1. Who is responsible for your data

This document forms part of the agreement between you and FALCON NEST TECHNOLOGIES LTD ("Falcon Nest", "we", "us"), a company registered in England and Wales under company number 17384940, with its registered office at 37 Croydon Road, Beckenham, BR3 4AB, United Kingdom.

For personal data about you as a customer or website visitor, we are the controller. For personal data contained in content you send us to process — call audio, transcripts, documents, source code — you are the controller and we act as your processor under our data processing agreement.

Data protection questions: billy@falconneststore.com.

Account data — name, email, company, and optionally phone and VAT number. Needed to create your account and provide the software. Lawful basis: performance of a contract.

Order and billing data — billing address, order history, invoices, and a payment reference from our payment provider. We never receive or store your full card number. Lawful basis: contract and legal obligation (tax records).

Usage and diagnostic data — sign-in times, IP address, browser, feature usage and error logs. Used to operate the service, investigate faults and detect abuse. Lawful basis: legitimate interests.

Security data — sign-in attempts, including failures, and the IP they came from. Used to detect and block credential attacks. Lawful basis: legitimate interests.

Support correspondence — what you send us and our replies. Lawful basis: contract and legitimate interests.

Marketing preferences — only if you opt in. Lawful basis: consent, withdrawable at any time.

We do not use automated decision-making that produces legal effects for you, and we do not sell personal data.

Content you submit for processing may contain personal data about your own customers or staff. We process it only to provide the service to you, under your instructions.

We do not use customer content to train shared models. Call audio is not retained after a call unless you enable recording. Transcript and index retention follows the window configured on your plan, and you can shorten it or delete on demand.

• Account records: for the life of the account, then 12 months
• Invoices and tax records: 7 years, as required by law
• Transcripts and indexes: per your plan's retention window, or your configured shorter period
• Security and sign-in logs: 12 months
• Audit logs of administrative actions: 7 years
• Support correspondence: 3 years
• Marketing consent records: until withdrawn, then 2 years as proof of the withdrawal

We use a small number of sub-processors to run the service. Categories are:

• Cloud hosting and storage, in your selected region
• A regulated payment institution, for processing payments
• Transactional email delivery
• Error monitoring

A current, named sub-processor list with locations is available from billy@falconneststore.com. We give notice before adding a sub-processor that processes customer content.

We also disclose data where legally required, and to professional advisers under confidentiality.

Your data is stored in the region you select. Where a transfer outside that region is necessary — for example to a support engineer — it is made under the UK International Data Transfer Addendum or EU Standard Contractual Clauses, with a transfer risk assessment on file.

Enterprise customers can eliminate transfers entirely by self-hosting.

You have the right to access, correct, delete, restrict and object to our processing of your personal data, to data portability, and to withdraw consent where consent is the basis.

To exercise any of these, email billy@falconneststore.com. We respond within one month. We do not charge for this, and we will not treat you differently for asking.

If you are not satisfied with our response you can complain to the Information Commissioner's Office (ico.org.uk) or your local supervisory authority.

Our technical and organisational measures are described on the Security page. If a breach affects your personal data and is likely to cause risk, we notify you and the relevant regulator within the statutory deadline, and tell you what happened and what we are doing about it.

We use a small number of cookies, described in the Cookie Policy. Only strictly necessary cookies are set before you make a choice.