Privacy policy

1. Our two roles

We process the data of the Service's own users — the employees of a customer company: name, work email, phone, sign-in sessions and actions in the interface. For this data we are the controller.

The data a customer company keeps in its workspace about its own clients and partners (contacts, companies, deals, messages, calls and call recordings) belongs to that company. We process it only on the company's behalf and on its instructions; the company is the controller and is responsible for having a legal basis to collect it and for informing the people concerned.

2. What data we collect

When you register and use the Service: email, name, company name, phone number, position and department, and technical data — IP address, device and browser type, actions in the interface and access logs.

When the company uses telephony: call metadata (numbers, time, duration, status) and, if the company has turned recording on, audio recordings of calls.

When the company connects messengers or mailboxes: the content of the correspondence needed to show it in the Service.

When you leave a request on the website: the name, phone number, email and message you enter in the form.

We do not collect special categories of personal data and do not receive bank card details: during this period invoices are issued by a manager on request.

3. Why we process data and on what basis

To provide the Service under the public offer: registration, sign-in, access to features, support, service notifications and billing (performance of a contract).

To keep the Service secure, investigate incidents, prevent abuse and improve the product (our legitimate interests, balanced against your rights).

For website statistics in the EEA, the United Kingdom and Switzerland, and for marketing emails — only with your consent, which you can withdraw at any time.

To comply with legal obligations, such as accounting and responding to lawful requests from authorities.

4. Call recordings and speech recognition

Call recording is turned on by the customer company in its telephony settings. Informing the participants of a call and obtaining their consent to recording where the law requires it (for example, in Germany, in Australia and in several US states) is the company's responsibility.

For workspaces in the United States, Germany, the United Arab Emirates, Brazil and Australia speech recognition is turned off: call recordings, voice messages and voice notes are not converted to text and are not sent to speech recognition providers.

For other workspaces, speech may be converted to text by our own service or by external speech recognition providers acting on our behalf. Recordings are kept in our object storage and are available only to users of the workspace concerned.

5. AI features

For summaries, suggested replies, tasks and analytics, fragments of text may be sent to artificial intelligence model providers engaged by us. They act on our behalf and may not use the data to train their models. The customer company can turn AI features off in its settings.

If the company uses the AI voice agent, it speaks with people by phone using a speech synthesis provider. The agent introduces itself as a virtual assistant and does not claim to be a human.

6. Who receives the data

We do not sell personal data and do not share it for advertising. We disclose data only to contractors the Service cannot work without, and where the law requires it.

Our contractors are: hosting and data centres (Hetzner Online GmbH, Germany); network delivery and protection; transactional email; website statistics (Google Analytics); artificial intelligence model and speech synthesis providers; telecom operators for calls. They are bound by confidentiality and process data only for the tasks we give them.

Messenger integrations that a company connects to its workspace process messages under that company's own agreement with the integration provider.

The current list of contractors is available on request at [email protected].

7. Where the data is stored

The Service's servers and data are located in Germany, in the European Union.

Some contractors — artificial intelligence, email, website statistics and network protection — may process data in other countries, including the United States and China. We send them only the data a particular function needs.

8. Retention and security

Data is transferred only over encrypted connections. Inside a workspace, access is limited by the permissions the company gives its employees; actions are logged; data is backed up regularly.

Account data is kept while the company uses the Service and for a limited period afterwards to restore access and meet legal requirements, and is then deleted. When a workspace owner deletes the workspace, it is closed for all employees immediately and deleted with all its data after 14 days.

9. Your rights

You may ask us for access to your data, its correction or deletion, restriction of processing, a copy in a portable format, and you may object to processing or withdraw your consent. Write to [email protected]; we answer within one month.

If you are in the EEA, the United Kingdom or Switzerland, you may also lodge a complaint with your data protection authority. Residents of California have the right to know, delete and correct their personal information; we do not sell or share it. Residents of Brazil may contact the ANPD, and residents of Australia the OAIC.

If your data was entered into the Service by a company you are a client of, please contact that company: it controls such data. If the request comes to us, we forward it to the company and help it technically.

10. Cookies

The website and the Service use necessary cookies: to keep you signed in and to remember the country and language you chose.

The website uses Google Analytics for visit statistics. Visitors from the EEA, the United Kingdom and Switzerland are asked for consent first, and statistics are collected only if they agree. Turning cookies off in the browser may make signing in impossible.

11. Children

The Service is a work tool for companies and is not intended for people under 16. We do not knowingly collect children's data.

12. Changes to this Policy

We may change this Policy by publishing a new version on this page. The date of the version is shown at the top. We announce significant changes in the Service or by email.

13. Contact

Questions about data processing: TOO IPROD, 160000, Shymkent, Al-Farabi district, Tole bi street 12V, unit 12, Republic of Kazakhstan, email: [email protected].

14. Operator details

TOO IPROD
BIN: 250240018357; Registered address: 160000, Shymkent, Al-Farabi district, Tole bi street 12V, unit 12, Republic of Kazakhstan; E-mail: [email protected].