Usezu

    Privacy Policy

    Last updated: September 2026

    This Privacy Policy explains how Usezu (“Usezu”, “we”, “us” or “our”) collects, uses, discloses and protects personal information when you visit usezu.com, use our applications, APIs and services, or otherwise interact with us (together, the “Platform”).

    The Platform is a business tool. Much of the information processed through it is uploaded or generated by our customers about their own contacts. In that situation the customer decides why and how that information is used (they are the “controller” or “business”) and we process it on their behalf as their “processor” or “service provider”. If you are an individual who was contacted by a business using our Platform, please direct your privacy requests to that business; we will assist them in responding.

    By using the Platform you acknowledge this Privacy Policy. If you do not agree with it, please do not use the Platform.

    1. Information we collect

    Information you provide

    • Account and profile information — name, business name, email address, phone number, password or one-time codes, time zone, language and role.
    • Billing information — plan, billing address, tax details and partial payment card details. Full card numbers are collected and stored by our payment processor, not by us.
    • Content you create or upload — leads and contact records, messages, email and SMS templates, call recordings and transcripts where you enable them, notes, files, images, forms, appointments, pipelines, automations, landing pages, prompts and AI inputs.
    • Support and communications — messages you send us, survey responses, and information you share when reporting an issue.

    Information collected automatically

    • Device and log data — IP address, browser type, operating system, device identifiers, referring pages, timestamps, and pages or features used.
    • Usage data — actions taken in the Platform, feature usage, credits and message volumes, error reports and performance data.
    • Cookies and similar technologies — used for authentication, security, preferences and analytics. See Section 8.
    • Communications metadata — delivery, open, click, bounce, reply, call duration and disposition data for messages and calls sent through the Platform.

    Information from third parties

    • Integrations you connect — such as advertising, calendar, email, telephony, payment and field-service platforms, which share data with us at your direction.
    • Service providers — fraud prevention, identity verification, deliverability and analytics providers.
    • Public sources and referrals — for example when a partner or existing customer refers you.

    We do not intentionally collect sensitive categories of personal information (such as health, biometric, precise geolocation or government identifiers) and ask that you not upload them unless a feature is expressly designed for that purpose.

    2. How and why we use information

    • To provide, operate, maintain and secure the Platform and the features you enable.
    • To create and administer your account, authenticate you, and provide customer support.
    • To process payments, manage subscriptions, credits and usage-based charges, and prevent payment fraud.
    • To send transactional and service communications, including security alerts, billing notices and product changes.
    • To deliver the messages, emails and calls you initiate through the Platform, and to report on their delivery and performance.
    • To provide AI features you use, including generating replies, content, summaries and recommendations for your review.
    • To monitor, troubleshoot, analyse and improve the Platform, including aggregated and de-identified analytics.
    • To detect, investigate and prevent fraud, abuse, spam, security incidents and violations of our Terms.
    • To comply with legal obligations, respond to lawful requests, and establish, exercise or defend legal claims.
    • To send marketing communications about our products where permitted — you can opt out at any time.

    Legal bases (EEA, UK and similar jurisdictions)

    Where data protection law requires a legal basis, we rely on: performance of a contract with you; our legitimate interests in operating, securing and improving the Platform and in marketing responsibly; your consent (which you may withdraw at any time), for example for certain cookies and marketing; and compliance with legal obligations.

    AI and model training

    We use artificial intelligence providers to power certain features. Content you submit to those features is processed to return a result to you. We do not sell your data and we do not permit your customer content or Contact Data to be used to train third-party foundation models, except where you explicitly instruct us to. We may use aggregated or de-identified data — which cannot reasonably identify you or your contacts — to improve the reliability and quality of our own Platform.

    3. When we share information

    We do not sell personal information. We share information only as described below:

    • Service providers and sub-processors — hosting, storage, databases, email and SMS delivery, telephony, payment processing, analytics, error monitoring, customer support and AI providers, each bound by contractual confidentiality and data protection obligations and permitted to use the data only to provide services to us.
    • At your direction — with integrations you connect, recipients you message, and users you invite to your workspace.
    • Within your workspace — account owners and administrators can access the data in their workspace, including data created by their team members.
    • Legal and safety — where we reasonably believe disclosure is required by law, subpoena, warrant or court order, or is necessary to protect the rights, property or safety of any person, to enforce our Terms, or to investigate fraud or abuse.
    • Business transfers — in connection with a merger, acquisition, financing, reorganisation or sale of assets, subject to the acquirer honouring commitments materially consistent with this Policy.
    • Aggregated or de-identified information — which cannot reasonably be used to identify you.

    4. How we protect information

    We maintain administrative, technical and physical safeguards designed to protect personal information, including encryption in transit, encryption at rest for stored data, role-based access controls, row-level authorisation rules, least-privilege access for personnel, audit logging, and regular review of our providers. No method of transmission or storage is perfectly secure, so we cannot guarantee absolute security. You are responsible for safeguarding your account credentials and for the access you grant to users of your workspace. If we become aware of a breach affecting your personal information, we will notify you and any regulator as required by law.

    5. Data retention

    We retain personal information only as long as reasonably necessary for the purposes described in this Policy, including to provide the Platform, resolve disputes, enforce our agreements, and satisfy legal, tax, accounting or reporting requirements. Content in your workspace is retained while your account is active and for a limited period afterwards so you can reactivate or export it; after that period we delete or de-identify it. We may retain suppression-list entries indefinitely so that individuals who asked not to be contacted continue to be excluded, and we may retain information longer where a complaint or prospective litigation exists.

