Privacy Policy

Who we are

Chasly (“we”, “us”, “our”) is an AI-powered quote follow-up service for UK tradespeople. We help sole traders and small trades businesses follow up on unanswered quotes automatically via SMS and email.

What data we collect

We collect only the data needed to provide our service:

• Account information: your name, email address, phone number, and business name when you sign up.
• Quote metadata: customer name, contact details (phone and/or email), job description, and quote amount. This is the data you enter when adding a quote.
• Follow-up records: the content of AI-generated follow-up messages, delivery status, and timestamps.
• Customer responses: when one of your customers uses the response link in a follow-up message, the fixed option they select (interested, ask to be contacted, not interested, or not right now) and the date and time they select it. No free-text message is collected.
• Payment information: handled entirely by Stripe. We do not store your card details.
• Usage data: basic analytics such as pages visited and feature usage to improve the service.

Why we collect it

• To send follow-up messages on your behalf to your customers.
• To personalise AI-drafted messages with your name, business name, and tone preferences.
• To process your subscription payments.
• To provide customer support.
• To improve and maintain the service.
• To record how your customer wishes to respond when they use the response link, and to update the quote's status and stop or adjust the automated follow-ups accordingly.

Customer response links

The follow-up messages we send on your behalf (by SMS and email) include a secure link that is unique to that quote and expires after a set period. The link lets your customer tell you how they wish to respond by choosing one of a fixed set of options: interested, ask to be contacted, not interested, or not right now. No free-text message is collected. When your customer uses the link, we record which option they chose and the date and time, and we use this to update the quote's status and to stop or adjust the automated follow-ups. If your customer chooses “ask to be contacted”, we show them the contact details you have provided so they can get in touch with you directly.

How we store and protect it

Your data is stored in Supabase (PostgreSQL), encrypted at rest and in transit. All connections use TLS. Access is protected by row-level security policies, meaning you can only access your own data. API keys and secrets are stored in environment variables, never in code.

Third parties

We share data with the following third-party services only as needed to deliver our service:

• Twilio, to send SMS follow-up messages. Receives the customer's phone number and message content.
• Postmark, to send email follow-up messages. Receives the customer's email address and message content.
• Stripe, to process subscription payments. Receives your email address and payment details.
• Anthropic (Claude), to draft follow-up messages using AI. Receives the job description, customer name, and your tone preferences. Does not receive phone numbers, email addresses, or payment data.

We do not sell your data to anyone. We do not use your data for advertising.

International transfers

Some of our service providers process data outside the UK, including in the United States. This includes Twilio (SMS delivery), Postmark (email delivery), Anthropic (drafting follow-up messages), and Stripe (payments). Where data is transferred outside the UK, it is protected by appropriate safeguards, such as Standard Contractual Clauses and the UK extension to the EU-US Data Privacy Framework, as provided by these processors under their data processing agreements.

Data retention

We keep your data for as long as your account is active. If you cancel your subscription, your data is retained but follow-ups are paused. You can request deletion at any time (see below). We never delete your data without your explicit request.

Your rights (UK GDPR)

Under the UK General Data Protection Regulation, you have the right to:

• Access: request a copy of all data we hold about you.
• Rectification: update or correct your data via the Settings page.
• Erasure: request that we permanently delete your account and all associated data.
• Portability: request your data in a machine-readable format.
• Objection: object to our processing of your data at any time.

To exercise any of these rights, email us at privacy@chasly.co.uk or use the data export and deletion options in your account settings.

Cookies

We use only functional cookies required for authentication and session management. We do not use tracking cookies or third-party advertising cookies. If we add analytics in the future, we will update this policy and request your consent.

Changes to this policy

We may update this policy from time to time. If we make significant changes, we will notify you by email or through the app. The “last updated” date at the top of this page will always reflect the latest revision.

Contact us

If you have questions about this privacy policy or your data, contact us at privacy@chasly.co.uk.