Privacy Policy

1. About this Policy

This Privacy Policy explains how DRAG AI LIMITED ("Drag AI", "we", "us", "our") collects, uses, and protects your personal data when you visit our website at drag-ai.com or interact with our services.

We are committed to protecting your personal data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data Controller

The data controller is:

3. Information We Collect

3.1 Information you provide

• Name, work email, company name, role, and country when you fill in our contact or discovery-call form.
• Project information, requirements, and context you share in messages with us.
• For the private live voice workspace, the business context and call playbooks you save, the phone number selected for each call, call status, any outcome or notes you enter, and a text transcript. CSV contact files are read in your browser and are not uploaded as a list. Do not include confidential or sensitive information.
• Any additional information you choose to provide via email.

3.2 Information collected automatically

• Device, browser, and operating system information.
• IP address and approximate location (country / city level).
• Pages visited, referring URLs, and time spent on pages.

4. Lawful Basis & Purposes

We process personal data on the following lawful bases under UK GDPR:

• Legitimate interests — responding to your enquiry, running and improving our website, and securing our systems.
• Consent — where required, for non-essential cookies and any marketing communications. You can withdraw consent at any time.
• Contractual necessity — to perform a contract or take steps prior to entering into a contract with you.
• Legal obligation — to comply with applicable laws and regulatory requirements.

5. How We Share Your Data

We do not sell your personal data. We may share it with trusted processors who help us operate:

• Hosting and infrastructure providers.
• Cloudflare for hosting and temporary demo data, Twilio for live calls, and OpenAI for real-time AI conversation processing.
• Form submission and email delivery providers (e.g., Web3Forms) for handling enquiries.
• Analytics providers, where used.
• Professional advisors (legal, accounting) where strictly necessary.
• Authorities, where required by law.

All processors are bound by appropriate data protection terms.

6. International Transfers

Some of our service providers may be located outside the UK or EEA. Where we transfer personal data internationally, we rely on appropriate safeguards such as UK adequacy regulations, the UK International Data Transfer Agreement (IDTA), or Standard Contractual Clauses.

7. Data Retention

We retain personal data only for as long as necessary for the purposes set out in this policy, to comply with legal obligations, resolve disputes, and enforce our agreements. Enquiry data is typically kept for up to 24 months unless required longer.

Saved workspace settings remain until they are overwritten. Call records, notes, phone numbers, and transcript text are retained for up to 30 days, then removed during routine cleanup; you can also clear call history from the workspace. The temporary connection details for an active call expire after one hour. Drag AI does not record call audio. Twilio and OpenAI process call data to provide the live service under their own service terms.

8. Your Rights

Subject to applicable law, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your data (right to erasure).
• Restrict or object to certain processing.
• Request data portability.
• Withdraw consent at any time, where processing is based on consent.

To exercise these rights, contact us at info@drag-ai.com. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

9. Security

We implement reasonable technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. However, no transmission over the internet is fully secure, and we cannot guarantee absolute security.

10. Cookies

Our website uses cookies and similar technologies as described in our Cookie Policy.

11. Children's Data

Our services are intended for businesses and are not directed at children. We do not knowingly collect personal data from individuals under 16.

12. Changes

We may update this Privacy Policy from time to time. The latest version will always be available on this page with an updated "Last updated" date.

13. Contact

Questions about this Privacy Policy? Email info@drag-ai.com or write to our registered office at 128 City Road, London, EC1V 2NX, United Kingdom.