Privacy Policy
Last updated: April 8, 2026
1. Introduction
Hercules Live ("Hercules," "we," "us," or "our") operates the websites hercules.live, portal.hercules.live, and app.hercules.live, as well as related AI voice agent services (collectively, the "Service").
Hercules Live is an Israeli company. This Privacy Policy explains how we collect, use, share, and protect your personal information when you use our Service. By using the Service, you agree to the practices described in this policy.
This policy applies to all users, including business owners who subscribe to our Service ("Customers") and individuals who interact with our AI voice agents via phone calls ("Callers").
Important distinction: For caller data (information collected during phone calls), the Customer (business owner) is the data controller — they determine the purposes and means of processing. Hercules Live acts as a data processor, processing caller data on behalf of the Customer to provide the Service. A Data Processing Agreement (DPA) is available upon request for Customers who require one.
2. Data We Collect
2.1 Account Information
When you create an account, we collect:
- Name and email address
- Phone number
- Company name
- Billing information (processed by our payment provider — we do not store credit card numbers)
2.2 Call Data
When our AI voice agent handles a call, we collect and process:
- Caller phone number
- Call duration and timestamps
- Call recordings and transcripts
- AI-generated call summaries
- Any information the caller provides during the conversation (name, appointment details, etc.)
- Data captured by the AI agent (customer data fields configured by the business owner)
2.3 Chatbot Data
When you interact with our website chatbot, we collect:
- Chat conversation history
- Name and email (when provided)
- Country (detected automatically)
- Page you were visiting
2.4 Usage Data
We automatically collect:
- Pages visited and interactions on our website
- Browser type, device information, and IP address
- Referral source
2.5 Cookies
We use Google Analytics (GA4) cookies to understand how visitors use our website. These are analytics cookies only — we do not use advertising or tracking cookies. See Section 10 for more details.
3. How We Use Your Data
We use your data for the following purposes, along with the legal basis for each:
- Provide the Service — answer calls, generate summaries, book appointments, send notifications. Legal basis: contractual necessity
- Process calls with AI — voice data is sent to our AI provider for real-time conversation processing. Legal basis: contractual necessity
- Schedule appointments — using our scheduling integration to check availability and create bookings. Legal basis: contractual necessity
- Send notifications — email summaries, SMS follow-ups, and service-related communications. Legal basis: contractual necessity
- Send marketing communications — product updates, tips, and offers (you can opt out at any time). Legal basis: consent
- Improve the Service — analyze usage patterns to make the product better. Legal basis: legitimate interest
- Provide support — respond to your questions and resolve issues. Legal basis: contractual necessity
- Process payments — manage your subscription and billing. Legal basis: contractual necessity
- Comply with legal obligations — meet regulatory requirements. Legal basis: legal obligation
4. Third Parties We Share Data With
We share data with the following service providers, solely to operate the Service:
| Provider | Purpose | Data Shared |
|---|---|---|
| OpenAI | AI voice processing | Voice audio, conversation context |
| Twilio | Phone infrastructure | Phone numbers, call audio |
| Cal.com | Appointment scheduling | Caller name, appointment details |
| Supabase | Database hosting | All service data |
| Google Cloud Platform | Application hosting | All service data |
| Firebase | Authentication | Account credentials |
| Resend | Email delivery | Email addresses, notification content |
| Stripe / Lemon Squeezy | Payment processing | Billing information |
| Google Analytics | Website analytics | Usage data, cookies |
We do not sell your personal data to third parties. We do not share your data for advertising purposes.
5. AI Data Processing
Our Service uses artificial intelligence to handle phone calls. This section explains how your data is processed by AI systems:
- Calls are handled by AI voice agents, not human operators
- Voice data is transmitted to and processed by OpenAI's API via secure WebSocket (WSS) connections in real time
- AI generates call summaries, transcripts, and appointment bookings based on conversation content
- We do not use your call data or conversation content to train AI models
- AI-generated outputs (summaries, transcripts, bookings) may contain errors, inaccuracies, or omissions
For information about AI limitations and liability, please refer to our Terms of Service, Section 6.
6. Data Security
We implement appropriate technical and organizational measures to protect your data, including:
- Encryption in transit (HTTPS/TLS for web, WSS for real-time audio)
- Secure cloud infrastructure (Google Cloud Platform)
- Access controls and authentication (Firebase)
- Regular security reviews
While we take reasonable measures to protect your data, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.
Data Breach Notification: In the event of a data breach that affects your personal data, we will notify affected users and relevant authorities within 72 hours of becoming aware of the breach, as required by applicable law.
7. Data Retention
We retain your data for as long as your account is active and for a reasonable period thereafter to fulfill our legal obligations, resolve disputes, and enforce our agreements.
- Account data — retained while your account is active and for 12 months after account closure
- Call recordings and transcripts — retained for the duration of your subscription plus 12 months after account closure
- Chatbot conversations — retained for 12 months
- Usage and analytics data — retained for 26 months (Google Analytics default)
- Billing records — retained for 7 years as required by law
You may request deletion of your data at any time by contacting us at [email protected]. We will process deletion requests within 30 days, subject to legal retention requirements.
8. Your Rights
Depending on your jurisdiction, you may have the following rights:
- Access — request a copy of your personal data
- Correction — request correction of inaccurate or incomplete data
- Deletion — request deletion of your personal data
- Restriction — request that we limit how we use your data
- Data portability — request your data in a structured, machine-readable format
- Opt-out — unsubscribe from marketing communications at any time
- Withdraw consent — where processing is based on consent, you may withdraw it at any time
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
9. International Data Transfers
Hercules Live is based in Israel. Your data may be transferred to and processed in countries outside of Israel, including the United States, where our service providers (OpenAI, Twilio, Google Cloud) operate.
Israel is recognized by the European Commission as providing an adequate level of data protection. For transfers to other countries, we ensure appropriate safeguards are in place, including data processing agreements with our service providers.
10. Cookies
We use the following cookies:
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
| _ga, _ga_* | Google Analytics | Distinguish unique visitors, track page views | 2 years |
We do not use advertising cookies, social media tracking cookies, or any cookies for purposes other than analytics. You can disable cookies in your browser settings, though this may affect some website functionality.
11. Children
Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If we learn that we have collected data from a child, we will delete it promptly.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and updating the "Last updated" date. For significant changes, we will notify registered users by email.
Your continued use of the Service after changes are posted constitutes your acceptance of the updated policy.
13. Contact Us
If you have questions about this Privacy Policy or want to exercise your data rights, contact our privacy team:
Hercules Live — Privacy
Email: [email protected]
General inquiries: [email protected]
Website: hercules.live
A Data Processing Agreement (DPA) is available upon request for Customers who require one for compliance purposes.
