Privacy Policy

Last updated: 8 July 2026

Draft template. This policy is a working draft to be reviewed and finalised with your legal counsel before public launch. It describes how the GetPA platform is designed to handle data.

1. Who we are

GetPA ("we", "us") provides AI-assisted phone and lead-management services. For the purposes of UK GDPR, we act as a data controller for account data and as a data processor for the lead and call data our business customers manage through the platform. Contact: privacy@getpa.app.

2. What we collect

Account data: name, email, mobile number (verified by SMS one-time code), business details.
Lead data: contact details and notes you import or capture, and their outreach status.
Call data: call metadata, recordings, transcripts and AI-generated summaries of calls placed or received through the platform.
Usage & billing data: feature usage, minutes consumed, subscription and payment status.

3. Lawful basis

We process account and billing data to perform our contract with you and to meet legal obligations. We process lead and call data on your instructions as processor. Any marketing to you relies on your consent, which you can withdraw at any time.

4. Calls, recording & AI

Calls may be placed by an automated AI agent and may be recorded and transcribed. Where you use the platform to contact your own leads, you are responsible for having a lawful basis and any required consent to contact and record those individuals, and for honouring opt-out / do-not-call requests (which the platform records and enforces).

5. Processors we use

Provider	Purpose
Supabase	Database, authentication, hosting
Twilio	SMS one-time codes and messaging
ElevenLabs	AI voice calling, transcripts
Stripe	Subscription billing and payments
OpenAI	Business summarisation during onboarding
Resend	Transactional email delivery

6. Retention

We keep account data for the life of your account and for a reasonable period afterwards to meet legal and accounting obligations. You can request export or deletion at any time (see below).

7. Your rights

You have the right to access, rectify, erase, restrict, and port your personal data, and to object to processing. In the app, Settings → Account & data lets you export your data (machine-readable JSON) and request deletion. You may also contact us at privacy@getpa.app, and you can complain to the ICO.

8. Cookies

We use only essential cookies required to keep you signed in. We do not set non-essential or advertising cookies. See our cookie banner for the current setting.