Privacy Policy
Version 2 · Effective 1st September 2026
Breezee AI Limited (“Breezee AI”, “we”, “us”, “our”) is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and your rights under UK data protection law.
This policy applies to visitors to our website at breezee.ai and to customers and prospects who interact with the Breezee AI platform and its sAIlsbot sales agent. It should be read alongside our Data Processing Agreement which governs the processing of personal data we carry out on behalf of our business customers.
1. Who We Are
Breezee AI Limited (Company No. SC857320) is the data controller for personal data collected through our website and our interactions with prospective and existing customers. Our registered office is 10/1 Woodcroft Road, Edinburgh EH10 4FD.
You can contact us about data protection matters at privacy@breezee.ai.
2. Information We Collect
2.1 Website visitors
When you visit our website, we may automatically collect:
(a) technical data such as your IP address, browser type, operating system, and device type, which our servers see in order to deliver and secure the site; and
(b) usage data such as pages visited and referring URL, counted in aggregate by our analytics.
Our analytics are cookieless: they set nothing on your device and do not identify you or follow you to other sites. The only things we store on your device are a preference you set yourself and, if you choose it, the sAIlsbot agent's memory of you. Our Cookie Policy names each one.
2.2 When you contact us or sign up
When you fill in a contact form, request a demo, or sign up to join our Beta Programme, we collect:
(a) your name and email address;
(b) your company name and job title;
(c) any other information you choose to provide in your message; and
(d) records of our correspondence with you.
2.3 Beta customers (Breezee AI dashboard users)
If you are an authorised user of the Breezee AI dashboard on behalf of your organisation, we process:
(a) your name and email address as dashboard login credentials;
(b) your activity within the dashboard (configuration changes, agent deployments, usage data); and
(c) support and feedback communications you send to us.
For this account data — your login, your dashboard activity, and our support correspondence with you — Breezee AI is the data controller: we need it to provide, secure, support and bill for the service, and this policy governs it. The data your organisation puts through the platform, including its prospects' data, is different: there your organisation is the controller and we process it under the Data Processing Agreement.
2.4 Prospects interacting with sAIlsbot agents
When a visitor to a Breezee AI customer's website interacts with an sAIlsbot agent, the agent may collect personal data about that visitor, such as name, email address, and the content of the conversation.
The agent is anonymous by default. A visitor can hold an entire conversation without anything being stored on their device and without being recognised on a later visit.
After a few messages, or if the visitor shares contact details or books a meeting, the agent asks whether they would like to be remembered. Only if they agree does it store an identifier in their browser's local storage, and only then does the agent retain a summary of the conversation so it can pick up where it left off next time. Declining is recorded so the visitor is not asked again, and nothing else is kept.
A visitor can withdraw that consent at any time through the Manage data option in the agent. Withdrawing stops any further use and clears the identifier from their browser. It does not by itself erase what has already been stored — to have that removed, ask us or the customer whose website the agent appears on.
In this scenario Breezee AI processes that data as a data processor on behalf of our customer, who is the data controller. That processing is governed by our Data Processing Agreement and the customer's own privacy policy, not this one.
3. How We Use Your Information
We use the personal data we collect for the following purposes:
(a) to provide, operate, and improve our website and the Breezee AI platform;
(b) to respond to enquiries and provide customer support;
(c) to manage the Beta Programme, including onboarding and communications;
(d) to send you product updates, release notes, and service communications relevant to your account (you can unsubscribe at any time);
(e) to send marketing communications where you have opted in or where we have a legitimate interest and you have not opted out;
(f) to analyse how our website and platform are used so we can improve them;
(g) to comply with our legal and regulatory obligations; and
(h) to train and improve our AI models using data that has been irreversibly anonymised (Anonymised Platform Data) — full details in Section 7.
4. Legal Basis for Processing
We rely on the following lawful bases under Article 6 UK GDPR:
Contract: processing necessary to perform our contract with you or to take steps at your request before entering into a contract — for example, managing your Beta account.
Legitimate interests: where our interests (or a third party’s) are not overridden by your rights — for example, analysing website usage, sending service updates to existing customers, and improving our platform.
Consent: where you have given clear consent — for example, optional marketing communications, or choosing to be remembered by an sAIlsbot agent.
Legal obligation: where processing is necessary to comply with a legal requirement.
5. Sharing Your Information
5.1 Within Breezee AI
Your personal data is shared within Breezee AI only to the extent necessary for our team to operate the platform and respond to you.
5.2 Service providers and sub-processors
There are two situations, and the law treats them differently.
