PRIVACY POLICY
Organisation & Contact
AdsumoAI Ltd operates as "AssumeAI" (company number 16276829, registered in England and Wales; registered office 205 Madison East, St Cecilia Street, Leeds LS2 7ER). The primary privacy contact is rupert@assume-ai.com.
Data Collection
The company collects multiple categories of information:
- Identity & Contact: names, titles, addresses, emails, phone numbers
- Account Data: credentials, roles, preferences, support tickets
- Communications: emails, call metadata, AI-handled recordings and transcriptions
- Customer Content: prompts, documents, configuration files
- Transactional: purchase history, invoices, payment details (cards not stored)
- Technical: IP addresses, device IDs, cookies, usage analytics
- Marketing: preferences, lead sources, campaign data
- Third-party: publicly available information, licensed data, prospecting tools
Legal Bases for Processing
The organisation processes data under contract, legitimate interests, consent, and legal obligations. Specific purposes include service delivery, billing, analytics, marketing, and compliance.
Data Sharing
Recipients include hosting providers, AI/telephony vendors, payment processors, CRM platforms, professional advisers, and regulatory authorities when legally required.
International Transfers
Safeguards include adequacy regulations, UK International Data Transfer Agreements, and encryption where supported.
We process data as needed for our client work in the United Kingdom, the European Union and the United States, unless otherwise prohibited by our specific contract with a client.
User Rights
Individuals can request access, correction, erasure, restriction, portability, and object to processing. Marketing opt-outs are available. Complaints can be filed with the UK Information Commissioner's Office (ICO).
Retention Periods
- Contracts: 7 years post-termination
- Support logs: up to 24 months
- Call recordings: default 24 months
- Marketing data: 24 months or until opt-out
Processor Arrangements
When acting as a data processor for clients, the company processes data only per documented instructions, maintains confidentiality, implements security measures, manages vetted sub-processors, and assists with data subject rights requests.
Security Measures
We implement appropriate technical and organisational measures to protect personal data against unauthorised or unlawful processing, accidental loss, destruction, or damage. This includes encryption, access controls, regular security assessments, and staff training.
Cookies and Tracking
When you first visit our website you are shown a cookie banner with a clear choice to Accept or Reject non-essential cookies. No analytics or advertising cookies are loaded until you click Accept; if you click Reject, none of the tools listed below are loaded. Your choice is remembered so you are not asked again on every visit. Essential cookies required for the site to function are always allowed.
Where you consent, we use the following analytics and advertising technologies:
- Meta Pixel (Meta Platforms, Inc.) — measures the performance of our advertising and builds website-visitor audiences for retargeting on Facebook and Instagram.
- Google Analytics 4 (Google LLC) — helps us understand how visitors find and use our site so we can improve it.
| Cookie / key | Provider | Purpose | Duration |
|---|---|---|---|
| aai_consent | AssumeAI (this site) | Remembers your Accept/Reject cookie choice | Until cleared |
| _fbp | Meta | Ad measurement and website-visitor audiences | Up to 3 months |
| _ga, _ga_* | Google Analytics | Distinguishes visitors and measures site traffic | Up to 2 years |
Withdrawing consent: you can change your choice at any time by clearing your browser's site data for assume-ai.com (which removes the stored consent preference) and reloading the page — the banner will then appear again. You can also block or delete cookies through your browser settings.
Children's Data
Our website and services are intended for businesses and professionals and are not directed at children. We do not knowingly collect personal data from children under the age of 16. If we become aware that we have inadvertently collected personal data from a child, we will delete it without undue delay.
Automated Decision-Making
We do not make decisions producing legal or similarly significant effects about individuals based solely on automated processing. Where we use AI to assist with tasks such as handling communications or analysing usage, meaningful human involvement is retained for significant decisions. Further detail on our use of AI is set out in our AI Policy.
Updates to This Policy
We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. We will notify users of any material changes through our website or direct communication.
Contact Us
For any questions or concerns about this privacy policy or our data practices, please contact us at:
AdsumoAI Ltd (AssumeAI)
205 Madison East, St Cecilia Street
Leeds LS2 7ER, United Kingdom
Company number 16276829, registered in England and Wales
Email: rupert@assume-ai.com
Last updated: October 2026
