These Terms of Service (the “Terms”) govern the use of the Mylos AI receptionist service (the “Service”) by a business customer (“Client”, “you”). The Service is provided by Kiarash Zamani, a sole proprietor carrying on business under the name “Mylos” in Vancouver, British Columbia (“Mylos”, “we”, “us”). Together with Schedule A — Data Processing Agreement below, and the Privacy Policy, these Terms form the entire agreement between you and us for the Service (the “Agreement”).
Mylos provides an AI-powered virtual receptionist that answers telephone calls on your behalf, checks availability against a calendar you connect, books, reschedules and cancels appointments, captures enquiries where no appointment is made, and sends transactional text messages to the people who call you (each an “End Customer”).
We may add, change, or remove features. We will not make a change that materially reduces the core functionality described above during a paid term without notifying you.
You must provide accurate account information and keep it current. You are responsible for all activity under your account and for keeping your API keys and credentials confidential. Tell us promptly at security@getmylos.com if you believe a key has been exposed; we can rotate it for you.
You must be a business, acting in the course of business, and legally able to enter this Agreement. The Service is not offered to consumers.
These obligations are fundamental to the Agreement.
Calendar booking is an optional feature. If your account is configured to capture enquiries only, the Service takes your callers’ details and passes them to you, and no calendar is connected or accessed.
If you enable calendar booking, you authorize access to a Google Calendar through Google’s OAuth consent flow. We request the narrowest scopes that allow us to see when you are busy and to manage the events we create for your bookings; the specific scopes and the reasons for them are listed in Section 4 of the Privacy Policy. You may revoke this access at any time, from your Google Account. Revoking it stops the Service from booking appointments.
Your Google authorization tokens are stored encrypted and are never displayed back to you or disclosed to a third party. On disconnection or termination we delete the stored token and any cached calendar data within thirty (30) days. Events already written to your calendar remain yours.
Fees, plan inclusions, and any fair-use limits are those set out on our pricing page or in a written order between us. Pilot and trial periods are offered at our discretion, may be modified or ended, and confer no ongoing right to the Service. Fees are exclusive of taxes. Payment is handled by a third-party payment processor; we do not receive or store your card details.
The Service uses automated speech recognition and large language models. It can mishear, misunderstand, or misrecord what a caller says. It is not a person and does not exercise judgment. You acknowledge that:
We aim to keep the Service available continuously but do not commit to an uptime service level. The Service depends on third parties — a telephony and speech provider, Google Calendar, a text messaging provider, and a database host — and their outages will interrupt it. Support is provided by email on business days.
We own the Service, including its software, models, prompts, and documentation. You own your business data, your customers’ information, and your calendar. Nothing in this Agreement transfers ownership. You grant us only the licence necessary to operate the Service for you.
We may use aggregated, de-identified information about how the Service performs — call volumes, booking success rates, error rates — to operate and improve it. Such information will not identify you, your business, or any End Customer.
Each party will protect the other’s non-public information with at least reasonable care and use it only to perform this Agreement. This does not apply to information that is public, already known, independently developed, or required to be disclosed by law.
The Agreement runs until terminated. You may terminate at any time. We may terminate for convenience on thirty (30) days’ notice, or immediately if you materially breach these Terms — in particular Section 3 — or if your use exposes us or an End Customer to legal risk. We may suspend the Service immediately to prevent harm, and will tell you why.
On termination we stop processing, and within thirty (30) days delete or de-identify the personal information we hold for you, except records we are required to retain (including opt-out records, which we keep so that a person who asked not to be contacted is not contacted again). You may request an export of your booking data before deletion.
Except as expressly stated in this Agreement, the Service is provided “as is” and “as available”. To the fullest extent permitted by law we disclaim all other warranties, express or implied, including merchantability, fitness for a particular purpose, and non-infringement. We do not warrant that the Service will be uninterrupted, error-free, or that it will capture every call or every detail correctly.
To the fullest extent permitted by law, neither party is liable for indirect, incidental, special, consequential, or punitive damages, or for lost profits, lost revenue, lost business, or lost data, however caused.
Our total aggregate liability arising out of or relating to the Agreement is limited to the fees you paid or owed us under the Agreement in the three (3) months before the event giving rise to the claim. Where that event occurs during a pilot or trial period, or otherwise before any fee has become payable, our total aggregate liability is limited instead to the fees that would have been payable for three (3) months under the plan you were piloting or had selected.
