Privacy policy

Two different relationships run through this product, and they carry different obligations.

• Your account data — your name, email, company, billing details. We are the controller. This policy governs it.
• Your customers' data — the people your AI employees call, text and email, and the content of those conversations. You are the controller. We are your processor, acting on your instructions. Your own privacy notice governs what you tell those people.

If you need a data processing agreement, write to privacy@teamaiops.com.

From you, directly: name, email address, password (stored only as a hash we cannot reverse), company name, time zone, and the business information you configure your AI employees with.

From your use of the service: IP address, browser and device information, pages visited, and timestamps of actions taken in your account.

Through your AI employees: phone numbers, names and contact details of the people they interact with; call audio where recording is enabled; transcripts; message content; and metadata such as call duration and outcome.

Through Stripe: billing address and the last four digits and expiry of your card. We never receive or store full card numbers.

• To run the service you are paying for.
• To bill you, and to chase payment if it fails.
• To send transactional email — verification, receipts, alerts.
• To investigate faults, abuse and security incidents, and to keep an audit trail of who changed what.
• To meet legal and tax obligations.

Where the GDPR applies, our legal bases are performance of a contract, legitimate interests in securing and improving the service, and legal obligation.

Running the service means passing data to the providers below. Adding a new one is a change to this list.

We also disclose data where the law requires it, and to advisers or an acquirer in a sale of the business, under confidentiality.

• Account data — while your account is open, then 30 days after closure.
• Conversations, recordings and transcripts — while your account is open, unless you delete them sooner. You control this.
• Audit logs — 24 months, because their value is in answering questions about the past.
• Billing records — seven years, as tax law requires.

Depending on where you live you may have the right to access your data, correct it, delete it, receive a portable copy, object to processing, or withdraw consent. Residents of California may also request disclosure of what we collect and opt out of sale or sharing — we do neither, but the right exists regardless.

Exercise any of these by writing to privacy@teamaiops.com. We will respond within 30 days and will not treat you worse for asking.

If you are one of your customers' contacts rather than an account holder, your request should go to the business that contacted you — we hold that data on their behalf. Write to us anyway if you cannot reach them and we will help route it.

Data is encrypted in transit and at rest. Passwords are hashed. Access to production data is limited to staff who need it, and staff actions on a customer account are written to that customer's own audit log. Payment details never reach our servers.

No system is perfectly secure. If we suffer a breach affecting your data we will tell you promptly and tell you what we know.

Our providers operate in the United States and may process data elsewhere. Where data moves out of the UK or EEA we rely on standard contractual clauses or an adequacy decision.

The service is for businesses. It is not directed at children and we do not knowingly collect data from anyone under 16. If you believe we have, write to privacy@teamaiops.com and we will delete it.

We will post updates here and change the date at the top. For material changes we will email account holders.

privacy@teamaiops.com — or see our cookie policy and terms of use.

TeamAIOps
[Registered business address]