage and never shown in the dashboard, API or logs. Our use of Google user data adheres to the Google API Services User Data Policy, including the Limited Use requirements: it is used only to provide or improve the features the business enabled, is not sold, not transferred to advertisers or data brokers, not used for advertising, and not used to develop, improve or train generalized AI/ML models; it is deleted when the business disconnects the integration or asks us at admin@2gethermktg.com.

7. Advertising measurement

When a business has connected its Meta pixel / Conversions API or Google Ads account, the Service sends that platform a hashed form of a lead's email and phone number plus the ad click identifier when the lead inquires, books or buys, so the business can see which ads produced real customers; this happens only for that business's own ads, never for ours. We do not sell personal information. To opt out of this sharing, email admin@2gethermktg.com with the business you contacted (“Do Not Sell or Share My Personal Information”).

8. Service providers (sub-processors)

• AI models and voice: Anthropic (Claude); OpenRouter, which routes requests to xAI and other model providers; xAI (Grok models and voices); Google (Gemini); Vapi (AI phone calls); Deepgram (speech to text); ElevenLabs (text to speech and transcription).
• Messaging and phone: Twilio; Meta (Facebook, Instagram and WhatsApp messaging, lead forms, pixel and Conversions API); GoHighLevel; Slybroadcast (voicemail delivery).
• Email: Resend; Google Workspace and Microsoft (connected mailboxes); Instantly (business-to-business outreach); MillionVerifier (address verification).
• Scheduling, payments and job records: Calendly; Stripe; QuickBooks; Jobber; ServiceTitan; USPS (address verification).
• Advertising and search data: Google (Ads, Places, Business Profile); Meta (ads); DataForSEO.
• Hosting, storage and notifications: Railway (API, PostgreSQL, Redis); Vercel; Cloudflare R2; Firebase Cloud Messaging and Apple Push Notification service.
• Your team and our support: team members on a business account see that account's leads and conversations; 2gether AI staff may view a business's dashboard to support it.
• Legal: if required by law or to protect the rights or safety of 2gether AI, our users or the public.

We do not sell personal information or share it with data brokers.

9. Security

Data is encrypted in transit; integration secrets and OAuth tokens are encrypted before storage; stored data is encrypted at rest by our hosting providers. Access is scoped to the connected organization and limited to the systems and personnel that need it.

10. Push notifications

The mobile app uses Apple Push Notification service and Firebase Cloud Messaging. Turn push off in your device settings or disable alert types in the app.

11. Data retention

We keep account and lead data while the business account is active and as long as we need it to run the Service and meet legal obligations; nothing is deleted automatically. On request, data is deleted or anonymized, except financial records kept for the period tax law requires, opt-out records kept so opt-outs stay honored, and audit records of consent and deletion.

12. Your rights

Depending on where you live you may have the right to access, correct, delete or receive a copy of your personal information, to opt out of its sale or sharing (section 7), to opt out of marketing (STOP, “please don't call me”, the unsubscribe link, device settings), and to appeal a decision. Emailadmin@2gethermktg.com with the business you dealt with, or use that business's request page (api.2getherai.com/legal/<business>/privacy-request); we confirm your identity and respond within 30 days.

13. Children

The Service is for businesses and their adult customers. We do not knowingly collect personal information from anyone under 16.

14. Changes

We may update this policy; the date above is the latest revision, and material changes are communicated in-app or by email.

15. Contact

2gether Marketing LLC, doing business as 2gether AI
Email: admin@2gethermktg.com