Security & data handling

Your systems stay yours.

Handing a stranger access to your business is a real decision. Here is exactly what we connect to, what we store, what we never touch, and how you switch it off. In plain terms, no jargon.

How we connect

We connect to the tools you already use through their official APIs, the same secure, permission-based access those companies build for approved integrations. You authorise the connection yourself through the provider's own login screen. We never ask for, see, or store the password to your accounting software, your bank, or your email.

Each connection is scoped to only what the system needs to do its job, for example reading a new quote or sending a follow-up, and nothing more.

What we store

We keep the minimum needed to run your automation and to prove it worked:

  • Your configuration: your business name, brand voice, which systems are connected, and whether your account is active.
  • A record of what was sent: which follow-up or reply went out, to which job or enquiry, and when, so you can see the value it recovered and so the same message is never sent twice.

This lives in a managed database hosted in the United Kingdom, protected so that only our server-side automation can read it. It is not exposed to the public internet.

What we never touch
  • Passwords to any of your accounts. Access is granted through official logins you control, never shared with us.
  • Card numbers, bank credentials, or payment details.
  • Anything beyond the specific events your automation is set up to act on.
The tools we build on

We are honest about the parts we do not build ourselves. Your automation runs on established, industry-standard platforms:

  • A workflow engine that listens for events and moves them between steps.
  • A large language model that writes the personalised message, from Anthropic (the makers of Claude).
  • Email delivery through established providers.
  • A managed UK-hosted database for your configuration and the record of what was sent.

We will name the specific providers involved in your setup before you go live, so you know exactly who processes what.

You are always in control

Every connection can be revoked by you at any time, directly from the tool it connects to, without going through us. The moment you do, we can no longer see or act on anything in that system.

If you ask us to, we will delete the data we hold about your business. See our Privacy Policy for your full rights, or get in touch with any question before you connect a thing.

Questions before you connect anything?

Ask us anything about access, storage, or deletion. We would rather you were sure.

Get in touch