Skip to content

Legal

Privacy

Last updated: July 2026

MinuteOne AI processes business contact data on behalf of customer organizations to place consent-based outbound calls and book appointments. This page is a product-facing summary for the MVP-not a substitute for a counsel-reviewed policy at production scale.

Related: subprocessors · contact

01Data we process

  • Lead identity: name, phone, email, campaign metadata
  • Consent artifacts and form text versions
  • Call metadata, transcripts, qualification outcomes
  • Account users: name, email, role membership
  • First- and last-touch campaign parameters and referring domain for demo attribution

02Site storage and analytics

  • We use first-party local storage for theme, notice state, and bounded campaign attribution
  • Campaign values may be attached to a demo or waitlist request
  • Optional Plausible analytics receives event names and non-PII attribution fields
  • Forms do not send names or email addresses as analytics properties

03Purposes

  • Lead contact
  • Qualification
  • Booking
  • Product analytics for the customer org
  • Security
  • Abuse prevention

We do not sell lead lists.

04Retention

  • Account users: retained while the account is active; deactivated accounts retained ≤90 days unless legal hold.
  • Lead and call records: retained per customer policy (default 24 months operational history) or until export + deletion request.
  • Audit/security logs: typically 12 months for abuse investigation.
  • Demo/synthetic data: labeled and may be wiped without notice.

Export and deletion

Owners can export workspace JSON and deactivate accounts in Settings. Hard erasure of call history may require a support ticket.

05Subprocessors

Depending on configuration we may use:

  • Hosting providers for compute/storage
  • Stripe (billing)
  • LiveKit (realtime voice)
  • Listmonk/Mailcow (email)
  • n8n (automation)
  • Optional LLM providers for support chat

A current list is published at /subprocessors.

06GDPR / rights

Where GDPR or similar law applies, data subjects may request the following via the customer organization or our contact form:

  • Access
  • Correction
  • Export
  • Deletion

Customers are typically controllers of lead data; MinuteOne acts as processor under their instructions.

07Contact

Privacy questions: use the contact form or email the address provided during onboarding. DPA requests: note “DPA” in the contact subject.