Privacy

Privacy Policy

Effective 1 October 2026 · Controller: Loungest Limited

1. Who we are

Loungest Limited is the controller of the personal information described here, except where section 2 says otherwise. We are a private limited company registered in England and Wales (company number 13049653), with our registered office at Initial Business Centre, Wilson Park, Manchester, M40 8WN, United Kingdom. Rundevou is a product of Loungest Limited.

2. Scope, and the two kinds of people this covers

This policy covers rundevou.com, the member portal at members.rundevou.com, the browser calling widget, and the telephone service itself. It concerns two groups:

• Subscribers and visitors: the businesses that use Rundevou, their staff, and anyone who browses this website or contacts us. We are the controller for this information.
• Callers: people who phone a business that uses Rundevou, or who talk to its receptionist through the browser widget. The business you called decides why your call is answered by an AI, what is recorded and how long it is kept; it is the controller, and we process your information as its processor under the data processing terms in our Service Agreement. If you are a Caller and want to exercise a privacy right, contact the business you called first. If you cannot reach it, write to us and we will pass your request on and help where we can.

3. Information we collect

From Subscribers

• Account and business details: your name, business name, email address, business telephone number, website address, country, and the details of the team members you give seats to.
• Knowledge base material: the website pages, PDF, DOCX or text files you give us to build the receptionist's knowledge base, and the questions, answers, services, prices and menu items you enter.
• Billing record: the plan you chose, amounts charged, receipts, and a payment token plus the last four digits and expiry supplied by Stripe, or the PayPal subscription reference. We never receive or store full card numbers.
• Configuration: the greeting, voice, language and telephony settings you choose, and the numbers you forward to us.
• Support messages: what you send us by email or through the contact form on this site.

Collected automatically

• Server and security logs: IP address, browser and device type, operating system, referring page, pages requested, and date and time. These come from our hosting and content delivery layer and are used to run the service and defend it from abuse.
• Service usage: minutes used, calls answered, bookings and orders created, and which dashboard features were used. We use this for the usage meter in your dashboard, for support, and for billing.

About Callers, on behalf of the Subscriber

• the telephone number the Caller calls from, or, in the browser widget, the email address or phone number the Caller types in so that the business can follow up;
• an audio recording of the conversation and a transcript of it. Every call is recorded; the business you called cannot switch this off, because the recording is the record of what was agreed and the proof of what the receptionist said;
• an AI-generated summary and a sentiment label (positive, neutral, negative);
• whatever the Caller says that the receptionist needs to do its job: name, contact details, the appointment, table, stay, rental or tickets booked, the food ordered and the delivery address.

4. What we do not do

• We do not sell personal information, and we do not share it for behavioural advertising.
• We do not run advertising on this site and we do not use analytics networks that profile you across other websites.
• We do not receive or store full payment card numbers, and the receptionist is designed never to take card details by voice.
• We do not send text messages to Callers or Subscribers.
• We do not use Callers' audio or transcripts to train our own models, and we do not listen to calls for marketing purposes. Our staff access recordings only for support you ask for, for security investigations, or where the law requires.

5. How we use information

• To provide the service: route and answer calls, generate the receptionist's replies, build and search the knowledge base, check availability and make bookings, store recordings and transcripts, and email you a summary after every call.
• To take payment, issue receipts, and manage subscriptions, renewals and cancellations.
• To set up your account on the member portal and allocate telephone numbers.
• To provide support and respond to what you ask us.
• To send service messages, such as renewal reminders, billing notices, security alerts and material changes to our terms. You cannot opt out of these while you hold an account, because they are part of the service.
• To send marketing email, only where you have asked for it or where the law otherwise permits it for an existing business customer. Every marketing message has an unsubscribe link.
• To keep the service secure, investigate misuse, and enforce our terms.
• To meet legal, tax and accounting obligations, and to establish or defend legal claims.
• To understand which features are used, in aggregate, so we can improve the platform.

6. Legal bases

Where the UK GDPR or the EU GDPR applies to information we hold as controller, our legal bases are:

For Caller data we act on the Subscriber's instructions; the Subscriber is responsible for its own legal basis, which is usually its contract with, or its legitimate interest in serving, the Caller.

