Privacy Policy — Eddies Gallery

At Eddies Gallery Ltd, we take your privacy seriously. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our services — including CreatorIQ, IvoxIQ, ResIQ, and eddiesgallery.com. We are committed to being transparent about our data practices.

Section 01

Overview & Data Controller

Eddies Gallery Ltd is the data controller responsible for your personal information. We are incorporated in England and Wales and our services are provided globally with a focus on the UK and African markets.

This policy applies to all users of our platforms and websites. It covers:

Users and businesses using CreatorIQ for content creation and marketing automation.
Businesses and developers using IvoxIQ for AI voice infrastructure.
Restaurant operators and customers using ResIQ for restaurant management.
Visitors to eddiesgallery.com and related web properties.

Section 02

Information We Collect

We collect information in the following ways:

Category	Data Collected	Purpose
Account Data	Name, email address, password (hashed), business name	Account creation & authentication
Usage Data	Features used, pages visited, actions taken, timestamps	Service improvement & analytics
Payment Data	Billing address, payment method (processed by Stripe — we do not store card details)	Billing & subscription management
Voice & Call Data	Call recordings, transcripts, caller IDs, call metadata (IvoxIQ)	AI voice service delivery & quality
Content Data	Text, images, audio content created or uploaded	Service provision & storage
Technical Data	IP address, browser type, device information, cookies	Security & performance
Communication Data	Support tickets, emails, feedback submitted	Customer support

Section 03

How We Use Your Data

We use your information only for legitimate purposes:

To provide, operate, and improve our AI-powered services.
To process payments and manage your subscription or credit balance.
To send transactional emails (account confirmations, billing receipts, security alerts).
To send product updates and promotional communications (you may opt out at any time).
To train and improve our AI models using anonymised and aggregated data.
To comply with legal obligations and enforce our Terms of Service.
To detect and prevent fraud, abuse, and security threats.
To provide customer support and respond to your enquiries.

We will never sell your personal data to third parties for their marketing purposes.

Section 04

Sharing Your Information

We share your data only in limited circumstances:

Service Providers: Third-party vendors who help us operate our services (e.g., Twilio for telephony, Stripe for payments, OpenAI/ElevenLabs for AI processing, cloud hosting providers). These are bound by data processing agreements.
Business Transfers: If Eddies Gallery is acquired or merged, your data may be transferred as part of that transaction, with prior notice to you.
Legal Requirements: We may disclose your data when required by law, court order, or government authority.
Safety: To protect the rights, property, or safety of Eddies Gallery, our users, or the public.

We do not sell, rent, or share your personal data with advertisers or data brokers.

Section 05

Voice & Call Data (IvoxIQ)

IvoxIQ processes voice calls as a core part of its service. Please be aware:

Calls made through IvoxIQ may be recorded and transcribed to deliver AI responses and for quality assurance.
Call recordings are stored securely and accessible only to authorised account holders and Eddies Gallery staff where necessary.
As an IvoxIQ operator, you are responsible for informing your callers that they may be interacting with an AI system and that calls may be recorded, in accordance with applicable laws.
Call data is retained for up to 90 days by default. Enterprise customers may configure custom retention periods.
Voice recordings are processed using third-party AI services including ElevenLabs and OpenAI, which have their own privacy policies.

Section 06

Cookies & Tracking Technologies

We use cookies and similar tracking technologies on our websites and platforms:

Essential Cookies: Required for the platforms to function (authentication, session management). Cannot be disabled.
Analytics Cookies: Help us understand how users interact with our platforms (e.g., Google Analytics). You may opt out.
Preference Cookies: Remember your settings and preferences across sessions.

You can control cookie preferences through your browser settings. Note that disabling certain cookies may impact the functionality of our platforms.

Section 07

Data Retention

We retain your personal data for as long as necessary to provide our services and comply with our legal obligations:

Account Data: Retained for the duration of your account plus 2 years after closure.
Voice Call Recordings: 90 days by default (configurable for enterprise accounts).
Payment Records: 7 years as required by UK financial regulations.
Usage & Analytics Data: Up to 2 years in identifiable form; indefinitely in anonymised form.
Support Communications: 3 years from last interaction.

You may request deletion of your data at any time (see Your Rights below), subject to our legal retention obligations.

Section 08

Your Privacy Rights

Depending on your location, you have the following rights regarding your personal data:

Right of Access: Request a copy of the personal data we hold about you.
Right to Rectification: Request correction of inaccurate or incomplete data.
Right to Erasure: Request deletion of your personal data ("right to be forgotten").
Right to Restriction: Request that we limit how we process your data.
Right to Portability: Receive your data in a structured, machine-readable format.
Right to Object: Object to processing based on legitimate interests or for direct marketing.
Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. UK/EU users also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

Section 09

Data Security

We implement industry-standard security measures to protect your personal data:

All data is transmitted over encrypted HTTPS connections (TLS 1.2+).
Passwords are hashed using industry-standard algorithms — we never store plaintext passwords.
Database access is restricted to authorised personnel only.
Regular security audits and vulnerability assessments are conducted.
We implement rate limiting, anomaly detection, and intrusion prevention systems.

In the event of a data breach that affects your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours of becoming aware, as required by applicable law.

Section 10

International Data Transfers

Eddies Gallery is incorporated in England and Wales and serves users globally, particularly in the UK and African markets. Your data may be processed:

On servers located in the United States (Namecheap VPS hosting, Twilio, OpenAI, ElevenLabs).
By our third-party service providers who may operate in various countries.

Where we transfer data outside the UK or EEA, we ensure appropriate safeguards are in place, including Standard Contractual Clauses or adequacy decisions where applicable.

Section 11

Children's Privacy

Our services are not directed at children under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us immediately at [email protected] and we will take steps to delete such information promptly.

Section 12

Changes & Contact

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or in-platform notification. The current version is always available at eddiesgallery.com/privacy-policy.html.

For any privacy-related questions, requests, or concerns, please contact our privacy team: