Privacy Policy

Information we collect

• When you book a demo. We collect your name, work email, company, role, the approximate number of independent stockists you have, and anything you write in the notes field.
• When you try the live voice demo. We collect your name, company, work email, what you sell, roughly how many customers you serve, and who reaches them today. We use these to brief the agent so the call is relevant to your business.
• During the demo call. Your browser sends microphone audio to our voice provider so the agent can hear you and answer in real time. We do not keep a recording or a transcript. When the call ends we receive a short written summary of it, together with the details you entered, so we can follow up.
• Technical information. Our hosting provider keeps standard server logs (such as IP address and browser type) for security and reliability. We also count demo calls per IP address across a day, so the demo cannot be abused.
• Cookies. One strictly necessary cookie remembers your cookie choices. Anything else, such as analytics, runs only if you allow it in the cookie banner. We do not use advertising cookies, and we do not track you across other websites.

The live voice demo

• You are speaking to an AI. The demo agent is artificial, not a person, and it says so on the call. It is a sales role play so you can hear how the product sounds. Nothing it says is advice, and no decision about you is made during the call.
• Who handles the call. Vapi runs the call for us, together with the speech recognition, language model, and synthetic voice behind it. Your audio passes through those providers for as long as the call lasts so the agent can respond.
• No recordings, no transcripts. We do not retain audio or transcripts of demo calls. What we keep is the written summary and the details you typed into the form.
• Not used to train AI models. We do not use what you say, or the details you give us, to train AI models. Before we take on a provider, we check that its terms do not allow it to train its own models on what passes through.

How we use it, and our lawful basis

• To respond to your demo request and discuss a possible pilot. Our lawful basis is our legitimate interest in answering enquiries, and taking steps at your request before entering into a contract.
• To run the live voice demo when you start one, and to follow up with you about it. Our lawful basis is taking steps at your request, and our legitimate interest in showing what our product does.
• To keep the demo available and prevent abuse of it (legitimate interests).
• To operate, secure, and improve the website (legitimate interests).

Cookies and similar technologies

Nothing that is not strictly necessary runs on this site until you allow it. Necessary cookies keep the site working, keep it secure, and store your cookie choice for 6 months. Statistics covers a cookieless analytics tool that counts page views and a few product events in aggregate, with no cross-site tracking and no profiling. We use no preference or marketing cookies at present. Our lawful basis for the optional categories is your consent, and you can change or withdraw it at any time. The banner lists every cookie and provider in each category.

Who we share it with

We use a small number of trusted providers who process data on our behalf:

• Vapi: runs the live voice demo, including the speech recognition, language model, and synthetic voice behind it.
• Resend: delivers your demo request, and the summary of any demo call, to us by email.
• Google Workspace: our email inbox, where those messages are received and kept.
• Vercel: hosts the website and keeps the server logs.

Some of these providers are based in the United States. Where personal data leaves the UK or the EEA, we rely on appropriate safeguards: the UK International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses, and, where the provider is certified, the UK Extension to the EU-US Data Privacy Framework. We do not sell your personal data, and we do not share it for advertising.

How long we keep it

We do not keep recordings or transcripts of demo calls. We keep demo enquiries and call summaries for up to 24 months from our last contact with you, so we can follow up and keep reasonable business records, and we delete them after that. Server logs are kept for a short period by our hosting provider for security and reliability. Your cookie choice is stored for 6 months.

Your rights

You have the right to access, correct, delete, or port your personal data, to object to or restrict our use of it, and to withdraw any consent. To exercise these rights, email hello@thedx.ai. We do not make decisions about you by automated means that produce a legal or similarly significant effect. You can also complain to the UK Information Commissioner's Office (ICO), or your local data protection authority.

Security

We run a documented information security programme, approved by our leadership and reviewed at least once a year. It covers access control and multi-factor authentication, encryption of data in transit and at rest, logging and monitoring, vulnerability management, secure development, background checks on our people, and security reviews of the providers we use. If a breach affects your personal data, we will report it to the ICO within 72 hours where the law requires that, and tell you directly where the risk to you is high. No method of transmission or storage is completely secure, but we work to keep your information safe.

Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last changed.

Contact

THEDX LIMITED (company number 12290905), registered office Camburgh House, 27 New Dover Road, Canterbury, Kent, United Kingdom, CT1 3DN. We are registered with the UK Information Commissioner's Office under registration number ZB061611. For anything about privacy or data protection, including a request to exercise your rights, email us at hello@thedx.ai.