Ava Scheduling

Effective date: October 28, 2026

Ava Scheduling uses Google Calendar authorization solely to create consultation appointments that a person has requested and confirmed. Google user data is not sold or used for advertising.

Scope

This policy describes the information handled by the Ava automated scheduling integration operated by QuoteStage. It applies to appointment scheduling and the associated Google Calendar integration.

Information handled

When an appointment is requested, the service may process:

• The prospect's name, telephone number, general location, requested appointment time, lead reference information, and a brief scheduling context.
• Calendar-event details needed to create the requested appointment, including its title, start and end time, description, and callback information.
• A Google OAuth authorization token that permits the service to create calendar events.
• Operational information such as a call identifier, request timestamps, and success or error status.

How Google data is used

The current integration uses Google Calendar access to insert a confirmed consultation event into the authorized calendar. It does not use Google Calendar to build advertising profiles, sell information, or access Gmail, Google Drive, Google Contacts, or unrelated Google services.

Use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

Purpose

Information is used only to offer appointment availability, create the appointment selected by the prospect, provide the licensed agent with the information needed for the scheduled call, maintain service security, and diagnose failures.

Service providers

The integration relies on service providers that may process limited information on QuoteStage's behalf, including Google Calendar for appointments, Calendly for availability, Railway for application hosting, ElevenLabs for the automated voice interaction, and Twilio for telephone services. Each provider processes information under its own terms and privacy practices.

Storage and retention

• The Google OAuth refresh token is stored as a protected server environment variable and retained until it is replaced or authorization is revoked.
• Created calendar events remain in the authorized Google Calendar until they are changed or deleted by an authorized calendar user.
• Temporary appointment-option context is held in application memory for a short period and then expires.
• Infrastructure providers may retain operational logs according to their normal security and retention practices.

Sharing and sale

Google user data is not sold. Information is shared only with the service providers needed to operate the scheduling workflow, the authorized insurance representative handling the consultation, or when legally required.

Security

QuoteStage uses encrypted network connections, restricted service credentials, and protected environment-variable storage. No system can guarantee absolute security, but access is limited to what is needed to operate the scheduling service.

Your controls

The Google account owner may review or revoke the application's authorization through Google Account third-party connections. Authorized calendar users may also edit or delete events from Google Calendar. Privacy questions may be directed to the support contact displayed on the application's Google OAuth consent screen.

Changes

This policy may be updated when the integration, service providers, or legal requirements change. The effective date above will be revised when material updates are published.