Privacy practices built for regulated call operations.

Tindorah acts as controller for website, account, billing, and relationship-management data tied to this service. For customer campaign data processed on behalf of a company, Tindorah typically acts as processor or subprocessor as described in the applicable contract or data processing agreement.

The exact legal entity, contact route, and any appointed privacy representative are provided in the commercial documentation used to onboard your organization.

We may collect contact details, company details, login identifiers, billing and contract records, support communications, and technical metadata needed to authenticate users and operate workspaces.

When customers run campaigns or inbound workflows, we may process contact records, call metadata, transcripts, knowledge assets, and related configuration as instructed by the customer.

Depending on the context, processing is based on contract performance, legitimate interests in securing and improving the platform, legal obligations, or consent where consent is the appropriate basis.

Customers remain responsible for choosing a valid legal basis for their own outreach, call recordings, contact uploads, and notices in the jurisdictions where they operate.

We share data only with authorized personnel, contracted subprocessors, infrastructure providers, and professional advisors who need it to deliver, secure, or support the service.

Where Tindorah processes customer data on behalf of a customer, sharing and processing scope are governed by the commercial agreement, any DPA, and documented customer instructions.

We retain data for as long as needed to provide the service, resolve disputes, enforce agreements, and meet statutory retention duties. Retention periods depend on the data category, account status, and applicable law.

We use access controls, least-privilege permissions, logging, and vendor safeguards to protect data. When data is transferred outside the EEA or UK, we rely on appropriate transfer mechanisms such as contractual safeguards where required.

Subject to applicable law, individuals may request access, correction, deletion, restriction, portability, or objection. Individuals may also raise concerns with their local supervisory authority.

If Tindorah acts only as processor for a particular dataset, we will direct the request to the relevant customer unless law requires otherwise.

Essential cookies keep the site working, remember your language choice, preserve interface preferences such as the sidebar state, and maintain security-related behavior such as authentication or CSRF protection.

Optional analytics cookies are only loaded after you choose to allow them. In this app, that means Vercel Analytics, which helps us understand page usage and performance trends without needing to identify you directly.

If you change your mind later, you can clear the stored preference in your browser and the banner will appear again.