1. Who we are and when this notice applies
Tekstag Ltd, trading as Anserd.ai, is the controller for personal information used to operate our website, accounts, sales, billing, security, and customer relationships. For call, message, booking, and customer information that a subscribing business processes through Anserd.ai, that business is normally the controller and we act as its processor under our data-processing terms. In that situation, contact the relevant business first about your information.
2. Information we process
We may process names, business details, email addresses, telephone numbers, account and authentication data, subscription and transaction records, support messages, service configuration, device and security logs, call metadata, recordings or transcripts where enabled, messages, bookings, and other information submitted to the service. Stripe processes full payment-card details; Anserd.ai does not store full card numbers.
3. Where information comes from
We receive information directly from account holders, website visitors, callers and message senders; from the subscribing business that configures the service; from authorised integrations and providers such as Stripe and telecommunications platforms; and from technical logs created when the service is used. A business may also provide customer records or instructions needed for its workflows.
4. Purposes and lawful bases
We use information to provide and administer the service, create and secure accounts, route calls and messages, perform requested workflows, take payment, provide support, prevent fraud and abuse, monitor reliability, meet legal duties, and improve service quality. Depending on the context, our lawful basis is performance of a contract, steps requested before a contract, legitimate interests in running and protecting our business, compliance with legal obligations, or consent where law requires it. We balance legitimate interests against individual rights and do not use them where those rights override our interests.
5. AI-assisted processing
The service uses AI to interpret conversations, generate responses, summarise interactions, and follow workflows configured by a subscribing business. AI output can be inaccurate. We do not use our own account-management processing to make decisions that produce legal or similarly significant effects about individuals solely by automated means. A subscribing business is responsible for deciding whether and how it uses AI output in its own decisions and for providing any additional notice required for its use case.
6. Who receives information
We disclose information only where needed to operate the service, follow customer instructions, protect users, or meet legal duties. Providers can include Microsoft Azure for hosting, Stripe for billing, ElevenLabs for AI voice services, Telnyx for telecommunications, and professional advisers or authorities where required. Subscribing businesses and their authorised users receive the records created for their workflows. Providers are contractually restricted to their authorised purposes.
7. International transfers
Some providers may process information outside the United Kingdom. Where UK data-protection law requires safeguards, we use an adequacy regulation, the UK International Data Transfer Agreement or UK Addendum, or another lawful transfer mechanism, together with appropriate technical and contractual protections. Contact us for more information about safeguards relevant to our controller processing.
8. Retention and security
We keep information only for as long as needed for the purposes described, customer instructions, dispute handling, security, accounting, and legal requirements. Retention varies by record type, plan, contract, and configured workflow. We then delete or anonymise information unless law requires longer retention. We use access controls, encryption, monitoring, backups, and supplier controls designed to protect information, but no online service can guarantee absolute security.
9. Your rights
Depending on the circumstances, you may have rights to access, correct, erase, restrict, or receive your information, object to processing, and withdraw consent without affecting earlier lawful processing. You may also complain to the UK Information Commissioner's Office. We may need to verify your identity, and some rights are subject to legal exceptions. If your request concerns data controlled by a subscribing business, we will direct the request to that business or assist it as required.
10. Browser storage and changes
The app uses essential browser storage, including anserd.auth in localStorage, to maintain signed-in sessions and security. We do not currently load advertising or non-essential analytics trackers. If that changes, we will provide any consent controls required by law. We may update this notice as our service or legal obligations change and will publish the new version and effective date here.
