Privacy Policy

We collect only what we need to run the service. Depending on how you use our sites, that can include:

• Identity and contact details — your name, work email, organisation, and role, captured when you start a conversation, request a meeting, or sign in.
• What you tell us — the free text you enter about what you want to explore, and any RFP or brief documents you upload.
• Conversation content — the transcripts of your sessions with Paul AI and the AI Leads, including any meeting you join, stored to provide the service and follow up with you.
• Location — a city you type, plus an approximate country / city / region derived from your IP address by our hosting provider (Vercel) to localise the experience and quote the right currency.
• Technical and usage data — pages visited, referring link, a reference token from a campaign or referral, your browser user-agent, and a first-party visitor identifier. In regions with strict consent rules this is collected only after you accept (see Section 05).
• Consent and terms records — whether and when you accepted our terms and any communication consent.
• Account information — if you sign in, your email and the magic-link authentication session.

• To provide the platform: run your conversation with Paul AI and the AI Leads, scope a meeting, and prepare a proposal.
• To contact you about your enquiry, meeting, proposal, account, or material platform updates.
• To personalise the experience using the context you provide and your approximate location.
• To understand and improve how our sites are used, where you have consented to analytics.
• To keep the platform secure and prevent abuse.

We do not sell your data, and we do not use it for third-party advertising. We share it only with the processors in Section 04, or where the law requires.

Where the GDPR or UK GDPR applies, we rely on: your consent (for example analytics cookies and marketing communications); legitimate interests (running and securing the platform, responding to your enquiry); and contract (delivering a service you ask for). You can withdraw consent at any time using the form below or by emailing privacy@businesslead.ai.

We use the following providers to operate the platform. Each processes data on our behalf under its own terms:

• Supabase — database and authentication. Records are stored in East US (North Virginia). Privacy policy
• Vercel — hosting, content delivery, edge geolocation, and security/firewall. Privacy policy
• Anthropic — the AI models behind Paul AI and the AI Leads. Your conversation text is processed by Anthropic's API to generate responses. Privacy policy
• ElevenLabs — voice synthesis, when you use a voice experience. Privacy policy
• Tavus — video-avatar sessions, when you use a video experience. Privacy policy
• xAI — additional AI models used in parts of the platform. Privacy policy
• Resend — transactional email delivery. Privacy policy
• OpenStreetMap (Photon / komoot) — city autocomplete; the city text you type is sent to look up matching places. About

We use essential cookies for the platform to function (your sign-in session and your saved cookie choice), and a first-party visitor identifier plus basic page-view telemetry to understand site usage.

In strict-consent regions (the EU, the UK, Norway, and Switzerland) we show a consent banner and do not record analytics telemetry until you accept; if you decline, only essential cookies are used. We do not use advertising or cross-site tracking cookies.

Your data is stored with Supabase in the United States (East US). We use encrypted connections (HTTPS), server-side secret management so API keys are never exposed in the browser, and row-level security policies in the database to constrain access. No system is perfectly secure, but we take reasonable measures to protect your information.

We keep your information for as long as needed to provide the service and to meet legal or legitimate business needs, then delete or anonymise it. You can ask us to delete your data at any time (see Section 08) and we will action it within 30 days.

Subject to your local law, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Delete your data — actioned within 30 days of your request.
• Withdraw consent for communications or analytics at any time.
• Object to or restrict processing in certain circumstances.
• Portability — receive your data in a structured, machine-readable format.

Use the form below, or email privacy@businesslead.ai. We respond within 30 days. If you are in the EU or UK and are not satisfied, you may also complain to your local data protection authority.

We operate from, and store data in, the United States. If you use our sites from outside the US, your information is transferred to and processed in the US (and by the providers in Section 04). Where required, those providers maintain appropriate safeguards for international transfers.

Our platform and products are intended for adults and for business use. We do not direct our services to children and do not knowingly collect data from anyone under 18. If you believe a minor has provided us data, contact us and we will remove it.

We will update this policy as the platform evolves. When we make material changes we will update the “Last updated” date above. Continued use after changes constitutes acceptance of the revised policy.