Privacy Policy

What we collect

• Account data: your name, work email address and password. Passwords are stored hashed by our authentication provider and we can never see them.
• Contact data you submit: the first name, last name and phone number of each contact you ask us to analyze, and the results we return.
• Billing data: your plan, credit balance and payment history. Card details are handled by Stripe. We never see or store full card numbers.
• Usage data: API and MCP requests, timestamps, the API key or account used, and errors. We use this to run rate limits, billing, security and support.
• Partner applications: your name, business email, company, LinkedIn profile, phone number if you give it, and when you expect to post.
• Website data: the cookies described in the Cookies section.

How we use it

• To provide the service: analyzing the contacts you submit and returning a grade, an action and a reason for each one.
• To create and manage your account, credits, subscriptions and payments.
• To keep the service secure, enforce rate limits and prevent abuse.
• To review Partner applications and run the Partner program.
• To send you service messages about your account, and product updates if you've agreed to receive them.

Our lawful bases are performance of our contract with you, our legitimate interests in running, improving and securing the service, compliance with our legal obligations, and your consent where we ask for it. You can withdraw consent at any time.

Who we share it with

We use a small number of trusted service providers (processors) to run the service. They may only use your data to provide their service to us:

• A specialist phone-data provider, used to analyze the contacts you submit.
• Supabase, for our database and authentication.
• Vercel, for hosting the website and application.
• Stripe, for payments and subscriptions.
• An email delivery provider, for account and service emails.
• Calendly, when you book a call with us. If you book from inside the app, we pass your name and email address so you don't have to type them again.
• Google Analytics, to understand how the site is used, and only if you accept cookies.

We don't sell personal data and we don't share it for advertising. We may disclose data if the law requires it, to protect our rights or users, or as part of a sale or reorganization of our business.

International transfers

Some of our providers are based in, or store data in, the United States. When personal data leaves the UK, we rely on appropriate safeguards, such as the UK Extension to the EU-US Data Privacy Framework, the UK International Data Transfer Addendum or the UK International Data Transfer Agreement.

How long we keep it

• Account data: we keep your account data while your account is active. If you ask us to close your account, we will delete or anonymize personal data associated with the account within 30 days, except where we need to retain information for legal, billing, security or dispute-resolution purposes.
• Contact data and results: we keep uploaded contact data and generated results until you delete them or ask us to close your account. On account closure, we will remove them from our active systems within 30 days.
• Billing records: we may retain billing and transaction records for as long as required for tax, accounting and legal purposes.
• Usage and security logs: we retain these only for as long as reasonably necessary for security, fraud prevention, troubleshooting and service operation.
• Partner applications: we retain Partner application information only for as long as reasonably necessary to administer the Partner program and maintain appropriate business records.

Your rights

Under UK data protection law, you can ask us to access, correct, delete or export your personal data, to restrict or object to how we use it, and to withdraw consent. Email support@willthispersonanswer.com and we'll respond within one month. We may need to confirm your identity first.

If you're unhappy with how we've handled your data, please contact us first. You also have the right to complain to the Information Commissioner's Office at ico.org.uk.

If someone whose details were submitted by one of our customers contacts us about their data, we'll help where we can and refer them to that customer as the controller.

Security

We protect data with encryption in transit, hashed API keys and passwords, access controls and limited staff access. No system is completely secure, so please keep your API keys private and rotate them in the app if you think one has been exposed.

Cookies

We use essential cookies to keep you signed in and to keep the service secure. These are needed for the service to work, so they don't require consent.

We also set one cookie that isn't strictly essential: if you arrive through somebody's referral link, we remember their referral code for 30 days so that the account you create can be credited to them. It holds a short code and nothing about you. You can clear it in your browser at any time.

When you open the booking widget, Calendly loads on the page and sets its own cookies. Nothing of Calendly's loads until you click to book.

If you accept cookies, we use Google Analytics to understand how the site is used. Nothing of Google's loads until you accept, and declining means it never loads at all. We don't use advertising cookies.

Children

The service is for businesses and isn't intended for anyone under 18. We don't knowingly collect data from children.

Changes

We'll update this page when our practices change and change the date at the top. If a change is significant, we'll tell you by email or in the app.

Contact

Cold Calling Group Ltd, 5 Ducketts Wharf, South Street, Bishops Stortford, Hertfordshire, CM23 3AR, United Kingdom. Email: support@willthispersonanswer.com.