Privacy policy
Last updated 27 October 2026
Enquiva 24/7 (“we”, “us”) gives businesses AI agents that answer their phone calls, website chat, messages and forms, follow up leads and book appointments. This policy explains what personal data we handle, why, and the choices you have. Enquiva 24/7 is a trading name of DWC Global Projects Ltd (company no. 17511337), B13, 1 Rochdale Road, Manchester, M4 4GH, United Kingdom. For anything about privacy, email debutwebconsultants@gmail.com.
1. Our two roles
We are the controller for data about the businesses that use Enquiva 24/7 and the people who work for them (our “customers” and “users”), and for visitors to our own website.
We are a processor for data about our customers’ own callers, website visitors, leads and clients (“end users”). The business you contacted decides how that data is used and is responsible for it; we process it only on its instructions. If you spoke to an AI agent on a business’s phone line, website or messaging channel, please contact that business first. We will help it answer your request.
2. What we collect
| Who | Data | Why |
|---|---|---|
| Customers and users | Name, email, phone, password (stored as a hash), business details, team members, billing details (handled by Stripe; we never see full card numbers), settings and content you add (knowledge base, forms, agent instructions) | To provide the service and support, bill you, keep accounts secure. Legal basis: contract; legitimate interests in security and improving the service. |
| End users (processed for our customers) | What you tell an agent: call audio and transcripts, chat and message content, form answers, contact details, appointment and payment requests, and technical data such as phone number, IP address and browser | To run the conversation, pass leads and bookings to the business, and keep records it asked for. |
| Website visitors | Pages viewed, device and browser data, anything you send through our contact form or chat | To answer you and run and secure our site. Legal basis: legitimate interests. |
3. Accounts you connect
Customers can connect other services to Enquiva 24/7. We only request the access each feature needs, we only use it to provide that feature to the customer who connected it, and the customer can disconnect it at any time in Enquiva 24/7’s settings or in the other service.
- Sign in with Google (openid, email, profile): to create and sign in to your account using your name, email address and profile picture.
- Google Calendar (calendar.readonly, calendar.events): to check when you are free so an agent only offers open times, and to add, change or cancel the bookings it makes, with Google Meet links where you ask for them. We read event times and busy status; we do not use the content of your other events for anything else.
- Google Tag Manager (only if you turn it on): to add Enquiva 24/7’s website code to your own Tag Manager container.
Enquiva 24/7’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular we do not sell Google user data, use it for advertising, or let people read it except with your permission, for security, or where the law requires; and we do not use Google user data to develop, improve or train generalised AI or machine-learning models.
Microsoft
Microsoft 365 / Outlook calendars and mailboxes work the same way as Google: calendar access to check availability and manage bookings (with Teams links), and mailbox access only if you connect a mailbox for an agent to send and answer email from.
Meta (Facebook and Instagram)
If you connect a Facebook Page, we use the Page and ad account permissions you grant to receive new Lead Ads leads and messages so an agent can follow them up, and to list your Pages and forms so you can choose which to use. We store access tokens encrypted and delete them when you disconnect. See how to delete your data.
Stripe
If you connect your Stripe account, agents can send your customers payment links for your business. Payments go to your own Stripe account; we keep the payment link, amount and status.
4. AI providers and other processors
To answer conversations we send the relevant content to AI and communications providers that act for us under contracts that require them to protect it. Depending on the features a business uses, these include:
- AI language, speech and avatar models: OpenAI, Anthropic, Google (Gemini), Mistral, ElevenLabs, Fish Audio, Deepgram, Cartesia, HeyGen
- Calls and messaging: Twilio, Telnyx, LiveKit, WhatsApp and Messenger (Meta), Telegram
- Email: SendGrid and the mailboxes a customer connects
- Payments and billing: Stripe
- Hosting, database and storage: our cloud hosting provider
We use providers’ business APIs, which do not train their models on the data we send. A business can also bring its own API keys for some providers, in which case that provider’s terms with the business apply.
5. Sharing
We do not sell personal data. We share it only with the processors above, with the business an end user contacted, with professional advisers, and where the law requires it or to protect people’s safety. If our business is sold or reorganised, data may pass to the new owner under this policy.
6. International transfers
Some of our providers process data outside the UK, mainly in the EU and the United States. Where they do, we rely on UK adequacy regulations or the UK International Data Transfer Agreement / Addendum to the EU Standard Contractual Clauses.
7. How long we keep it
Account data: while your account is open and up to 6 years afterwards for tax and legal records. Conversation records, recordings and leads: for as long as the business keeps them in Enquiva 24/7; deleted within 30 days after it deletes them or closes its account (backups roll off within a further 30 days). Tokens for connected accounts: until you disconnect.
8. Security
Data is encrypted in transit; connected-account tokens and API keys are encrypted at rest. Access is limited to people who need it, accounts can use two-factor sign-in, and we log administrative access.
9. Cookies
We use a strictly necessary cookie to keep you signed in. With your consent, we also use Google Analytics to understand visits to our public website, including pages viewed and basic device and browser information. Google Analytics is loaded only after you choose “Accept analytics”; choosing “Reject analytics” leaves it off. You can change your choice at any time using “Cookie settings” at the bottom of our pages. Analytics cookies are not necessary to use the site. We do not use advertising cookies.
10. Your rights
Under UK data protection law you can ask for a copy of your data, to correct or delete it, to restrict or object to how we use it, and to move it to another service. Email debutwebconsultants@gmail.com. We reply within one month. If your data is held for a business you contacted, we will pass your request to that business. You can also complain to the Information Commissioner’s Office: ico.org.uk.
11. Children
Enquiva 24/7 is a service for businesses and is not aimed at children under 16.
12. Changes
We will update this page when our practices change and tell customers by email about significant changes.