Privacy notice
How we handle your personal information, in plain words. It follows the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Last updated: 6 November 2026
Who we are
Humans and Bots is powered by Launchese Connect, a trading name of Launchese Ltd. Launchese Ltd is registered in England and Wales, company number 11878200, and its registered office is 24-26 Arcadia Avenue, Fin009, London N3 2JU.
Launchese Ltd is the data controller: it decides how your personal information is used. It is registered with the Information Commissioner’s Office (ICO), registration number ZB591960. That one registration covers all its work with personal information, including Humans and Bots, call recordings and AI summaries.
To ask us about your information, email hello@humansandbots.co.uk.
When you ask for a call
When you use the call box, we collect:
- your UK phone number, and whether you want a call now or at a time you pick
- the page you were on, and how you found us
- when you ticked the consent box, and which version of the wording you saw
- a scrambled (hashed) form of your internet address, which helps us stop misuse
- your first name
We use your first name to greet you on the call. It is kept with your call request.
Our assistant calls a number only after someone has asked for the call and ticked the consent box.
On the call
The consent box tells you the call is recorded and summarised by AI before you ask for it. On the call, our assistant tells you it is an AI as soon as it starts talking, and that the call is recorded right after you answer its opening line. On the call, we collect:
- a recording, a transcript and an AI summary of the call
- what you tell us, such as your name, company and role, what your business does, your team size, what is piling up, the channels, volume, hours and tools involved, timing, whether you are interested in people, bots or both, whether you want a call back and a good time, and how urgent it is
- an email address, only if you give one
- whether you asked us to delete the recording
A person from our team reads every call and decides what happens next. We make no automated decisions about you.
When you use the chat box
The chat box loads only if you open it. Lucy, our AI assistant, answers, and the box tells you that before you start.
What you type or say is saved so our team can read it: a transcript and an AI summary, a recording if you talk, and anything you tell Lucy, such as your name, company, number or email. A person from our team reads every chat.
Why we use it, and our legal basis
| What we do | Why | Legal basis |
|---|---|---|
| Call you, follow up and answer your message | You asked us to. | Contract: steps you ask for before any contract. |
| Record the call or chat, and make a transcript and an AI summary | So a person can read every call and chat and follow it up properly. | Legitimate interests. |
| Check for bots, limit requests and keep the scrambled form of your internet address | To stop misuse and keep our costs under control. | Legitimate interests. |
| Keep your consent record and the do-not-call list | To show you asked for the call, and so we do not call anyone who said stop. | Legitimate interests. |
| Read a job application | To decide whether to take it further. | Contract: steps you ask for before any contract. |
| Work for a client, and keep contracts and invoices | To do the work, and to meet our legal and accounting duties. | Contract, and legal obligation. |
| See how people use this website, with Google Analytics and Microsoft Clarity | To learn which pages help and which need fixing. These tools run only if you press Accept. | Consent. You can change your answer at any time. |
| Catch faults on this website, with Sentry | So we can find and fix what breaks. | Legitimate interests. |
You can object to anything we do on the basis of legitimate interests. See your rights below.
Asking for a call does not sign you up to marketing. We email you only if you ask.
Texts, and if you miss our call
If you book a time for our call, we send you one text to confirm it.
If we reach your voicemail, our assistant leaves one short message. It says who is calling and how to reach us, and we try once more.
If you miss our call, we may also send you one text about it. We send texts to UK mobiles only, from a short sender name, and nothing after the second try. They are not marketing.
Stopping calls
To stop calls, say “stop” on the call, or email us. After a stop or a wrong number, we put the number on a do-not-call list so we do not call it again. You can also ask us to delete a recording.
How long we keep it
- Your call request (your number, first name, the time you chose, the page, your consent and what happened on the call): 90 days.
- Recordings: 30 days.
- Transcripts, chats, summaries and notes: 12 months, unless you become a client.
- Messages from the write-to-us form, emails you send us and job applications: 12 months, unless you become a client or join us.
- The do-not-call list (the number, the date and the reason): for as long as we make these calls, so that we do not call you again. Ask us if you want it removed.
- If you press Accept: Google Analytics keeps what you did on a visit for 2 months, and the ID that links your visits for 14 months after your last visit. Microsoft Clarity keeps recordings for 30 days and heatmaps for 9 months.
- Fault reports in Sentry: 30 days.
- Cloudflare’s log of email sent to or from our humansandbots.co.uk address: about a month.
- Cloudflare’s list of addresses not to email, if an email bounces or is marked as spam: from a day to no end date, depending on why.
We keep your information only for as long as we need it.
When you write to us
The write-to-us form sends us your name, your email and your message. If you fill them in, it also sends your company, the hours you need covered, the tools you use and your team size.
We send your message by email to our inbox. A person reads it and replies.
If you email us about a job, your email and anything you attach, such as a CV or a voice recording, come to the same inbox and a person reads them.
When you visit this website
If you press Accept on our cookie question, we use these tools to see how people use this site and to improve it. If you press Decline, neither of them loads.
- Google Analytics gets the pages you visit, whether you asked for a call but not your number or name, how you found us, your rough location, your device and browser, and an ID kept in a cookie. Google’s advertising features are off.
