Privacy & cookies

GoSmartR is a London-based digital studio. The data controller is GoSmartR Ltd. You can reach the data controller at hello@gosmartr.co.uk.

Contact form & newsletter: name, email, company, budget range, and the message you send. We use this only to reply to you and (for newsletter) to send occasional studio updates.

Telephone enquiries: our AI receptionist processes your speech during the call. If you agree to a callback, we save your name, confirmed telephone number, enquiry and any email, company or preferred callback time you provide, so the GoSmartR team can follow up. Recording and stored transcripts are disabled for the main receptionist. If you ask to speak to a person, an automated handover checks whether they can take the call. Vapi retains a short transcript of that handover and may create audio recordings of the transfer interaction.

We also keep call time, duration, caller ID when available, transfer outcome and service-cost metadata to manage enquiries and check reliability. Caller ID is not treated as a confirmed callback number. Confirmed messages appear in our private Calls inbox and are emailed internally to the GoSmartR team, with reminders for unanswered requests.

Intro-call bookings: if you ask the receptionist to book a meeting, she confirms your name, email, date, time and timezone before submitting them to Cal.com. Cal.com sends the meeting details to the email address you confirm.

Client account: if you create an account or subscribe, we store your email, billing reference, and the requests/messages/files you submit through the dashboard. This is what lets us deliver your subscription.

Site analytics:we use a privacy-first analytics script (Plausible) that doesn’t use cookies, doesn’t track you across sites, and doesn’t store personal data. We see page views, referrers, and country — not who you are.

We don’t set marketing or tracking cookies. The cookies that do show up are essential for the things they support:

• Stripe— sets cookies during checkout to prevent fraud and complete your payment. Required for subscriptions.
• Supabase— sets a session cookie when you sign in, so you stay signed in across pages. Required for the client portal.
• Local storage— we use your browser’s local storage to remember that you’ve dismissed the cookie banner. Not a server-side cookie.

• Form submissions and confirmed telephone enquiry alerts are emailed to us via Resend (EU/US infrastructure).
• Client account data lives in Supabase (EU region) with row-level security.
• Telephone calls use Twilio and Vapi, with Deepgram for speech recognition, OpenAI for responses and ElevenLabs for speech. Saved callback enquiries are held in our private Supabase database in the EU, accessible to authorised administrators.
• Intro-call availability and bookings use Cal.com. We submit booking details only after you agree to the booking and confirm the email address for the invitation.
• Payments are processed by Stripe; we never see or store your card details.
• Analytics is processed by Plausible (EU-hosted).

You can ask us to:

• show you what data we hold about you,
• correct anything that’s wrong,
• delete your account and associated data,
• stop sending you the newsletter (one-click unsubscribe in every email).

Email hello@gosmartr.co.uk and we’ll action it within 30 days. You can also lodge a complaint with the ICO if you think we’ve mishandled your data.

Contact-form submissions: 24 months, then deleted. Client account data: as long as you’re a customer plus 12 months for billing records. Newsletter list: until you unsubscribe.

We update this page when something material changes (new processor, new cookie, new feature that touches data). The “last updated” date at the top tells you when.