Privacy Policy

1. Two roles we play

• Controller — for data about you as our customer or user: your account, billing, support and how you use the Service.
• Processor — for personal data that you and your members put into the Service (for example, messages, files, client and contact records). Your organization decides why and how that data is processed; we process it only on its instructions to provide the Service. A Data Processing Agreement is available on request.

If you are a client or contact of one of our customers, please contact that customer first; we will help them respond.

2. What we collect

• Account data: name, email, avatar, language, time zone, role and organization.
• Content: messages, files, voice messages, call recordings and transcripts if recording is on, tasks, notes, knowledge base, client records and anything else you put into the Service.
• AI agent data: instructions, conversation context, results, and memory that agents derive from conversations to work better over time.
• Billing data: plan, invoices, balance and usage. Payment card details are handled by our Merchant of Record and are never stored by us.
• Technical data: IP address, approximate location derived from it (city and country), device and browser type, operating system version, device model and processor family where your browser reports them, session records, login times, activity timestamps (for example, "online" status), error reports and security logs. We use the device and location of a session only to show you and your workspace administrators where you are signed in.
• Communications: emails and support requests you send us.

3. Why we use it and on what legal basis

• To provide the Service you signed up for, including AI features, calls, notifications and hosting of your websites and apps — performance of our contract with you.
• To bill you, prevent fraud and keep accounting records — contract and legal obligation.
• To secure the Service, detect abuse, fix errors and measure load — our legitimate interest in a safe and reliable Service.
• To send service emails (sign-in codes, invitations, billing notices, important changes) — contract. We send marketing emails only with your consent, and you can unsubscribe at any time.
• To comply with law and respond to lawful requests — legal obligation.

We do not sell personal data, we do not use it for targeted advertising, and we do not use your content to train AI models.

4. AI processing

When you or your members use AI agents, voice, transcription or translation, the relevant content is sent to the AI providers listed on our Subprocessors page to generate a response. They process it under their API or commercial terms, which do not allow them to train their models on it; they may keep it for a short time to prevent abuse, as described in their terms.

If your organization connects its own AI provider keys, that content goes to the provider under your organization's own agreement with it.

5. Who we share data with

• Subprocessors that help us run the Service — hosting, content delivery and security, AI models, speech, email, payments and error monitoring. The current list is on our Subprocessors page.
• Other members of your organization, according to the roles and permissions its administrators set.
• Services your organization connects (for example, a messenger or email account) — only as you configure.
• Authorities, when required by law, and professional advisers under confidentiality.
• A buyer or successor, if our business is reorganised or sold; we will tell you before your data falls under a different privacy policy.

6. International transfers

Some subprocessors are located outside your country, including in the United States. Where data from the European Economic Area, the United Kingdom or Switzerland is transferred, we rely on adequacy decisions or the European Commission's Standard Contractual Clauses and equivalent safeguards.

7. How long we keep data

• Account and workspace content — while your workspace is active. After it is deleted, data is removed from active systems within 30 days and from backups when they expire.
• Messages or files deleted by users are removed from active systems; copies may remain in backups until they expire.
• Billing and tax records — as long as the law requires, usually up to 10 years.
• Sign-in sessions (IP address, approximate location, device) — while the session is active and for 180 days after it ends or was last used, then deleted.
• Security logs — for a limited period, usually up to 12 months.

8. Security

We protect data with encryption in transit, access controls and isolation between organizations at the database level, role-based permissions, short-lived access tokens, secret management, regular backups and monitoring. No system is perfectly secure; if a breach affects your personal data, we will notify you and the authorities as required by law.

9. Cookies

We use only cookies that are strictly necessary for the Service: to keep you signed in, remember the last organization you opened and the interface language, and complete registration. We do not use advertising or cross-site tracking cookies, so we do not show a cookie banner. If this changes, we will ask for your consent first.

10. Your rights

Depending on where you live (for example, under the GDPR, the UK GDPR or California law), you may have the right to access, correct, delete or export your personal data, to object to or restrict processing, and to withdraw consent. You can do much of this in your profile and workspace settings; for anything else email [email protected]. We will answer within 30 days.

You also have the right to complain to your local data protection authority.

11. Children

The Service is not intended for anyone under 18, and we do not knowingly collect their personal data.

12. Changes

We may update this policy. For material changes we will notify workspace owners by email or in the product before they take effect.

13. Contact

Humanless (legal entity in registration), Address will be published after registration. Email: [email protected].