Privacy Policy

1. Who we are

Rekol is an AI-powered sales call evaluation tool operated by Itua ("we", "us", "our"). Our website is getrekol.com. You can contact us at hello@getrekol.com.

This Privacy Policy explains how we collect, use, and protect your personal data when you use Rekol. We are committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. What data we collect

We collect the following personal data when you use Rekol:

• Name and email address — collected when you sign in with Google, Microsoft, or your work email
• Call transcript content — the text you paste into the tool for evaluation
• Evaluation history — records of your past evaluations including scores and framework used
• Usage data — number of evaluations run, date of sign-up, and account activity
• Custom framework data — any custom framework fields you create and save
• Technical data — IP address, browser type, and device information collected automatically

3. How we use your data

We use your personal data for the following purposes:

• To provide the Rekol service — processing transcripts through our AI to generate evaluations
• To save and display your evaluation history
• To manage your account and authenticate you on return visits
• To track usage limits and manage subscription tiers
• To send transactional emails such as sign-in links and product updates (with your consent)
• To improve the product based on aggregated, anonymised usage patterns

Our legal basis for processing is performance of a contract (providing the service you have signed up for) and legitimate interests (improving the product and preventing abuse).

4. Call transcript data

We take the privacy of your call transcript data seriously. Transcripts you paste into Rekol are:

• Sent to Anthropic's API for AI processing — subject to Anthropic's data processing terms
• Not stored permanently on our servers — we store only the evaluation output, not the raw transcript
• Not used to train AI models without your explicit consent

You should ensure you have appropriate consent or legal basis to share any third-party personal data contained in call transcripts before pasting them into Rekol.

5. Third parties we share data with

We share data with the following third parties to operate the service:

• Supabase — our database and authentication provider (EU-based, GDPR compliant)
• Anthropic — AI processing of transcript content (subject to Anthropic's privacy policy)
• Netlify — website hosting (subject to Netlify's privacy policy)
• Stripe — payment processing for Pro subscriptions (PCI compliant)
• Google and Microsoft — OAuth authentication when you choose to sign in with those providers

We do not sell your personal data to any third party. We do not share your data with advertisers.

6. How long we keep your data

We retain your data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or financial compliance purposes (such as payment records, which we keep for 7 years in line with UK tax law).

Transcript content is not retained beyond the processing of your evaluation request.

7. Your rights

Under UK GDPR you have the following rights:

• Right to access — request a copy of the personal data we hold about you
• Right to rectification — ask us to correct inaccurate data
• Right to erasure — ask us to delete your data (subject to legal retention requirements)
• Right to restrict processing — ask us to limit how we use your data
• Right to data portability — receive your data in a machine-readable format
• Right to object — object to our processing of your data

To exercise any of these rights, contact us at hello@getrekol.com. We will respond within 30 days.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe your data has been mishandled.

8. Cookies and tracking

Rekol uses cookies and similar technologies to:

• Keep you signed in between sessions (authentication cookies)
• Remember your evaluation history and preferences (localStorage)
• Measure usage through Google Analytics (analytics cookies)

You can disable cookies in your browser settings, though this may affect your ability to use the service. We use Google Analytics in anonymised mode and do not enable advertising features.

9. Security

We take reasonable technical and organisational measures to protect your data, including encrypted connections (HTTPS), access controls, and secure third-party infrastructure. However, no internet transmission is completely secure and we cannot guarantee absolute security.

10. Children's privacy

Rekol is not intended for users under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by displaying a notice on the site. The date at the top of this page shows when the policy was last updated.

12. Contact us

If you have any questions about this Privacy Policy or how we handle your data, please contact us:

• Email: hello@getrekol.com
• Website: getrekol.com