Privacy Policy
Last updated: 13 September 2026
1. Who we are
AIRoster ("we", "us") provides AI-assisted phone and lead-management services. For the purposes of UK GDPR, we act as a data controller for account data and as a data processor for the lead and call data our business customers manage through the platform. Contact: privacy@airoster.app.
2. What we collect
- Account data: name, email, mobile number (verified by SMS one-time code), business details.
- Lead data: contact details and notes you import or capture, and their outreach status.
- Call data: call metadata, recordings, transcripts and AI-generated summaries of calls placed or received through the platform.
- Usage & billing data: feature usage, minutes consumed, subscription and payment status.
3. Lawful basis
We process account and billing data to perform our contract with you and to meet legal obligations. We process lead and call data on your instructions as processor. Any marketing to you relies on your consent, which you can withdraw at any time.
4. Calls, recording & AI
Calls may be placed by an automated AI agent and may be recorded and transcribed. Where you use the platform to contact your own leads, you are responsible for having a lawful basis and any required consent to contact and record those individuals, and for honouring opt-out / do-not-call requests (which the platform records and enforces).
5. Processors we use
| Provider | Purpose |
|---|---|
| Supabase | Database, authentication, hosting |
| Twilio | SMS one-time codes and messaging |
| ElevenLabs | AI voice calling, transcripts |
| Stripe | Subscription billing and payments |
| OpenAI | Business summarisation during onboarding |
| Resend | Transactional email delivery |
| Google Analytics 4 | Marketing-site usage measurement, only after analytics consent |
| Microsoft Clarity | Marketing-site session and interaction measurement, only after analytics consent |
6. Retention
We keep account data for the life of your account and for a reasonable period afterwards to meet legal and accounting obligations. You can request export or deletion at any time (see below).
7. Your rights
You have the right to access, rectify, erase, restrict, and port your personal data, and to object to processing. In the app, Settings → Account & data lets you export your data (machine-readable JSON) and request deletion. You may also contact us at privacy@airoster.app, and you can complain to the ICO.
8. Cookies
The marketing site stores your analytics choice in browser local storage. If you choose “Allow analytics”, it loads Google Analytics 4 and Microsoft Clarity, which may use cookies or browser storage to measure site usage and interactions. Choosing “Essential only” prevents those analytics scripts from loading. This draft disclosure and the deployed site's actual storage should be reviewed before this policy is approved.