These limits do not apply to a party’s liability for fraud, wilful misconduct, or personal injury or death caused by negligence, or to your obligation to pay fees.
Each provision of this Section operates separately. If any part of it is held unenforceable, that part is severed and the remainder continues to apply to the fullest extent permitted by law.
You will defend and indemnify us against third-party claims arising from your breach of Section 3 (Your responsibilities) or of Schedule A, including a claim by an End Customer or a regulator that you lacked a lawful basis to collect or use their personal information. We will defend and indemnify you against a third-party claim that the Service infringes that party’s intellectual property.
We may update these Terms. For material changes we will give you at least thirty (30) days’ notice by email, and the change takes effect at the start of your next billing period. If you do not accept a material change, you may terminate before it takes effect. Changes to Schedule A that would reduce the protection of personal information require your agreement.
This Agreement is governed by the laws of the Province of British Columbia and the federal laws of Canada applicable there. The courts of British Columbia have exclusive jurisdiction, and each party attorns to that jurisdiction.
Forms part of the Terms of Service. Effective on the same date.
This Schedule applies whenever Mylos handles personal information about your customers. It is the Data Processing Agreement referred to on our website. No separate signature is required: it takes effect when you accept the Terms.
In respect of End Customer personal information, you are the organization that determines the purposes for which it is collected, used, and disclosed. Mylos collects and processes it on your behalf and on your instructions, as a service provider, and for no independent purpose of its own.
Your instructions are: (a) these Terms, (b) the settings you configure in the Service, and (c) any further written instruction we agree to. We will tell you if, in our opinion, an instruction breaches applicable privacy law, and we may decline to follow it.
In respect of your own Business Client information — your account details, your configuration, your billing records — Mylos acts on its own behalf, as described in the Privacy Policy.
| Purpose | To answer your calls, check availability, book and manage appointments, capture enquiries, and send transactional text messages, on your behalf. |
|---|---|
| Duration | For as long as the Agreement is in force, plus the deletion period in Section A7. |
| Categories of individuals | Your customers and prospective customers who telephone your business. |
| Types of personal information | Name; telephone number; the service or issue described, including any asset or vehicle identifier; requested and booked appointment times; text-message delivery status; and, at the voice provider only, call audio and the resulting transcript. |
| Sensitive information | None is requested. You must not configure the Service to collect payment card numbers, government identifiers, or health information. |
| Sub-processor | Function | Processing location |
|---|---|---|
| Google (Google Calendar API) | Availability checks; appointment calendar events | Outside Canada |
| Twilio | Sending and receiving text messages | Outside Canada |
| Retell AI | Telephony and speech-to-text for the AI receptionist | Outside Canada |
| Supabase | PostgreSQL database hosting | ca-central-1 — Montréal, Canada |
| Sentry | Error monitoring and debugging | Outside Canada; personal information is not intentionally captured |
Personal information is stored in Canada. As set out in Section A5, several sub-processors process limited data outside Canada in order to deliver their services. Personal information processed outside Canada may be subject to the laws of that jurisdiction, including lawful access by its courts, law enforcement, and other authorities. We remain accountable for personal information we transfer to a sub-processor for processing, and we use contractual means to require a comparable level of protection while it is in that sub-processor’s hands.
Neither PIPEDA nor BC PIPA requires that personal information be stored in Canada, and BC PIPA imposes no foreign-storage notification obligation on a private-sector organization. You remain responsible for describing this processing to your own customers in whatever notice or policy you give them. If you are a public body, or an organization subject to Alberta’s Personal Information Protection Act (which does require notice about service providers outside Canada), additional obligations may apply to you and you are responsible for meeting them.
On termination of the Agreement, and on your written request at any time, we will delete or de-identify the End Customer personal information we hold for you within thirty (30) days. We will delete your stored Google authorization token and any cached Google Calendar data within the same period. We may retain information where law requires, and we retain opt-out records for as long as necessary to honour the opt-out that created them. You may request an export of your booking data before deletion.
On reasonable written request, and not more than once a year unless a breach has occurred, we will provide the information reasonably necessary to demonstrate compliance with this Schedule. Any on-site audit is at your cost, on thirty (30) days’ notice, during business hours, and must not disrupt the Service or compromise another client’s confidentiality.
If this Schedule conflicts with the Terms, this Schedule prevails in respect of the processing of End Customer personal information. If it conflicts with the Privacy Policy, this Schedule prevails as between you and us; the Privacy Policy continues to govern what we tell individuals.