- Microsoft Clarity gets how you move, click and scroll on our pages, as recordings and heatmaps, along with your rough location, your device and browser, and an ID kept in a cookie. It does not record what you type, or anything in our call box and forms.
Whatever you answer, we use Sentry to catch faults on this site. If something breaks, it gets what went wrong, the page address and your browser type. We take out names, phone numbers and email addresses first, and it does not keep your internet address.
Who handles your information for us
We share your information only with these providers, which help us run our calls, our forms, our email and this website, and when the law requires it, such as for a court order or a lawful request from the police.
| Provider | What it does | Information it sees |
|---|---|---|
| Supabase | Our database. It holds call requests, the do-not-call list and what happens after a call. | Your number, the time you chose, the page, how you found us, your consent record, the scrambled form of your internet address and your first name. After a call, it also holds the call’s outcome and length, its summary, the details you give on the call: your email, your company and whether you want a call back, and the marks the AI gives the call: hot, warm or cold, urgent, or that you did not ask for it. When our team follows up, it holds who called you and when, and their notes. If we cannot take a request, it holds why. If you book a time, it holds when we sent the text that confirms it. |
| ElevenLabs | The voice AI behind our calls and our chat box. It also keeps the call log and the recordings. | The recording, the transcript and the summary, what you tell us on the call, your number, your first name, the time you chose, the page you were on and how you found us. In the chat box, what you type or say, and your internet address and browser type. When you open the chat box, its code comes from unpkg and some of its files from Google, which see your internet address. |
| Twilio | The telephone carrier for our calls. It also sends our texts. | Your number, the details of the call and the words of any text. |
| Cloudflare Turnstile | An invisible check that tells people from bots on the call box and our forms. | Signals from your browser and your network, such as your internet address and browser type. Cloudflare also uses them to improve its bot check, under its own privacy notice. |
| Cloudflare Email Routing | Passes email sent to our humansandbots.co.uk address on to our inbox, after checking it for spam. | The emails sent to that address as they pass through, which Cloudflare says it does not store. Its log shows the sender, the recipient, the subject and whether the email got through. |
| Cloudflare Email Sending | Sends the emails we write from our humansandbots.co.uk address. | The emails we send from that address as they pass through, including who they go to and what they say. We keep its option to store copies turned off. Its log shows the sender, the recipient, the subject and whether the email got through. If an email bounces or is marked as spam, it can keep the address on a list of addresses not to email. |
| Brevo | Our email service. It sends our team the brief after each call or chat, the email when you use the write-to-us form, and our own service alerts, which carry no visitor details. | The brief: your number, your first name, the page, the summary and what you told us on the call or in the chat. The form: your name, email, company, team size, hours, tools and message. |
| Vercel | Hosts this website and keeps its server logs. | Visit data. |
| Google Workspace | Hosts our email inbox. | The emails that reach us: the brief after each call or chat, messages from the form, job applications and anything you email us. |
| Google Analytics | Shows us how people use this website, only if you press Accept. | The pages you visit, whether you asked for a call but not your number or name, how you found us, your rough location, your device and browser, and an ID kept in a cookie. |
| Microsoft Clarity | Shows us how people move around our pages, with recordings and heatmaps, only if you press Accept. | How you move, click and scroll, the words on our pages but not what you type, your rough location, your device and browser, and an ID kept in a cookie. |
| Sentry | Tells us when something breaks on this website. | What went wrong, the page address and your browser type, with names, phone numbers and email addresses taken out. |
Information that leaves the UK
Our database is in London. Some of our other providers are outside the UK, including in the United States. When one of those providers holds your information, one of these safeguards applies:
- the place it goes to is one the UK Government has found gives adequate protection, including United States companies signed up to the UK-US data bridge
- the transfer is covered by contracts approved by the Information Commissioner’s Office (ICO), which give your information the same protection it has in the UK
Email us if you want to know which safeguard applies to a provider.
Keeping it safe
We use security measures, policies and internal controls to stop your personal information being lost, misused or seen by anyone who should not see it.
If you are a client
For the work we do for you, you are the data controller and we act as your data processor, under our data processing agreement. We keep only weekly reports and hour logs, for 12 months. We delete your data within 14 days of the end of the contract. Our people report any incident to us within 12 hours, and we tell you within 24 hours.
Separately, we keep our contract with you and our invoices for 6 years after the contract ends, for legal and accounting reasons.
Your rights
Under the UK GDPR, you have the right:
- to see a copy of the information we hold about you
- to have it corrected if it is wrong or incomplete
- to have it deleted
- to limit how we use it
- to object to how we use it
- to take information you gave us to another company
Some of these rights have limits in law. To use any of them, email us. We reply within one month.
Complaints
If you are unhappy with how we handle your information, tell us first: email hello@humansandbots.co.uk or use our write-to-us form. We acknowledge your complaint within 30 days, look into it without undue delay and tell you the outcome.
You can also complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator: call 0303 123 1113 or go to ico.org.uk/concerns.
Children
Our service is for businesses and is not for children. We do not knowingly collect children’s information. If you think we have, email us and we will delete it.
Changes to this notice
We update this notice when what we do changes, before the change happens. The date at the top shows the latest version.