When we are the controller — your dealings with us as a website visitor, prospect or customer — we use these providers to run our business, each under a data processing agreement with us: HubSpot (our CRM, where we keep the details you give us when you request a demo, unlock a gated video, or contact us); Cal.com (booking demo meetings through our website); Resend (email); Vercel (hosting our website); Sanity (our website content system); and Atlassian (support tickets). Where a provider is outside the UK, we rely on the transfer safeguards described in Section 6.
When we are a processor — running the sAIlsbot agent on a customer's behalf — the services we engage to do that are our sub-processors. The full and current list is published at breezee.ai/sub-processors, naming each provider, where it is established, what it processes and the safeguard that applies to any transfer outside the UK. It also lists, separately, the services a customer may connect to their own account, such as their CRM, which are that customer's providers rather than ours. Customers are notified before a new sub-processor is engaged, under Clause 4.3 of the Data Processing Agreement.
5.3 Legal and regulatory disclosure
We may disclose your personal data to law enforcement or regulatory bodies where required by law or court order. We will notify you where legally permitted to do so.
6. International Data Transfers
Several of our sub-processors are based in the United States, which does not benefit from a comprehensive UK adequacy decision. Where we transfer your personal data outside the UK to such sub-processors, we ensure an appropriate transfer safeguard is in place, either:
(a) the International Data Transfer Agreement (IDTA) issued by the Information Commissioner’s Office (ICO); or
(b) the EU Standard Contractual Clauses together with the UK Addendum (version B.1.0).
Transfers to EEA countries (such as Germany, where Langfuse is based) are not restricted transfers under UK law and do not require additional safeguards.
7. AI Training and Anonymised Data
Breezee AI may use conversation data and usage statistics derived from the Breezee AI platform to train and improve its AI models. We do not do so today. Before any such use, the data will be irreversibly anonymised — all direct and indirect personal identifiers removed — so that the resulting dataset cannot reasonably be used to identify any individual, under a methodology we will document before we begin.
Anonymised Platform Data of this kind does not constitute personal data under UK GDPR, and its use is not subject to the restrictions in this Privacy Policy. Where Breezee AI processes data on behalf of a customer under a Data Processing Agreement, this use is authorised in the agreement under which we provide the service to that customer — the Beta Access Agreement or the Terms and Conditions — and in Clause 8 of the Data Processing Agreement.
8. How Long We Keep Your Information
We keep personal data for as long as we need it for the purpose it was collected for, and no longer.
We do not yet run automated deletion on a schedule. Data is removed when you ask us to remove it, or when we review it and find it is no longer needed. Both are done by a person on our team rather than by a system. We are building automated retention, and this section will state the periods once it is in place — we would rather tell you what we actually do than publish a schedule we do not yet keep.
In practice:
Website visitor data: our analytics count visits in aggregate and do not identify you. Server logs are kept only as long as we need them to operate and secure the service.
Enquiry and contact data: kept while we are in contact, and for a reasonable period afterwards in case you come back to us.
Customer account data: kept for the duration of the contract, and afterwards for as long as we are required to keep financial and legal records — generally six years.
Beta customer data: at the end of the Beta Period you may ask us to export it, remove it, or migrate it to a General Availability account. Nothing happens automatically: tell us which you would like and we will do it.
Marketing data: kept until you unsubscribe or ask us to remove it.
Prospect data collected by an sAIlsbot agent on a customer's website: that customer decides how long it is kept, and we act on their instructions under the Data Processing Agreement.
9. Your Rights
Under UK GDPR, you have the following rights in relation to your personal data:
Access: to request a copy of the personal data we hold about you.
Rectification: to ask us to correct inaccurate or incomplete data.
Erasure: to ask us to delete your data in certain circumstances.
Restriction: to ask us to restrict processing in certain circumstances.
Portability: to receive your data in a structured, machine-readable format.
Object: to object to processing based on legitimate interests or for direct marketing.
Withdraw consent: where processing is based on consent, to withdraw it at any time.
To exercise any of these rights, contact us at privacy@breezee.ai. We will respond within one calendar month.
There is no button in the product that does these things for you. Every request is handled by a person on our team, which is why email is the route for all of them. The one exception is the sAIlsbot agent's Manage data option, which lets a visitor withdraw consent and clear the identifier stored in their own browser without contacting anyone.
If the agent you interacted with was on another company's website, that company is the data controller and your rights are exercised against them; pass the request to them, or send it to us and we will forward it.
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at any time.
10. Cookies
We store very little on your device, and nothing that tracks you across other websites. Our Cookie Policy names each item, says what it is for, and says how long it lasts.
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law. When we make material changes, we will update the “Last updated” date at the top of this page and, where appropriate, notify you by email. The current version of this policy is always available at breezee.ai/privacy-policy.
12. How to Contact Us
Breezee AI Limited — Company No. SC857320
Registered office: 10/1 Woodcroft Road, Edinburgh EH10 4FD