Privacy policy

Who we are

JMB Technology Ltd ("we", "us", "SimplyAnswered") is registered in England and Wales (company number 15525231) at 20 Wenlock Road, London, England, N1 7GU. We are the data controller for account, billing, network-usage, security and support information we use to provide and protect SimplyAnswered and meet our own legal duties.

When a customer uses an assistant, voicemail, fax or Calendar connection to handle information about their callers for that customer's own purposes, the customer normally decides why that content is used and is the controller. We process that content to provide the service on the customer's instructions, while remaining a controller for information we must use for billing, network security, fraud prevention or legal compliance. The exact role can depend on the context.

What data we collect

What we DON'T collect

• Transcripts of translated calls — we never store what was said during Language Bridge calls
• Card numbers — payments are processed by Stripe; we never see or store card details
• Browsing history — we don't track you across other websites

AI assistant calls

When you use a SimplyAnswered assistant, the call is processed to understand and respond to the caller. We keep the transcript, summary and details the caller gives the assistant — such as their name, contact details, reason for calling and agreed next step — for 90 days so you can review the conversation and follow it up.

Call audio is kept for 90 days only when you switch on Keep call recordings. When recording is off, the provider is instructed to delete the audio while the transcript, summary and captured caller details remain available for 90 days. You are responsible for giving callers any notice and obtaining any permission required for recording or other use of their information.

How we use your data

• Providing the services you've signed up for
• Processing payments and managing your credit balance
• Sending service emails (fax notifications, low balance alerts, renewal reminders)
• Preventing fraud and abuse
• Meeting legal obligations (tax records, law enforcement requests)

Customer push notifications are not offered. The apps do not register devices for push delivery. Service emails, including voicemail, low-balance and renewal messages, continue according to your account settings.

Our lawful bases

• Contract — to create your account and provide, bill and support the services you ask for
• Legal obligation — for tax, accounting, regulatory and lawful disclosure duties
• Legitimate interests — to secure the service, prevent fraud and abuse, diagnose faults and resolve complaints, where those interests are not overridden by your rights
• Consent — where we specifically ask for it, such as optional marketing; you can withdraw it at any time

Google Calendar data

When Calendar bookings are available and you choose to connect Google Calendar, we use your Google account email and encrypted OAuth tokens to check whether your primary calendar is busy and to create an appointment only after the caller confirms it. The booking sent to Google contains the agreed time and the caller details needed for the appointment and invitation.

When enabled, the booking feature does not show existing event titles or details to callers and does not change or cancel existing events. You can stop new bookings in the assistant. You can withdraw SimplyAnswered's Google access at any time from your Google Account's connected-app settings; Google then prevents the stored connection from being used again. You can also ask us to remove the connection by emailing [email protected].

We use Google user data only to provide the Calendar feature you enabled. Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

Microsoft sign-in

If you choose Microsoft sign-in, we verify your work or school account and retain its organisation and account identifiers so you can sign in again. Microsoft may also provide a suggested name and email address. We ask new customers to confirm their contact details and verify their email separately. We do not merge accounts just because their email addresses match. Sign-in tokens are used on our server for verification and are not retained. Signing in does not connect your calendar.

Microsoft 365 Calendar data

If you connect a Microsoft 365 work or school account, SimplyAnswered uses your mailbox address and encrypted OAuth access and refresh tokens to check availability and create caller-confirmed appointments in your primary calendar. Microsoft receives the agreed appointment time and the caller details needed for the booking and invitation. Existing event details are not passed to callers, and the assistant cannot edit or cancel existing appointments.

Microsoft Calendar access is separate from CallPlatform connections and your SimplyAnswered sign-in. Disconnect it in the assistant's Bookings settings to remove the stored tokens and stop new bookings. Existing appointments remain in Microsoft. You can also revoke the app's permissions through your Microsoft account or ask your organisation's administrator to do so. We retain a booking receipt containing identifiers, hashes and status to prevent duplicate appointments; it contains no event body or caller contact details.

Third-party processors

Your rights (UK GDPR)

You have the right to:

• Access — request a copy of your personal data
• Rectification — correct inaccurate data
• Erasure — request deletion (we may need to retain billing records for tax purposes)
• Restriction — ask us to limit how we use your data in certain circumstances
• Portability — receive your data in a machine-readable format
• Object — object to certain processing
• Withdraw consent — for marketing communications at any time

To exercise any of these rights, email [email protected].

Data security

We take security seriously:

• Connections between your browser and our public portal are encrypted (HTTPS/TLS)
• Fax documents are stored in encrypted private cloud storage
• Access to documents uses short-lived signed links that expire after 5 minutes
• Passwords are hashed (bcrypt) — we can't see them
• API keys are hashed — we can't retrieve them after creation
• Google OAuth access and refresh tokens are encrypted at rest and are never sent to your browser
• We use rate limiting and fraud detection

International transfers

Your SimplyAnswered account and service data is primarily stored in the UK (London). Some processors, including Google, Apple, Stripe, ElevenLabs and its AI model providers, may process data outside the UK under appropriate safeguards such as UK adequacy decisions or Standard Contractual Clauses.

Cookies

We use only essential cookies for sign-in sessions and security tokens. We don't use advertising or analytics cookies.

Data retention summary

Complaints

If you believe we've mishandled your data, contact us first at [email protected]. If you're not satisfied, you can complain to the Information Commissioner's Office at ico.org.uk or 0303 123 1113.