Privacy policy
Last updated 11 November 2026
This policy explains how BLU LABS LTD (“we”), which runs Merry Caller, handles personal data. Contact us at ai@blulabs.co.uk.
Two kinds of data
- Our customers’ data: your account and billing details. For this we are the controller.
- Data our customers handle in Merry Caller: the businesses and people they call, call transcripts, notes and AI analysis. For this the customer is the controller and we are their processor. We only use it to provide the service on their instructions.
What we collect about customers
- Name, email, company name and password (stored securely by our auth provider).
- Billing details, handled by Stripe. We never see your full card number.
- If you ask for a new phone number: business name, company number, website, contact name, mobile, work email and business address. UK phone rules require these, and they’re shared with Twilio for approval.
- Usage: calls made, minutes, leads and AI requests used, so we can apply plan limits and bill correctly.
- Support messages you send us.
We use this to run your account, bill you, prevent abuse, give support and meet legal duties. Our legal bases are contract, legal obligation and legitimate interests.
Calls and transcripts
When a customer makes a live call, the audio passes through Twilio and is sent to Deepgram to create a live transcript. We don’t store call recordings. The text transcript is saved in the customer’s workspace. On Pro and Max plans, transcript text is sent to Anthropic to suggest what to say and to analyse the call. If you’ve been called by a Merry Caller customer, please contact that business first. You can also contact us and we’ll pass your request on and help.
Leads
Lead search finds public business listings (name, phone, website, rating, address) from Google Maps through Apify. Customers decide which businesses to call and are responsible for doing so lawfully.
Who we share data with
| Provider | What for | Where |
|---|---|---|
| Supabase | Accounts and database (hosted in London, UK) | UK |
| Vercel | Hosting the app | EU/US |
| Stripe | Payments and billing | UK/EU/US |
| Twilio | Phone calls and phone numbers | US/EU |
| Deepgram | Turning call audio into live transcripts (audio isn't stored) | US |
| Railway | The live transcript service | US/EU |
| Anthropic | AI suggestions and call analysis (Pro and Max) | US |
| Apify | Finding public business listings for lead search | EU |
| Resend | Sign-in and account emails | US/EU |
Where data leaves the UK, it’s protected by the UK International Data Transfer Agreement or Addendum, or an adequacy decision. We never sell personal data.
How long we keep it
- Workspace data (leads, transcripts, notes): while your account is active, and deleted within 90 days after it ends. You can delete it sooner from Settings → Clear all data.
- Billing records: 6 years, as UK tax law requires.
- Do-not-call lists: kept while the account is active so people who asked not to be called aren’t called again.
Your rights
You can ask to access, correct, delete or move your data, or object to how we use it. Email ai@blulabs.co.uk and we’ll reply within one month. You can also complain to the Information Commissioner’s Office (ico.org.uk).
Cookies
We only use cookies needed to keep you signed in and remember your display settings. There are no advertising or tracking cookies.
Changes
If we change this policy, we’ll update the date above and tell customers about important changes by email or in the app.