Privacy Policy

1. Who is responsible for what

In plain words: For your own account details, we are in charge of the data. For the leads and clients you upload, you are, and we process it for you.

For information about our customers and website visitors (for example, your name, email and billing details), List AI decides how it is used and is responsible for it.

For information our customers put into the Service about their own leads, clients and contacts ("Customer Data"), our customer is responsible for it and decides how it is used. List AI processes Customer Data only on our customer's behalf and instructions. If you are a lead or client of one of our customers and have a question about your information, please contact that business directly; we will help them respond.

2. We don't sell your information

In plain words: Your data, and your clients' data, is yours. We never sell it, rent it or give it to another company for their own use.

List AI does not sell, rent, trade or license personal information to anyone, and has not done so in the last 12 months. We do not "sell" or "share" personal information as those words are defined in US state privacy laws, and we do not use it for cross-context behavioural advertising.

Customer Data belongs to our customer. It is their confidential, proprietary information. We use it only to provide the Service to that customer, never to market to their contacts ourselves, and we never share it with other customers.

Service providers who help us run the Service (see "Who we share it with") may only use information to provide services to us, under contracts that require them to protect it.

3. What we collect

In plain words: Details you give us, data you put into the platform, and basic technical info about how the site is used.

Information you give us:

• Account and contact details, such as your name, email, phone number, company, role and brokerage.
• Waitlist, demo and support requests, and anything you tell us in messages or calls.
• Billing details. Payments are handled by our payment provider; we do not store full card numbers.

Customer Data you put into the Service, such as contacts, lead details, conversations, call recordings and transcripts, notes, calendars and files.

Information collected automatically:

• Device and usage data, such as browser type, pages viewed, clicks, referring site and the date and time of your visit.
• IP address and approximate location (city, region and country) worked out from it.
• Cookies and similar technologies, as described below.

Information from others, such as tools you connect (for example your CRM, calendar or ad accounts), lead sources, and our partners, where you have authorised it.

4. How we use it

In plain words: To run and improve List AI, keep it secure, support you, and tell you about updates.

• To provide the Service, including calls, texts, emails, AI conversations, booking and reporting.
• To create and manage your account, process payments and provide support.
• To keep the Service secure, prevent fraud and abuse, and enforce our Terms.
• To improve and develop the Service, including measuring how features are used.
• To send you service messages and, where allowed, product updates and marketing. You can opt out of marketing at any time.
• To meet legal obligations and respond to lawful requests.

5. AI processing

In plain words: Our AI reads the information in your account to do its job. We don't let AI providers train their models on your data.

To provide AI features, the Service sends relevant information (such as a lead's message, history and your instructions) to AI model providers that process it on our behalf to generate replies, calls, summaries and suggestions.

We choose AI providers that do not use this data to train their own general models, and we require them to protect it.

Calls handled by the Service may be recorded and transcribed so you can review them. Customers are responsible for giving any notice and getting any consent required by call recording laws.

6. Google user data

In plain words: If you connect your Google account, we only use your Google data to run the features you turned on. We never sell it, use it for ads or use it to train AI models.

List AI lets you connect your Google account. When you do, and only with your permission, we access the Google user data needed for the features you choose to use:

• Basic profile information (your name, email address and profile picture), to sign you in and identify your account.
• Google Calendar (your calendars and events), to check your availability and create, update or cancel the meetings you or our AI book with your leads and clients.
• Gmail, if you choose to connect it (emails you send and receive with your leads and clients), to show those conversations in your List AI inbox and to send the replies you approve, or that you allow our AI to send, from your address.

How we use it: only to provide and improve the user-facing features of the Service that you have turned on, such as booking meetings and showing and replying to your conversations. We request only the permissions those features need.

What we never do with Google user data:

• Sell it, rent it or share it with data brokers or information resellers.
• Use it for advertising, including personalised, retargeted or interest-based ads.
• Use it to train, develop or improve generalised artificial intelligence or machine learning models, or allow any AI provider to do so.
• Use it to decide whether someone is creditworthy, or for lending purposes.
• Let any person read it, unless you ask us to (for example, for support), it is needed for security reasons such as investigating abuse, it is required by law, or it has been aggregated and anonymised for our internal operations.

Sharing: we transfer Google user data only to service providers that help us run the features you use (such as hosting and the AI providers that write replies for you), only as needed to provide those features, under contracts that require them to protect it and not use it for any other purpose. We may also disclose it if required by law, or as part of a merger or acquisition, with notice to you.

Storage and security: Google user data and access tokens are encrypted in transit and at rest, and access is limited to the systems and staff that need it to run the Service.

