HeyEddie
Privacy — Form E-51

Privacy Policy

How Eddie handles personal data — yours, and your customers'. Written in plain English, because you've got better things to do.

DraftLast updated 1 September 2026. Pending legal review — this wording may change before it is final.

01Who we are

Eddie is run by Squishy Intelligence Ltd, a company registered in England and Wales. We are the data controller for the personal data described in this policy. Company number and registered office address: to be added before publication.

Questions about your data go to privacy@heyeddie.co.uk. Anything else, support@heyeddie.co.uk.

02Who this covers

  • Tradespeople who sign up for Eddie (our customers) and visitors to heyeddie.co.uk.
  • Callers and customers of those tradespeople — people who ring a tradesperson's number and speak to Eddie, or who message Eddie on WhatsApp about a job.

If you are a tradesperson using Eddie, you are also responsible for your own customers' data under UK data protection law. Eddie processes it on your behalf to run your business; this policy explains what we do with it.

03What we collect

Tradesperson account data

  • Your first name, email address, mobile number and trade, given when you sign up.
  • What you tell Eddie on the setup call: business name, where you work and how far you travel, pricing, working days and hours, certifications, the jobs you do and don't take on, how you want to be paid.
  • Your Eddie phone number, call-forwarding status, calendar connection status and app settings.
  • Subscription status and Stripe customer and subscription references (see payment data below).
  • Login data: the SMS codes we text you and the sessions they create.

Customer and job data

  • Names, phone numbers, addresses and job details that callers give Eddie on the phone or over WhatsApp.
  • Bookings, quotes, invoices, payment status and any notes or photos sent about a job.

Call recordings and transcripts

  • Calls to your Eddie number are answered by an AI voice assistant. They are recorded and transcribed so Eddie can book the job, send you a summary and let you listen back. The voice AI is provided by ElevenLabs and the phone line by Twilio.
  • Your setup call with Eddie is recorded and transcribed in the same way.
  • WhatsApp conversations between you and Eddie, and between Eddie and your customers, are stored so Eddie can act on them.

Payment data

  • Card details for your subscription, and your customers' card details when they pay an invoice, are entered directly with Stripe. Eddie never sees or stores card numbers. We keep Stripe's reference IDs and whether a payment succeeded.

Technical and usage data

  • IP address, device and browser type, pages viewed and actions taken on the website and in the app (via PostHog analytics), plus server logs used to keep the service running and secure.

04Why we use it (lawful bases)

What we doLawful basis (UK GDPR Article 6)
Run the service for tradespeople: answering calls, booking jobs, sending quotes and invoices, morning briefings, the app and WhatsAppPerformance of a contract with you
Handle callers' and customers' details to book and deliver the job they asked aboutLegitimate interests — the tradesperson's interest in running their business and the caller's interest in getting the job done
Record and transcribe calls so Eddie can capture the job accurately and you can check what was saidLegitimate interests (as above), balanced against callers' expectations; see section 10
Take subscription payments and invoice paymentsPerformance of a contract; legal obligation (financial record-keeping)
Keep invoices and payment records for six yearsLegal obligation (UK tax and accounting rules)
Analytics, service improvement, fraud and abuse prevention, security loggingLegitimate interests
Send you product updates and marketing emailsConsent — you can unsubscribe at any time
Analytics cookies on the websiteConsent where required by the Privacy and Electronic Communications Regulations

Automated decisions. Eddie uses AI to understand calls and messages and to suggest bookings, quotes and replies. Anything that commits you — a booking, a quote, an invoice — is shown to you and can be changed or cancelled. We do not make decisions with legal or similarly significant effects on you solely by automated means.

05Who we share it with

We use a small number of service providers (processors) to run Eddie. They act on our instructions under written contracts and cannot use your data for their own purposes.

ProviderWhat they do for Eddie
CloudflareHosts the service, database, file storage and this website
ElevenLabsThe AI voice that answers and transcribes calls
TwilioPhone numbers, call routing, SMS login codes and WhatsApp messaging
WhatsApp (Meta)Delivers WhatsApp messages between you, Eddie and your customers, via Twilio
StripeSubscription billing and invoice payments; holds all card details
PostHog (EU region)Product analytics for the website and app, hosted in the EU
PostmarkSends transactional email — invoices, quotes, receipts
GoogleCalendar sync, only if you connect your Google Calendar

We will also share data where the law requires it, to enforce our terms, or as part of a sale or reorganisation of our business (in which case this policy continues to apply). We do not sell personal data.

06International transfers

We keep data in the UK and EU where we can. Some providers above process data in the United States. Where that happens we rely on the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, or on the UK–US Data Bridge for providers certified under it, so that your data gets equivalent protection.

07How long we keep it

DataKept for
Call recordings180 days, then deleted
Call transcripts and summaries24 months
Job photos24 months after the last completed job for that customer
Invoices, quotes and payment records6 years (UK financial record-keeping requirement)
Account, customer and job recordsFor as long as you have an Eddie account, then deleted or anonymised within 90 days of closure — except records we must keep for the six-year period above
Analytics events24 months
SMS login codesMinutes — deleted once used or expired

Retention runs automatically in our storage layer and deletions are logged. If you cancel, you can export your customers, jobs and invoices first.

08Security

Data is encrypted in transit (TLS) and at rest. Access is restricted to staff who need it, all webhooks from our providers are signature-verified, and login to the app is by one-time SMS code. No system is perfectly secure; if we ever discover a breach that puts you at risk we will tell you and the ICO as the law requires.

09Your rights

Under UK GDPR you can ask us to:

  • Access the personal data we hold about you, and get a copy.
  • Correct anything that's wrong.
  • Delete your data ("right to erasure"), subject to records we are legally required to keep.
  • Restrict or object to how we use it, including objecting to processing based on legitimate interests.
  • Port your data — get it in a machine-readable format or have it sent to another provider.
  • Withdraw consent at any time where we rely on it (for example, marketing emails).

Email privacy@heyeddie.co.uk. We'll respond within one month. We may need to check who you are first.

10If you called or messaged a tradesperson

If you rang a tradesperson and spoke to Eddie, or messaged about a job on WhatsApp, the tradesperson is your point of contact — they hold your booking. Eddie is an AI assistant working on their behalf, and the call was recorded and transcribed so the details reach them accurately.

You can exercise any of the rights above with us directly at privacy@heyeddie.co.uk — for example, to ask for a recording to be deleted — and we will coordinate with the tradesperson where needed.

11Cookies and analytics

heyeddie.co.uk uses PostHog (EU-hosted) to understand how people use the site — which pages are visited, whether the signup form works, roughly where visitors come from. PostHog sets first-party cookies and local storage entries beginning ph_, served from f.heyeddie.co.uk. We don't use advertising cookies or share analytics with ad networks.

When you start a trial you are taken to Stripe Checkout, which sets its own cookies for fraud prevention — see Stripe's privacy policy.

You can block or delete cookies in your browser settings; the site will still work.

12Complaints

If you're unhappy with how we've handled your data, tell us first at privacy@heyeddie.co.uk and we'll try to put it right. You also have the right to complain to the UK regulator:

Information Commissioner's Office

Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Helpline: 0303 123 1113
ico.org.uk/make-a-complaint

13Changes to this policy

We'll post any changes here and update the date at the top. If a change materially affects how we use your data, we'll email account holders before it takes effect.