Privacy Policy
Last updated 13 July 2026
Bitvero Limited ("Bitvero", "RedAgents", "we", "us" or "our") is a company registered in England and Wales (company number 14338196), with its registered office at 71-75 Shelton Street, Covent Garden, London WC2H 9JQ. We operate the RedAgents service at www.redagents.io. This policy explains how we handle personal data and your rights under the UK GDPR and the Data Protection Act 2018.
1. Who we are and how to contact us
Bitvero Limited is the data controller for personal data about our account holders and website visitors. For any question about this policy or to exercise your rights, contact us at info@redagents.io.
2. Controller and processor: an important distinction
For data about you as an account holder — your name, email, business and billing details — Bitvero is the controller. For data about your own callers and customers that flows through the service — call recordings, transcripts, phone numbers, enquiries and messages — you are the controller and Bitvero acts as your processor, handling that data only on your instructions to provide the service. As the controller of your callers' data, you are responsible for having a lawful basis to process it and for informing your callers (for example, that calls are answered and recorded by an automated service).
3. The personal data we collect
- Account and business data: your name, email address, phone number, business name and details, and the website you provide.
- Billing data: your plan and payment status. Card payments are processed by Stripe; we do not store full card numbers.
- Call data (as your processor): recordings, transcripts, caller phone numbers, and call metadata such as time, duration and outcome.
- Messaging data (as your processor): the content of SMS and WhatsApp messages exchanged through the service.
- Website and outreach data: content we read from the website you provide, and information about businesses contacted through the Find Customers product.
- Technical data: log data, IP address, device and browser information, and cookies (see our Cookie Policy).
4. How and why we use personal data
We process personal data on the following legal bases:
- To provide the service — provisioning numbers, answering and logging calls, generating quotes and bookings, sending notifications and building websites (performance of our contract with you).
- To take payment and manage your account (performance of our contract and compliance with legal obligations).
- To secure, maintain and improve the service and prevent misuse (our legitimate interests).
- To communicate with you about the service (performance of our contract and our legitimate interests).
- To send you marketing about our own similar services, which you can opt out of at any time (our legitimate interests, or your consent where required).
5. Call recording and AI processing
The AI receptionist answers, records and transcribes calls made to the number assigned to your account, and uses AI language models to understand calls and draft actions for your approval. As the business using the service, you are responsible for ensuring your callers are appropriately informed that calls are handled and recorded by an automated service. Recordings and transcripts are stored securely and made available to you in your dashboard.
6. Sharing your data and our sub-processors
We do not sell personal data. We share it with service providers (sub-processors) who help us run the service, under contracts requiring them to protect it and use it only on our instructions:
| Provider | Purpose | Location |
|---|---|---|
| Supabase | Database, authentication and storage | UK / EU (London) |
| Vapi | AI voice call handling | United States |
| Twilio | Phone numbers, SMS and WhatsApp | United States / global |
| Anthropic (Claude) | AI language processing | United States |
| Stripe | Payment processing | United States / UK |
| Vercel | Website and application hosting | United States / global |
| Brevo | Transactional and marketing email | European Union |
| Google (Places) | Business discovery for outreach | United States |
| Railway | Outreach worker hosting | United States |
We may also disclose data where required by law, to enforce our terms, or in connection with a business sale or reorganisation.
7. International transfers
Some of our sub-processors are located outside the UK. Where we transfer personal data internationally, we rely on appropriate safeguards such as UK adequacy regulations or the UK International Data Transfer Agreement (or the Addendum to the EU Standard Contractual Clauses).
8. How long we keep data
We keep account and billing data for as long as your account is active and for a reasonable period afterwards to meet legal, accounting and dispute-resolution requirements. Call recordings, transcripts and related data are retained while your account is active and deleted on account closure or on your instruction as controller, subject to any legal retention requirements.
9. Your rights
Under UK data protection law you have the right to access, correct, erase, restrict or object to the processing of your personal data, the right to data portability, and the right to withdraw consent where processing is based on consent. To exercise any of these, contact info@redagents.io. If your request concerns data for which we act as another business's processor, we will refer you to the relevant controller.
You also have the right to complain to the Information Commissioner's Office (ICO), the UK supervisory authority, at ico.org.uk. We would appreciate the chance to address your concerns before you approach the ICO.
10. Security
We protect personal data using measures including encryption in transit, tenant isolation at the database level, and access controls. No method of transmission or storage is completely secure, but we work to protect your data and to notify you and any relevant authority of a breach where required by law.
11. Children
The service is intended for businesses and is not directed at children. We do not knowingly collect personal data from anyone under 18.
12. Changes to this policy
We may update this policy from time to time. The date at the top shows when it was last revised, and we will notify you of material changes where appropriate.
Questions? Email us at info@redagents.io. See also our Cookie Policy and Terms of Service.
