Skip to content
Legal

Privacy policy

Last updated: October 25, 2026

lippem LLC is the controller for data needed to administer accounts, security, support, and billing. When a business connects channels and communicates with its own contacts, that business determines the purposes of the communication and Lippem processes the data under its instructions, unless law requires otherwise.

Depending on enabled features, Lippem processes:

  • Account and operational data: name, email, company, users, roles, sessions, settings, and security logs.
  • Connected asset data: WABA identifiers, WhatsApp Business numbers, granted permissions, and access tokens.
  • Contact and conversation data: name, phone number or platform identifier, username, profile image when supplied by the provider, text, audio, images, video, attachments, reactions, timestamps, delivery status, and webhook metadata.
  • Content uploaded by the customer for AI agents, including documents, answers, and business information.
  • Questions users voluntarily enter into Lippem's help assistant.

We also retain records of acceptance of the terms and acknowledgement of the privacy notice: user, workspace, email, date, language, document versions and signup stage. We use them to establish the accepted conditions and handle inquiries or disputes; they do not authorize marketing.

Connecting Google Calendar is optional and authorized through Google OAuth. We access your account identifier and verified email; your calendar list and its permissions, names, and time zones; availability intervals; and event data returned by Google, such as identifiers, titles, descriptions, dates and times, locations, organizers, attendees and their responses, recurrence details, and video meeting links. We store encrypted OAuth access and refresh credentials, agenda settings, copies of synchronized events, and appointment records linked to WhatsApp contacts or conversations where applicable.

  • Authorize, connect, and maintain channels requested by the customer.
  • Receive, display, send, and synchronize messages, files, and status updates in the shared inbox.
  • Run assignments, workflows, and customer-configured AI responses when enabled.
  • Answer questions about using Lippem through the help assistant and public product guides.
  • Secure the platform, prevent abuse, troubleshoot incidents, provide support, and administer accounts.

We use Google Calendar data to display calendars and events, check availability, and create, update, reschedule, or delete events following user actions or authorized automations. We may add attendees and request Google Meet links; Google may send invitations and updates according to the action and notification option selected. This connection does not grant access to Gmail, Drive, or Sheets. Authorized workspace users may access integration information according to their Lippem permissions.

We share only the data needed with Meta Platforms to operate WhatsApp Business; with infrastructure, storage, transactional email, monitoring, and payment providers, including OVHcloud, Cloudflare R2, Brevo, and Stripe as applicable; with the AI provider enabled by the customer; and with OpenAI to process questions sent to Lippem's help assistant. We do not automatically send workspace conversations or documents to this assistant. Some providers process data in other countries, including the United States, subject to their contracts and safeguards. We do not sell contact or conversation data.

We transfer the data needed to perform these actions to Google, including contact details that a user adds to an appointment. Infrastructure providers process data needed to host and operate the integration. If the customer enables an AI agent's scheduling tools, availability and appointment lookup or management results become part of the context sent to the AI provider used for that conversation. This supports replies and the requested booking; it does not automatically send all calendars to the model. Information shared with attendees or contacts depends on the invitations and replies authorized by the user or their automations.

Lippem's use and transfer of information received from Google APIs adhere to the Google API Services User Data Policy, including its Limited Use requirements. We limit use to requested scheduling and assistance features. We do not sell this data or use it for advertising, credit assessment, or training general-purpose AI models. Transfers are limited to authorized features, security needs, legal compliance, or a corporate transaction with the prior consent required by Google. We do not allow our staff or providers to read this data except with the user's affirmative consent for specific data, for security, to comply with law, or for aggregated uses permitted by Google.

Provider tokens are stored encrypted, customer data is isolated by tenant, and access is protected by authentication, authorization, and session controls. When a Meta channel is disconnected, Lippem requests removal of its webhook subscription and deletes the stored reusable token from active systems.

We retain account, contact, conversation, and connected calendar data while the service is active or for as long as needed to provide the requested functions. We acknowledge a verified request within 7 business days and complete it in active systems within 30 days, unless legal obligations, disputes, or fraud prevention require retention. Backups are overwritten on their normal cycle and may retain data for up to 90 days without returning it to operational use. See our data deletion instructions.

Disconnecting Google in Lippem disables the connection and deletes reusable credentials from our active systems. It does not automatically revoke permission in your Google Account: you can also remove access through your Google Account's third-party connections. Disconnecting or revoking permission does not automatically delete synchronized copies, settings, or appointment history stored in Lippem. We retain these for workspace features and history while needed or until a deletion request is fulfilled, subject to the exceptions and time limits in section 6.

You may request access, correction, or deletion. If you are a contact of a business using Lippem, contact that business first so it can identify your conversation, or email support@lippem.com. Administrators can also disconnect channels in Lippem and revoke access from Meta.

To request deletion of Google data stored in Lippem, email support@lippem.com with the Google account, workspace, and data you want deleted. We verify your identity and authority; do not send passwords or tokens. See our Google data deletion instructions. Deleting copies in Lippem does not delete original Google Calendar events. Deleting an event in Google is a separate action that may affect attendees.

Anyone whose data Lippem processes may request access, correction, or deletion at support@lippem.com, including people who do not have a Lippem account or have stopped using the service. We may request only the information needed to verify identity and authority. Removing an integration's access and requesting deletion of data already stored are separate actions.

Lippem is a business service and is not directed to children under 13.

We may update this policy as the platform evolves. The latest update date appears at the beginning of this document. We will communicate material changes through registered contact channels or a visible notice in Lippem. Before using Google data for a new purpose or accessing data not previously disclosed, we will update this policy and obtain the user's consent where required by Google or applicable law.

The controller responsible for this policy is lippem LLC, a Wyoming limited liability company located at 30 N Gould St Ste N, Sheridan, WY 82801, United States.

For questions about how your data is handled, email support@lippem.com or call +1 (307) 218-8166.