Privacy Policy

Last updated: 23 September 2026

1. Who we are

answer4me is a trading style of FINSERAI, which is a trading name of Andrew Ward, sole trader, registered in England.

ICO registration reference: ZC244000

Contact: hello@answer4me.online

2. What data we collect

We collect the minimum data needed to provide the service:

Account information — your name, email address, mobile phone number, and password (encrypted) when you create an account.
Call data — caller name (as stated by the caller), caller phone number (from caller ID), reason for calling, urgency level, and a text transcript of the conversation. Call audio is not stored — see section 7.
VIP contacts — names and phone numbers you add to your VIP list.
Calendar data — if you connect Google Calendar (Pro/Business plans), we access only your free/busy status. We cannot see appointment titles, descriptions, attendees, or any other event details.
Payment data — processed entirely by Stripe. We do not store card numbers, bank details, or payment credentials.
Phone verification — we verify your mobile number via SMS during signup. The verification code is processed by Twilio and not stored by us.

3. How we use your data

To operate your AI receptionist and handle incoming calls on your behalf.
To send you call summaries via SMS and email after each call.
To check calendar availability and book appointments (Pro/Business plans).
To detect and screen spam or abusive callers.
To send you account notifications (usage alerts, billing, service updates).
To manage your subscription and process payments via Stripe.

4. Legal basis for processing

Contract — processing your data is necessary to provide the service you signed up for.
Legitimate interest — spam detection, abuse prevention, and service improvement.
Consent — you consent to call recording and AI processing when you activate the service. Callers are informed they are speaking with an AI-assisted service.

5. Third-party processors

We use the following third-party services to operate answer4me:

ElevenLabs (US/EU) — AI voice processing during calls. Zero retention mode is enabled: all conversation audio and data is deleted immediately after each call ends.
Twilio (US) — telephone number provisioning, call routing, and SMS delivery. Subject to Twilio's privacy policy.
Supabase (EU) — database hosting for your account, call records, and VIP contacts.
Stripe (US/EU) — payment processing. We never see or store your card details.
Resend (US) — email delivery for call notifications and account emails.
Google (US/EU) — Calendar API (Pro/Business plans only, and only when you explicitly connect your calendar). We access free/busy status only.

6. Data retention

Call transcripts — automatically deleted after 30 days.
Call audio — not stored at all. ElevenLabs operates in zero retention mode.
Call metadata (caller name, reason, urgency) — retained for your reference until you delete your account.
Account data — retained while your account is active. Deleted within 30 days of account closure.
Caller throttle data — automatically cleared daily.

7. AI processing and caller privacy

When someone calls your AI number:

Their voice is processed in real time by ElevenLabs to generate a natural conversation. No audio is recorded or stored.
A text transcript is generated during the call and stored in your account for 30 days.
The AI extracts the caller's name, reason for calling, and urgency level from the conversation. This summary is sent to you via SMS and/or email.
The AI does not have access to your personal information, calendar event details, financial data, or any information about other callers.
Calendar booking (Pro/Business): the AI can only see whether you are free or busy at a given time. It cannot see what your appointments are about, who they are with, or any other details.

8. Your rights

Under UK GDPR, you have the right to:

Access — request a copy of all data we hold about you. You can export your data from your dashboard at any time.
Rectification — correct any inaccurate data via your dashboard settings.
Erasure — delete your account and all associated data. You can do this instantly from your dashboard (Settings → Delete Account). This deletes your profile, call records, VIP contacts, AI agent, and phone number.
Portability — export your data in a machine-readable format (JSON) from your dashboard.
Object — object to processing based on legitimate interest by contacting us.
Withdraw consent — disconnect your calendar or delete your account at any time.

To exercise any of these rights, use the tools in your dashboard or email hello@answer4me.online.

9. Security

All data is transmitted over HTTPS/TLS encryption.
Passwords are hashed and never stored in plain text.
Google Calendar OAuth tokens are stored encrypted in our database.
Phone numbers are verified via SMS before account activation.
Caller abuse protection: repeat callers are throttled (max 5 calls per day from the same number).
The AI is hardened against prompt injection — callers cannot trick the AI into revealing your personal information or changing its behaviour.

10. Cookies

answer4me uses only essential cookies required for authentication and session management. We do not use tracking cookies, advertising cookies, or third-party analytics cookies.

11. Changes to this policy

We may update this policy from time to time. Material changes will be communicated via email to registered users. The “last updated” date at the top of this page shows when the policy was last revised.

12. Complaints

If you are unhappy with how we handle your data, please contact us at hello@answer4me.online. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).