Privacy Policy
Last updated: June 2026
OperaMind ("OperaMind", "we", "us" or "our") provides an AI receptionist and communications platform that answers calls, books appointments, handles enquiries and supports businesses. This Privacy Policy explains what personal data we collect, how we use it, who we share it with, and the rights available to you under the UK GDPR and the Data Protection Act 2018.
This policy covers our website, dashboard and services (together, the "Service"). If you have any questions, contact us at admin@operamind.uk.
1. Who is the data controller?
For personal data relating to our customers (business account holders), OperaMind is the data controller. When our customers use OperaMind to handle calls and messages from their own customers, OperaMind acts as a data processor on that customer's behalf, and the customer is the controller of that end-caller data.
2. Information we collect
We collect the following categories of information:
- Account data — name, business name, email address, phone number, and login credentials.
- Business & verification data — company details, registration numbers, addresses and, for phone-number regulatory verification, identity or proof-of-address documents required by our telephony provider.
- Call & message data — call recordings, transcripts, summaries, voicemails, appointments and messages processed by your AI receptionist.
- Payment data — billing details processed securely by our payment provider (we do not store full card numbers).
- Usage & technical data — IP address, device and browser information, log data and cookies.
3. How we use your information
- To provide, operate and improve the Service, including provisioning phone numbers and AI assistants.
- To process calls, transcribe and summarise conversations, and book appointments on your behalf.
- To verify your identity and satisfy telephony regulatory requirements.
- To take payments and manage your subscription.
- To provide customer support and send service-related communications.
- To detect, prevent and address fraud, abuse and security issues.
- To comply with our legal obligations.
4. Legal bases for processing
We rely on: performance of a contract (to deliver the Service you sign up for); legitimate interests (to secure and improve the Service); consent (where required, e.g. certain cookies or marketing); and legal obligation (e.g. tax and regulatory record-keeping).
5. Third-party services we use
We share data with trusted providers strictly to deliver the Service:
- Twilio — telephony, phone numbers and regulatory verification.
- Vapi — real-time voice AI for handling calls.
- OpenAI / AI model providers — transcription, summarisation and AI responses.
- Stripe — payment processing and subscription billing.
- Email & calendar providers — notifications and booking integrations you choose to connect.
These providers process data under their own terms and appropriate safeguards. We do not sell your personal data.
6. Call recordings & AI processing
Calls handled by your AI receptionist may be recorded and transcribed to provide summaries, bookings and message logs. As the business using OperaMind, you are responsible for informing your callers that calls may be recorded and for having a lawful basis to do so.
7. International transfers
Some of our providers may process data outside the UK/EEA. Where this happens, we rely on appropriate safeguards such as the UK International Data Transfer Agreement or Standard Contractual Clauses.
8. Data retention
We keep personal data only for as long as necessary to provide the Service and to meet legal, accounting or reporting obligations. Call data and transcripts are retained for the duration of your account unless you delete them or request earlier removal.
9. Your rights
Under UK data protection law you have the right to:
- Access a copy of your personal data.
- Correct inaccurate or incomplete data.
- Request erasure of your data.
- Restrict or object to certain processing.
- Data portability.
- Withdraw consent at any time (where processing is based on consent).
To exercise any of these rights, email admin@operamind.uk. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO).
10. Security
We use industry-standard technical and organisational measures to protect your data, including encryption in transit, access controls and secure infrastructure. No method of transmission or storage is completely secure, but we work hard to protect your information.
11. Cookies
We use essential cookies to keep you signed in and to operate the Service, and may use analytics cookies to understand usage. You can control cookies through your browser settings.
12. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be notified via the Service or by email. The "Last updated" date above reflects the latest revision.
13. Contact us
Questions about this policy or your data? Email us at admin@operamind.uk.