7. Cookies and local storage

This marketing site sets no cookies of its own. It stores one value in your browser's local storage, rundevou_cookie_consent, which records that you dismissed the cookie notice; it stays in your browser and is never sent to us. Our content delivery and security provider, Cloudflare, may set a strictly necessary cookie to distinguish genuine visitors from automated traffic.

The member portal sets strictly necessary cookies to keep you signed in and to protect forms against cross-site request forgery. Stripe and PayPal set cookies on their own checkout and fraud-prevention pages, governed by their own policies. We use no advertising or analytics cookies today; if that changes, we will ask for your consent before anything of that kind loads.

You can block or delete cookies in your browser. Blocking strictly necessary cookies will stop the member portal from working.

8. Who we share it with

We share personal information only with service providers who process it on our instructions, and only as far as they need it:

We also disclose information where we must: to comply with law or a valid legal request, to enforce our terms, to protect our rights or someone's safety, and to a buyer or successor if our business is sold or reorganised, in which case we will tell you. For a current list of our processors, write to [email protected].

9. International transfers

Our telephony servers and the member portal are hosted in the European Union and the United Kingdom. Audio of calls is sent in real time to Google's Gemini API, and payment data to Stripe and PayPal, which may process it in the United States. Where a transfer leaves the United Kingdom or the European Economic Area we rely on appropriate safeguards: the UK International Data Transfer Addendum or the EU Standard Contractual Clauses, the UK Extension to the EU-US Data Privacy Framework where the recipient is certified, and supplementary measures where needed. You may request a copy of the safeguards we use.

10. How long we keep it

We keep information longer where we need it for a legal claim or where the law requires it.

11. Security

We use technical and organisational measures appropriate to the risk, described in more detail on our Security page: encryption in transit for the website, the member portal, telephony signalling and media, and the connection to our AI provider; encryption at rest for recordings and transcripts; access controls limiting staff access to what their role needs; tenant isolation; short-lived tokens for the browser widget; and a payment flow that keeps card data with Stripe and PayPal rather than on our systems.

No system is perfectly secure. If a breach affects your personal information and the law requires it, we will notify you and the Information Commissioner's Office, or the relevant EU supervisory authority, within the applicable deadline, and we will tell affected Subscribers about any breach of Caller data so that they can meet their own obligations.

12. Your rights

Under the UK GDPR and the EU GDPR you have the right to access, rectify and erase your personal data, to restrict or object to processing, to data portability, and to withdraw consent at any time where we rely on it. Withdrawing consent does not affect processing carried out before the withdrawal. You also have the right to object to processing based on our legitimate interests, and to complain to a supervisory authority: in the United Kingdom that is the Information Commissioner's Office at ico.org.uk; in the European Union, the authority of the country where you live or work. We would appreciate the chance to address your concern first.

To exercise a right, email [email protected] with the request and enough detail for us to identify your account. We will verify you against information we already hold and will never ask for your password. We respond within one month and may extend by a further two months for complex requests, telling you if we do. Subscribers can also export or delete recordings, transcripts and bookings themselves in the member portal.

Callers: the business you called is the controller of your call. Contact it first; if you write to us instead, we will forward your request to it and help it respond.

We do not use your personal information for automated decision-making or profiling that produces legal or similarly significant effects. The receptionist's replies to Callers are generated automatically, but booking an appointment or taking a message is not a decision of that kind.

13. Children

The service is sold to businesses and is not directed at children. We do not knowingly collect personal information from anyone under 16 as a Subscriber. A child may of course telephone a business that uses Rundevou; that call is processed for the business, as described in section 2.

14. Changes

We may update this policy. The effective date at the top shows when it last changed. If a change materially affects how we handle your information, we will tell you by email to the address on your account, or by a prominent notice on the site, before it takes effect.

15. Contact us

Questions, requests and complaints about privacy go to [email protected], or to Loungest Limited, Attn: Privacy, at the address below. For anything else, use [email protected].