Privacy Policy

Last updated June 25, 2026

HelloCarol ("HelloCarol", "we", "us"), a service of Purple Circle, provides an AI executive assistant ("Carol") that you reach over SMS and WhatsApp. This policy explains what we access, how we use it, and the choices you have. Carol is read-only: she reads and summarizes, but never sends, drafts, deletes, or modifies anything in your connected accounts.

Information we access

• Account details you give us — your name, mobile number, time zone, and messaging channel (SMS or WhatsApp).
• Your Google data, with your explicit consent — read-only access to your Gmail, Google Calendar, and Google Drive, granted through Google's OAuth consent screen. Used only to answer your requests, prepare briefings, and research your meetings.
• Your CRM, if you connect it — sales users may connect a GoHighLevel account; we read contacts, notes, and opportunities (read-only) to prepare you for calls.
• Message content — the texts you send Carol and her replies, so the assistant can do what you ask.

How we use your information

Solely to provide the assistant features you request — answering questions, daily briefings, meeting prep, and research. We do not sell your information, and we do not use your data to train AI models.

SMS / text messaging

If you opt in, you will receive recurring automated messages from Carol (service notifications, daily briefings, and meeting prep). Message frequency varies. Message and data rates may apply. Reply STOP at any time to opt out, or HELP for help.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Information sharing with the subcontractors who help us operate the service (such as our messaging provider) is permitted solely to deliver the service. Text-messaging originator opt-in data and consent are never shared with any third parties for any other purpose.

Service providers

We share information only with vendors that operate the service on our behalf, under contract: Anthropic (the AI model and agent runtime), Composio (secure management of your account connections and read-only tool calls), Twilio (SMS and WhatsApp delivery), and Fly.io (hosting). Your Google and CRM data is accessed through your own authorized connection.

Google user data

HelloCarol's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. We request read-only scopes and never use Google data for advertising or model training.

Retention and deletion

You can disconnect at any time. Reply STOP to end messaging. To delete your account and revoke Carol's access to your connected accounts, contact us and we will remove your connections and associated data.

Security

Your account connections are managed by our provider and protected with encryption in transit and at rest. Carol's read-only design means a malicious message can never cause her to send or delete anything on your behalf.

Children

HelloCarol is for business use by adults and is not directed to anyone under 18.

Changes

We may update this policy; material changes will be reflected by the date above.

Contact

Questions or deletion requests: privacy@joinpurplecircle.com.

← Back to HelloCarol