Written in plain language on purpose. If you need the full legal privacy policy or a signed DPA for your own compliance needs, just ask.
Contact details you give us directly (name, email, phone), the conversations and data your AI workflows generate (call logs, form submissions, calendar bookings), and basic usage data on this website (pages visited, which tool you used). We don't buy or collect data from third-party brokers.
Client and lead data lives in a dedicated PostgreSQL database, access-controlled and not publicly queryable. Call recordings and transcripts, where applicable, are stored with the same access controls as the rest of your account data.
Your own team, our admin team (for support and account management), and no one else. We do not sell, rent, or share client data with third parties for marketing purposes, ever.
Passwords are hashed with bcrypt before storage, we never store or can see a plain-text password. Sessions use signed, httpOnly cookies, not accessible to page scripts.
If you cancel, your account data is retained for a reasonable period in case you return, then deleted on request. Email us anytime to request immediate deletion of your account and associated data.
Where we use infrastructure providers (hosting, database, email delivery), they process data only as needed to run the service, under their own security commitments, never for their own purposes.
If enabled, we use Google Analytics to understand site usage in aggregate. It's fully optional and can be disabled without affecting how the site or your account works.
Happy to talk through this before you sign up, not just after.
Get in touch