Last updated: 25 August 2026

NeverMissACall (“we”, “our” or “the Company”) is committed to protecting the privacy of users of our website and services. This Privacy Policy explains how we collect, use, store and protect your personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the EU GDPR and the Data Protection Act 2018.

1. Data Controller

The data controller for personal data collected through this website is NeverMissACall. For any questions relating to data protection, contact us at hello@usenevermissacall.com.

2. Personal Data We Collect

• Name, email, company, provided via the contact form
• Phone number, provided via the contact form (optional)
• Technical data: IP address and browser information, recorded automatically in hosting server logs
• Call request data: when you ask us for a call, we store your name, email, company and what you tell us about your line

3. Purposes of Processing

• Responding to contact requests and providing information about our services
• Providing access to the voice-agent live demo
• Scheduling meetings (you will receive a calendar invitation for the booked meeting)
• Sending marketing communications (only with your consent)
• Improving the website and user experience
• Complying with legal and regulatory obligations

4. Lawful Basis for Processing

• Consent (Art. 6(1)(a)) when you submit the contact form
• Pre-contractual steps (Art. 6(1)(b)) when you request information or a demonstration
• Legitimate interests (Art. 6(1)(f)) to ensure the security and proper functioning of the website

5. Data Sharing and Sub-processors

Your personal data may be shared with the following service providers, who act on our behalf and under our instructions:

• Supabase: database hosting (EU, Frankfurt)
• Vercel: website hosting (global edge network, primary region EU)
• Hetzner: voice-server infrastructure (EU, Germany)
• Google (Gemini API): AI voice processing for inbound calls (EU and US regions; transfers covered by SCCs and the UK Addendum)
• Resend: transactional email delivery (EU, Frankfurt)
• Slack: internal operational notifications (USA), receiving first name and record identifiers only, under Standard Contractual Clauses

We do not sell, rent or otherwise disclose your personal data to third parties for marketing purposes.

6. International Data Transfers

Personal data is primarily processed within the European Union (Germany). Where a sub-processor (notably Google for AI voice processing) processes data outside the EU, transfers are covered by the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, as published in their respective Data Processing Agreements.

7. Voice Calls and AI Processing

Where you subscribe to a voice-agent line, inbound calls to your business number are routed via our voice infrastructure to Google’s Gemini Live API for real-time speech-to-speech processing. Call audio is streamed, not stored long-term by Google; transcripts and metadata are stored in our EU-based database for the duration of your contract.

If you deploy our service to receive calls from your own customers, you act as the data controller for that downstream personal data and we act as the processor. Your own privacy notice must tell callers that AI is used to handle inbound calls.

8. Voice Demo

When you use the voice demo on this website, your speech is streamed in real time to Google’s Gemini Live API so the agent can respond, and is discarded as the conversation ends. We do not record, store or transcribe it, and nothing about the conversation is kept on our systems. Under our paid Gemini API terms, Google does not use these prompts or responses to improve its products and does not subject them to human review; Google retains limited logs for a short period solely to detect abuse of its service. If you choose to submit the contact form shown at the end of the demo, only what you enter there reaches us. Lawful basis: pre-contractual steps at your request (Art. 6(1)(b)). Even so, please don’t share real medical or other special-category data in the demo: it isn’t needed to see how the agent works.

9. Retention Periods

• Lead data: retained for 24 months after last contact, unless a contractual relationship exists
• Browsing data: retained for 13 months

10. Your Rights

Under GDPR you have the right of access, rectification, erasure, restriction, portability, objection, and to withdraw consent at any time. To exercise any of these rights, contact hello@usenevermissacall.com.

11. Complaints

If you believe our processing of your personal data infringes GDPR, you may lodge a complaint with the Information Commissioner’s Office (ico.org.uk) or your local supervisory authority.

12. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction or alteration, including encryption in transit and at rest, and access controls.

13. Changes to This Policy

We may update this Privacy Policy at any time. Changes will be published on this page with a revised “last updated” date.