Trust & Privacy

Your data & control

You stay in control of the personal data you share with MyAvatar. At any time you can ask us what we hold about you, correct it, export it, or have it deleted. We don't sell your personal data, and we don't use it for anything we haven't told you about.

Most controls are available directly in your account; anything that isn't, you can request from us and we'll action it (see Exercise your rights).

Your GDPR rights

If you're in the EU/EEA (or the UK), the GDPR gives you the following rights over your personal data. We honour them for everyone.

• Access — a copy of the personal data we hold about you.
• Rectification — correct anything inaccurate or incomplete.
• Erasure ("right to be forgotten") — have your data deleted.
• Portability — receive your data in a portable format.
• Restriction & objection — limit or object to certain processing.
• Withdraw consent — where we rely on consent, withdraw it at any time.

To exercise any of these, see Exercise your rights. We respond within one month.

Call recording & transcription if enabled

Where a MyAvatar customer uses our calling tools to speak with you, the call may be recorded and transcribed — but only with transparency and control built in:

• You're told first. When a call is recorded, you hear a notice at the start of the call (or are asked to consent before recording begins).
• Stored securely and used to keep an accurate record of the conversation and to surface helpful summaries for the business you spoke with.
• Kept for a limited time. Recordings and transcripts are deleted automatically after the retention period (default 12 months), then gone.
• One-click delete. After a recorded call you may receive an email with a link to delete that recording yourself, immediately — no account needed.
• Erasure on request. You can ask to have your recordings and transcripts deleted at any time, and the insights derived from them go too.

This describes the calling feature where a customer has switched it on. The customer making the call is responsible for its lawful use; MyAvatar provides the controls above.

What we collect

We collect only what we need to provide the service:

• Audit & enquiry forms — the website/company details you submit for a growth audit.
• Account data — name, email, and billing details when you sign up.
• CRM contacts — contact details our customers add to manage their own relationships.
• Usage data — how you use the product, to keep it working and improve it.
• Call recordings & transcripts — only where the calling feature is enabled (see above).

Cookies

We use a small number of cookies: essential ones that make the site and your login work, and analytics ones that help us understand how the site is used. You can control non-essential cookies through your browser. A full Cookie Policy is published alongside this page.

For business customers DPA

When you use MyAvatar to process other people's personal data (for example, your CRM contacts or recorded calls), you are the data controller and MyAvatar is the processor acting on your instructions.

A Data Processing Agreement (DPA) governs that relationship — covering security, sub-processors, and data-subject requests. Contact us to put a DPA in place before processing personal data at scale, and configure your own retention, consent, and access settings within the product.