Draft — pending legal review. Company details and final wording to be confirmed by Clozd before launch.

Privacy Policy

How Clozd collects, uses, and protects personal data.

Last updated: [DATE] · Version [0.1 DRAFT]

For Clozd account holders, and for individuals whose personal data is processed inside the CRM.

1. Who we are

Clozd is operated by [COMPANY LEGAL NAME], [REGISTERED ADDRESS].
For your account data, we are the data controller.
For the data you load into your workspace (your leads, contacts, and property-owner records), you are the controller and we act as your processor under our Data Processing terms.
Contact: support@getclozd.io.

2. Data we collect

Account data: name, email, password (hashed), workspace and team details.
CRM content you enter or import: leads, contacts, deals, notes, tasks, and property-owner details (names, phone numbers, emails, addresses).
Communications: SMS content, call metadata, call recordings, and transcripts handled through the platform.
Property data retrieved from third-party providers when you enrich a record.
Usage and device data: log data, IP address, and basic analytics needed to run and secure the service.
Billing data is handled by our payment processor; we do not store full card numbers.

3. How we use data

To provide and operate the CRM and its messaging, calling, enrichment, and AI features.
To process and route SMS/voice through Twilio and (for AI calls) Retell.
To bill, support, secure, and improve the service.
To comply with legal obligations and enforce our terms.

4. Legal bases (where UK/EU law applies)

Performance of our contract with you; our legitimate interests in operating and securing the service; your consent where required; and compliance with legal obligations.

5. Sub-processors

We use vetted third parties to deliver the service (telephony, AI, hosting, email, etc.).

The current list is on our Sub-processors page, which we keep up to date.

6. Sharing and disclosure

With sub-processors who process data on our instructions.
Where required by law, or to protect rights, safety, and the integrity of the service.
In a merger, acquisition, or asset sale (with notice).
We do not sell personal data.

7. Retention

We retain account and CRM data for as long as your workspace is active.
Call recordings and transcripts are retained for [PERIOD] unless you delete them sooner.
After termination we delete or return your data within [WINDOW], subject to legal-retention requirements.

8. Security

Encryption in transit, per-tenant database isolation, and access controls.
No method of transmission or storage is 100% secure; we work to protect data but cannot guarantee absolute security.

9. International transfers

Some sub-processors are located in the United States or elsewhere. Where required, transfers are covered by appropriate safeguards (e.g. Standard Contractual Clauses). [Confirm with counsel.]

10. Your rights

Depending on where you live, you may have rights to access, correct, delete, export, or object to processing of your personal data.
To exercise rights over your account data, contact support@getclozd.io.
If your data sits inside a customer’s workspace, that customer is the controller — contact them, and we will assist them as their processor.

11. Cookies

We use essential cookies needed to sign in and run the app. [Add a cookies notice / preferences if non-essential cookies are introduced.]

12. Children

Clozd is not intended for anyone under 18, and we do not knowingly collect their data.

13. Changes

We may update this policy; material changes will be notified. The "last updated" date reflects the current version.

14. Contact

Privacy questions: support@getclozd.io · [COMPANY LEGAL NAME], [REGISTERED ADDRESS].