    6. Your privacy rights

    Depending on where you live, you may have the right to: access the personal information we hold about you; correct inaccurate information; delete your information; obtain a portable copy; restrict or object to certain processing; withdraw consent; and not be discriminated against for exercising these rights. Where automated decision-making with legal or similarly significant effects occurs, you may request human review.

    To exercise your rights, email [email protected]. We will verify your request and respond within the time required by applicable law. You may use an authorised agent where the law allows. If your information was uploaded by a business that uses our Platform, we will refer your request to that business and support them in responding.

    EEA and UK residents

    You may lodge a complaint with your local supervisory authority. Where we transfer personal information outside your region, we rely on approved transfer mechanisms such as the European Commission’s Standard Contractual Clauses, together with additional safeguards where appropriate.

    California residents

    Under the CCPA/CPRA you may request the categories and specific pieces of personal information we collected, the sources, our business purposes, and the categories of third parties with whom we shared it; request deletion or correction; and limit the use of sensitive personal information. We do not sell personal information and do not share it for cross-context behavioural advertising as those terms are defined by the CCPA. We will not discriminate against you for exercising these rights.

    Other US state privacy laws

    Residents of states including Colorado, Connecticut, Utah, Virginia, Texas and Oregon have comparable rights to access, correct, delete, obtain a copy of, and opt out of targeted advertising or profiling in furtherance of decisions producing legal or similarly significant effects. Where those states provide an appeal right, you may appeal a decision by replying to our response.

    Australia

    We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. You may complain to us at [email protected] and, if unsatisfied, to the Office of the Australian Information Commissioner.

    7. Messaging, calls and communications data

    When you send SMS, email or place calls through the Platform, we process the message content, recipient details and delivery metadata needed to route and report on those communications, and we share them with the relevant carrier or delivery provider. Call recording and transcription are optional features controlled by the customer; the customer is responsible for obtaining any consents required in their jurisdiction. Individuals who opt out (for example by replying STOP) are added to a suppression list so that further messages are blocked. Mobile phone numbers and consent records collected for SMS programs are never sold, rented or shared with third parties for their own marketing purposes.

    8. Cookies and tracking

    We use strictly necessary cookies for authentication, session management and security; preference cookies to remember your settings; and analytics cookies to understand how the Platform is used. You can control cookies through your browser, though disabling necessary cookies will prevent the Platform from working. Because there is no common standard for responding to browser “Do Not Track” signals, we do not currently respond to them; where required by law we honour recognised opt-out preference signals such as Global Privacy Control.

    9. Children’s privacy

    The Platform is intended for business use and is not directed to children. We do not knowingly collect personal information from anyone under 18. If we learn that we have collected such information, we will delete it. Contact [email protected] if you believe a child has provided information to us.

    11. International processing

    We and our service providers may process and store information in countries other than your own, including the United States, the European Union and Australia. Where we transfer personal information across borders, we take steps required by applicable law to ensure it receives an adequate level of protection, including contractual safeguards with our providers.

    12. Changes to this Policy

    We may update this Privacy Policy from time to time. We will post the updated version and revise the “Last updated” date, and we will provide additional notice where the changes are material. Your continued use of the Platform after an update takes effect constitutes acceptance of the revised Policy, so please review it periodically.

    13. Google user data and the Google Calendar integration

    Team members may choose to connect a Google account so that appointments booked through the Platform appear in their Google Calendar. This section explains exactly what we do with data received from Google APIs when you do.

    What we access

    • Your Google account email address, to show which account is connected and to match it to your user.
    • Free/busy information from your calendars, so that booking pages only offer times when you are available. We do not read the titles, descriptions, attendees or locations of events we did not create.
    • Calendar events created by the Platform: we create, update, reschedule and cancel the appointment events that correspond to bookings made through the Platform, and we read those events back to keep them in sync.

    How we use and store it

    Google data is used only to provide the calendar features described above. OAuth tokens are stored encrypted at rest in our database and are never displayed to users or shared with other customers or third parties. Google data is not used for advertising, is not sold, is not used to train artificial intelligence or machine learning models, and is not read by our staff except with your explicit permission to resolve a support request or where required for security or legal compliance.

    Disconnecting and deletion

    You can disconnect Google Calendar at any time from your team settings in the Platform, or by removing the Platform’s access in your Google Account permissions. When you disconnect, we delete the stored tokens immediately. Appointment events already written to your Google Calendar remain in your calendar under your control.

    Limited Use

    Usezu’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

    14. Zoom user data and the Zoom integration

    Team members may choose to connect a Zoom account so that appointments booked through the Platform get their own Zoom meeting. This section explains what we do with data received from Zoom when you do. Step-by-step instructions are in the Zoom integration guide.

    What we access

    • Your Zoom user id and email address, to show which Zoom account is connected and to match it to your user.
    • Meetings created by the Platform: when an appointment is booked for you on a calendar or booking link set to Zoom, we create a meeting on your Zoom account and store its join link with the appointment. We do not read recordings, chat, contacts or meetings we did not create.

    How we use and store it

    Zoom data is used only to create and show appointment meeting links. OAuth tokens are stored encrypted at rest in our database and are never displayed to users or shared with other customers or third parties. Zoom data is not used for advertising, is not sold and is not used to train artificial intelligence or machine learning models.

    Disconnecting and deletion

    You can disconnect Zoom at any time from the Platform (Calendar or Team settings), or remove the app in the Zoom App Marketplace under Manage, Added Apps. Either way we delete the stored tokens and your Zoom id and email right away. Meetings already created stay in your Zoom account under your control.

    15. Contact us

    Usezu
    Privacy enquiries and rights requests: [email protected]
    General support: [email protected]