Your control: you can disconnect your Google account at any time in your List AI settings or at https://myaccount.google.com/permissions. When you disconnect, we stop accessing your Google data. To have Google user data we have stored deleted, email support@list-ai.io; we delete it within 30 days unless the law requires us to keep it.

List AI's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.

7. Text messaging

In plain words: Text opt-in data is only used to send the messages people agreed to. Reply STOP to opt out any time.

Phone numbers and text messaging consent collected through the Service are used only to send the messages people agreed to receive and to provide the Service.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties, except service providers that help us deliver the messages (such as phone carriers and messaging providers).

Anyone can opt out of text messages by replying STOP, and get help by replying HELP. Message and data rates may apply. Message frequency varies.

8. Who we share it with

In plain words: Only with companies that help us run List AI, or when the law requires it. Never sold.

We do not sell or rent personal information. We share it only:

• With service providers who help us run the Service, such as hosting, phone and messaging carriers, email delivery, AI model providers, payment processing, analytics and customer support. They may only use it to provide services to us.
• With tools you choose to connect to the Service.
• Within your organisation, as set by your account roles and permissions.
• If required by law, regulation, court order or to protect the rights, safety and property of us, our customers or others.
• As part of a merger, acquisition or sale of assets, in which case the information stays protected by this policy or one at least as protective.

9. Cookies and analytics

In plain words: We use a few cookies to keep the site working and to see what's useful. You can block them in your browser.

We use cookies and similar technologies to keep you logged in, remember preferences such as language, understand how the site is used and measure our marketing. You can block or delete cookies in your browser settings; some parts of the site may not work properly without them.

Some pages use embedded content, such as client videos hosted by our video provider, which may set their own cookies when you play them.

10. How long we keep it

In plain words: As long as your account is active, plus a short time after, unless the law says to keep it longer.

We keep personal information for as long as your account is active or as needed to provide the Service. After your account closes, we delete or anonymise Customer Data within a reasonable time, unless we need to keep some of it to meet legal, tax or accounting obligations, resolve disputes or enforce our agreements. Consent and opt-out records may be kept longer, because the law requires proof of them.

11. Security

In plain words: We protect your data with encryption and access controls. No system is perfect, so keep your password safe too.

We use reasonable technical and organisational measures to protect personal information, including encryption in transit, access controls, role-based permissions and monitoring. No method of storage or transmission is 100% secure, so we cannot guarantee absolute security. If we become aware of a breach that affects your personal information, we will notify you as required by law.

12. Your rights and choices

In plain words: You can ask to see, fix, download or delete your information. Just email us.

Depending on where you live, you may have the right to:

• Access the personal information we hold about you, and get a copy of it.
• Correct information that is wrong or incomplete.
• Delete your personal information.
• Object to or limit certain uses, and opt out of marketing.
• Opt out of the sale or sharing of personal information for targeted advertising (we do not sell it).
• Not be treated differently for using your privacy rights.

To make a request, email support@list-ai.io. We may need to verify your identity first. If your request is about Customer Data held by one of our customers, we will pass it to them. We will respond within the time the law requires (usually 30 days in Canada and 45 days in the US).

United States: residents of California and other states with consumer privacy laws (such as Colorado, Connecticut, Virginia, Texas and others) may have the rights above, and may use an authorised agent to make a request. We do not sell or share personal information, so there is nothing to opt out of.

Canada: we handle personal information in line with the Personal Information Protection and Electronic Documents Act (PIPEDA), Quebec's Act respecting the protection of personal information in the private sector (Law 25), and the provincial privacy laws of Alberta and British Columbia. You may withdraw consent at any time, subject to legal or contractual limits. Our privacy officer can be reached at support@list-ai.io. You may also contact the Office of the Privacy Commissioner of Canada or your provincial privacy commissioner.

13. International transfers

In plain words: Your data may be stored in the United States or other countries where our providers operate.

We and our service providers may process and store personal information in the United States, Canada and other countries, which may have different data protection laws from where you live. Where required (including under PIPEDA and Quebec's Law 25), we assess these transfers and use contracts and other safeguards to protect the information.

14. Children

In plain words: List AI is for businesses, not children.

The Service is meant for business use and is not directed to anyone under 18. We do not knowingly collect personal information from children. If you think a child has given us personal information, contact us and we will delete it.

15. Changes and contact

In plain words: If we change this policy, we'll update the date and tell you about big changes. Questions? Email us.

We may update this Privacy Policy from time to time. We will change the "Last updated" date above, and if a change is significant we will tell you by email or in the Service.

Questions or requests about privacy? Email support@list-ai.io.