Privacy Policy

Missed2Booked ("we", "us") is the data controller for the personal data described here. We are:

Missed2Booked
351–352 Upper Street, London, N1 0PD, United Kingdom
hello@missed2booked.co.uk

This policy covers two different people, and we've tried to be clear about which applies where: the business owner who signs up and runs their reception through us, and the caller — their customer — who rings, messages or books through the number or channel we answer for them.

What we collect

From the business (you, if you have an account)

• Name, email address and password (hashed — we never see it in plain text)
• Business details: name, industry, address, opening hours, staff, services and prices
• The "knowledge" you approve for the AI to speak from
• Payment and subscription details, once billing is enabled (handled by our payment processor — we don't store card numbers ourselves)

From your callers (your customers)

• Call recordings and transcripts. Every call is recorded and transcribed. The AI states this at the start of every call: "Just so you know, you're speaking to an AI assistant and this call is recorded." Continuing the call after that disclosure is how consent is given — the same basis most UK businesses already rely on for "this call may be recorded" lines.
• Name, phone number, email address and anything they tell the AI to get help booked
• Messages sent over WhatsApp, SMS or the website chat, where those channels are enabled
• Appointment, job and enquiry details created from the conversation

Collected automatically

• Usage data — pages visited, actions taken in the dashboard, for keeping the product working and finding bugs
• A single session cookie from our authentication provider, strictly to keep you signed in. No advertising or tracking cookies.

Why we process it, and on what basis

• To provide the service (contract) — answering calls, booking appointments, showing you the dashboard.
• To improve what the AI says and does (legitimate interest) — call summaries, sentiment and follow-up suggestions are generated from the transcript so nothing important gets missed.
• To keep the platform secure and working (legitimate interest) — fraud prevention, debugging, uptime.
• To meet legal obligations (legal obligation) — accounting records, responding to lawful requests.
• Call recording specifically (consent) — given by the caller continuing the call after the AI's disclosure, as above.

Who we share it with

We don't sell data. We use a small number of specialist processors to run the service, each under a data processing agreement:

• Supabase — our database, authentication and file storage, hosted in the London (eu-west-2) region.
• Vapi Inc. — voice AI infrastructure that answers and speaks on calls.
• Twilio Inc. — telephony and SMS delivery.
• Anthropic PBC — processes call transcripts to generate the summary, sentiment and follow-up suggestions you see in the dashboard.
• Vercel Inc. — hosts the application itself.

Vapi, Twilio and Anthropic are US-based, and our application hosting is not currently pinned to a UK region, so some processing happens outside the UK. Where that happens, it's under Standard Contractual Clauses or an equivalent safeguard recognised under UK GDPR. If you'd like details of a specific transfer mechanism, contact us at the address above.

As we switch on optional features, this list grows: a payment processor once billing is live, and Google or Microsoft if you connect your calendar. We'll only involve a processor a feature actually needs, and this policy will be updated when we do.

How long we keep it

We keep call recordings and transcripts for up to 24 months from the call date, after which they're deleted. Business account data is kept for as long as the account is active, plus a reasonable period afterwards for accounting and legal purposes. You can ask us to delete your data sooner — see "Your rights" below.

Your rights

Under UK GDPR, you can ask us to:

• Give you a copy of the personal data we hold about you
• Correct it if it's wrong
• Delete it, where we don't have a legal reason to keep it
• Restrict or object to how we use it
• Give it to you in a portable format
• Withdraw consent, where consent is the basis — for a caller, that means asking the business not to have their future calls recorded

Email hello@missed2booked.co.uk for any of the above. If you're not satisfied with our response, you can complain to the UK's data protection regulator, the Information Commissioner's Office.

If you're a caller and want to exercise these rights, the business you called is usually the quickest route — they hold your booking directly — but you're welcome to contact us instead and we'll pass it on.

Cookies

We use one strictly-necessary cookie to keep you signed in. We don't run advertising pixels, analytics trackers or third-party marketing cookies on this site.

Children

Missed2Booked is a business tool and isn't intended for use by anyone under 18.

Changes to this policy

If we make a material change, we'll update the date at the top of this page and, for significant changes, tell account holders directly.

Contact

hello@missed2booked.co.uk
Missed2Booked, 351–352 Upper Street, London, N1 0PD, United Kingdom