Your pipeline, and the people in it, deserve clear rules.

1. Who this policy covers

This policy applies to Speek's own website, public demos and free assessment; the Speek dashboard, including the pipeline, inbox, campaigns and Business Brain; the research, email, call and WhatsApp work Speek does for a customer; the websites Speek builds and hosts for customers; and related support.

When a business uses Speek to find, contact and manage its leads and customers, or to run its website, that business decides why that data is processed, and Speek processes it on the business's instructions. For our own website, accounts, billing and product analytics, Speek decides how the data is used.

2. Data we collect

• Account details: name, email address, organisation, phone number, team members you invite, and support messages.
• Your Business Brain: what Speek reads from your website and what you tell it: what you sell, prices, service areas, FAQs, testimonials, brand details and contact channels.
• Pipeline records: leads, contacts, companies, stages, deal values, next steps and notes, plus each fact the agent records and the quote or page it recorded it from.
• Researched companies: publicly available business information about companies that may match what a customer sells, such as the company name, website, address, published business contact details, and the page each detail came from.
• Conversations: emails, WhatsApp messages, website form submissions, and call data, which may include phone numbers, timestamps, duration, transcripts, outcomes, and recordings when recording is enabled.
• Voice samples: audio you upload to create a custom voice or to use the voice changer, and a record of who confirmed the speaker's consent to cloning and when.
• Connected accounts: when you connect a Google or Microsoft mailbox, permission to send outreach from your own address. If you also turn on reply tracking, permission to read mail received from then on, so Speek can find replies and bounces to that outreach. From those it keeps only the words of a reply, on the lead's record, and a note of which messages it has read, deleted after 30 days. You can revoke either at any time from your provider or the dashboard.
• Visits to Speek-hosted websites: page views, traffic source, device type, and clicks on contact links such as call, email and WhatsApp buttons. See section 6.
• Demo, billing and technical data: the scenario or website you try, how long a demo voice session lasted, plan and billing status from our payment provider (we do not store card numbers), service usage, device and browser information, IP-derived security signals, and diagnostic events.

3. How we use data

We use personal data to:

• provide, secure, monitor, and support the Speek service;
• learn a customer's business, research matching companies, and keep the customer's pipeline;
• draft, send and follow up on messages and calls that the customer has approved, and record their outcomes;
• build, host, edit and measure a customer's website;
• prevent abuse, investigate failures, and improve reliability;
• manage accounts, requests, contracts, and billing; and
• comply with law and protect people, Speek, and our customers.

4. How the agent handles what it learns

Speek uses language, speech and search models to read websites and conversations and to write messages. It records a fact about a person or company only with the source it came from, whether that is a quote from a conversation or a page, so a customer can check it. Nothing is sent to a new contact until the customer approves it, and the customer can correct or delete anything the agent has recorded.

5. If a business contacted you through Speek

If you received an email, call or WhatsApp message from a business that uses Speek, that business is responsible for contacting you. Your details came from what you or your company published, or from your earlier contact with that business. Speek tells you who the message is from and, when asked, that you are speaking with an AI.

You can opt out with the unsubscribe link in any email, by replying to say so, by asking during a call, or by writing to us. An opt-out applies across email, calls and WhatsApp for that business, straight away. For access or deletion requests, contact the business, or contact us and we will pass the request to them.

6. Visitors to websites Speek hosts

Websites Speek hosts for its customers count visits without following anyone. They set no cookies and store no IP addresses. To count a visitor once a day, Speek keeps a one-way hash of the day, the site, the IP address and the browser, and deletes it after a day. Speek records which page was viewed, where the visit came from, the device type, and clicks on contact links. Messages sent through a site's forms go to the business that runs the site, in its Speek pipeline.

7. Voice sessions, calls, and recordings

In every voice session, whether a phone call, a live call in your browser, or a demo, Speek streams audio in real time to speech and language providers to transcribe what is said, generate the agent's reply, and carry out the approved work.

Public demos on our website ask for your microphone only when you start a live call. They are not recorded and their transcripts are not kept. We keep the scenario you chose, when the session started and ended, and the usage it cost, counted against an anonymous visitor key, and your contact details only if you choose to leave them.

Customer calls are written to the lead's record in the pipeline: the transcript, the outcome, and a recording when the customer has enabled recording. That customer is responsible for giving any notice and obtaining any consent required where the people it calls are located. Recording and transcript retention can be configured in the dashboard.

Custom voices are created only after the customer confirms it has the speaker's consent. The sample is sent to our speech provider to create the voice. To have a custom voice deleted, write to us at the address below. Audio sent to the voice changer is processed to return the converted audio and is not kept by Speek.

8. Legal bases and customer instructions

Depending on the service and jurisdiction, processing may be based on performance of a contract, consent, compliance with a legal obligation, protection of vital interests, or legitimate interests that are not overridden by individual rights. When Speek acts for a customer, we process the customer's data under its documented instructions and applicable data-processing terms.

9. When data is shared

We use vetted service providers for hosting and databases, authentication, web research, language and speech models, telephony, email (including the Google or Microsoft mailbox a customer connects), WhatsApp messaging through Meta, domains and certificates for hosted websites, payments, analytics, and support. They receive only the data needed to perform their services and are subject to contractual safeguards. We may also disclose data when required by law, to protect rights or safety, or as part of a corporate transaction with appropriate protections. We do not sell personal data.

10. Retention and deletion

We keep data only as long as needed for the purpose described, contractual commitments, security, dispute resolution, and legal obligations. Customers can set how long call recordings, transcripts and researched companies are kept, export organisation data, suppress a person from all future contact, and request account deletion from the dashboard. Visitor hashes on hosted websites are deleted after a day, and reply-tracking notes after 30 days. A record of each account email we send (to whom, what kind, and whether it was delivered) is kept for 30 days. An account with no sign-ins, no messages in its WhatsApp group and no paid plan is paused after 14 days, taking its websites offline, and deleted with its data after 60 days; we email the account before each step, and signing in before deletion restores it. Backups may take additional time to expire securely.

11. International transfers

Speek and its providers may process data outside the country where it was collected. Where required, we use recognised transfer safeguards and contractual protections. Customers should contact us if they need details for a procurement or data-protection review.

12. Your choices and rights

Depending on where you live, you may have rights to be informed, access data, correct it, delete it, object to or restrict processing, withdraw consent, receive portable data, and complain to a data protection authority. We may need to verify your identity and, for data a customer controls, direct the request to that customer.

13. Security and children

We use administrative, technical, and organisational controls designed to protect data, including tenant access checks, restricted service credentials, and configurable retention. No system can be guaranteed completely secure. Speek is a business service and is not directed to children. Customers must apply suitable safeguards when their work may involve a child.

14. Contact and changes

Questions, opt-outs and privacy requests can be sent to support@usespeek.app. We may update this policy as the service or law changes. Material changes will be identified by the updated date and communicated where required.