Privacy Policy

Hotjar records how people move through our marketing pages and articles: the pages, clicks, scrolling, device and rough location. We watch these to see where the site confuses people. Hotjar does not run inside the app or inside the chat on other businesses' websites.

If you arrive from an ad or another site, we keep a cookie called marketing_attribution for 90 days. It holds the ad's click id, the campaign tags in the link, the site you came from and the page you landed on, so we can tell which ads lead to signups.

The site runs through Cloudflare, which sees every request and protects us from attacks. Cloudflare Turnstile checks you are a person before a preview or a demo request. Our pages load fonts from Google, which sees your IP address and browser.

If you ask for a demo, we email your name, email address, business, booking system and message to our team through Postmark, and email you to say we have it. We do not save it to an account; the job that sends the email is cleared after a few days, as below.

We keep your name, email, password (stored scrambled, never readable), business name, website and booking system. At signup we also record your IP address, browser, country, the site you came from, the page you landed on, and any ad click id and campaign tags.

We send Google Ads a scrambled copy of your email address, with the ad click id when there is one. Google compares it with the email addresses of its own account holders, so if you have a Google account, Google can tell the signup was yours and match it to the ad that led to it.

Card payments go straight to Stripe. We never see the card number. Our emails to you go out through Postmark. If you take a phone number for your business, we send Twilio the details UK rules require to verify it: your authorised representative's name, email and phone number, and your business address.

We use these companies to run Breezy.

• Render hosts the app and the database, in Frankfurt.
• Cloudflare carries every request to the site and runs Turnstile.
• Anthropic writes Breezy's replies from the conversation and the business's own material.
• OpenAI indexes messages and site pages so Breezy can find the right answer, runs phone calls, and helps our team research businesses and prepare outreach.
• Twilio connects phone calls, sends text messages, and verifies a business's phone number.
• Postmark sends our emails.
• Stripe takes payments.
• Sentry receives error reports, and samples of ordinary requests, which can include your IP address, your browser and what you typed.
• Cloudinary stores logos and files attached to a business's notes.
• Hotjar records visits to our marketing pages.
• Google serves our fonts, measures our ads, and sends and stores our business outreach through Google Workspace.
• The business's booking platform, such as eola or PracticeHub, when the business has connected it.
• OpenWeather answers weather questions. It gets a place, nothing about you.

Several of these companies are based in the United States, so your data may be handled there.

• Previews you do not keep: 7 days, then deleted as above.
• The marketing_attribution cookie: 90 days, or until you sign up.
• Accounts and conversations: while the business's account is open. To close an account and delete its conversations, email [email protected].
• Our host's server logs, which can include the text of a request: about 7 days.
• Records of finished background work, which can include a message being processed: 3 days. Work that failed is kept until we clear it.

We may email UK limited companies and limited liability partnerships about using Breezy. We find business names, website addresses and business contact details on public business websites and booking listings, and check company details against public registers. If a business publishes a relevant contact's name or role, we may record that too.

We keep source links, notes about why Breezy may be relevant, the emails we send and receive, and any request to stop. We use these to choose appropriate businesses, arrange trials and respect objections. Our basis is our legitimate interest in finding business customers. Before contacting a business, we consider the relevance of our offer and the likely impact on the recipient.

This outreach comes from Breezy. We do not use private eola customer contact records or bought contact lists. Our team uses Google Workspace for these emails and OpenAI tools to help research public business information and prepare messages.

You can object to our marketing at any time. Reply to the email or write to [email protected] and we will stop. We keep only the contact details and reason needed on a do-not-contact list to avoid contacting you again, and review that list annually.

We review working outreach records, including our email copies and local research notes, for deletion or anonymisation 90 days after the campaign's final pilot review. At that review, we delete or anonymise records we no longer need. This is a manual review, not automatic deletion. If you become a customer, the account and conversation retention described above also applies.