Privacy and cookie policy
This page explains what CallCooper does with personal data when you use this website. It is written to be read, not filed.
Who we are
CallCooper builds Cooper, an AI employee for UK car dealerships. This website is callcooper.ai.
The data controller is Alan Abdurrahman, a sole trader trading as CallCooper. CallCooper is not a registered company yet, so there is no company number or registered office to give you. If that changes we will name the company here.
Contact us at alan@callcooper.ai. That is the only contact address for this site.
We will add the company name, number and registered address to this page as soon as the company is registered.
We have not appointed a data protection officer and we are not required to have one. All data protection questions go to the address above.
This is a marketing site, not the Cooper product. Where we run Cooper for a dealership, that dealership is the controller for its own customers' data and we act as its processor under a written agreement with it. This policy does not cover that arrangement.
What we collect, and when
We collect very little. There is no account and no login, and no form of our own — the only form on the page is the Calendly booking calendar, which is Calendly's. We explain it below.
If you book a demo
The booking calendar is a Calendly scheduler, and it does not load until you ask for it. Until you press “Show booking calendar”, your browser sends nothing to Calendly at all.
Once you load it, what you type goes to Calendly: your name, your email address, the time you chose and anything else in its form. Calendly passes that to us and puts the meeting in our diary. You can also open Calendly in its own tab instead, using the link under the calendar.
Once loaded, Calendly also collects technical data about your booking session and sets its own cookies. See Cookies and similar technologies.
If you email us
The email links on this site open your own email app. Nothing is sent until you send it. Once you do, we hold your email address, your name if you give it, whatever you write, and our reply.
If you use the "Talk to Cooper" voice demo
"Talk to Cooper" is a live voice call with our demo assistant, running in your browser.
- Nothing happens until you tap "Start call". Your browser then asks permission to use your microphone. If you refuse, there is no call and no audio.
- Once the call starts, your microphone audio is streamed to Vapi, the voice platform that runs the demo for us.
- Vapi uses its own suppliers to do the work of the call: turning your speech into text, generating Cooper's reply, and turning that reply back into speech. We do not name them here because the platform can change them. Ask us and we will tell you who they are at the time.
- A written transcript appears on screen as you talk. It is cleared when you close the panel, and gone when you close the page. A record of the call and its transcript sits in our account with the voice platform.
- Calls are time-limited and end automatically after a short silence.
Cooper is roleplaying a demo dealership. It may ask for a first name and a mobile number, exactly as it would on a real call. Nothing is really booked and you do not have to give real details — invent them. Anything you say out loud ends up in the transcript, so please do not read out real customer information or anything sensitive.
We use the audio and transcript to run the call and to check how well Cooper handled it. We do not use your voice to identify you and we do not create voiceprints.
Technical data from visiting the site
The site is served by a hosting provider that keeps short-term server logs. These normally contain your IP address, the time of the request, what was requested, and your browser and device type. They exist to serve the pages, keep the site up and spot abuse.
Loading the page also makes your browser fetch our typefaces from Google's font servers. If — and only if — you start the voice demo, your browser also fetches the voice software from a public JavaScript CDN (esm.sh) and connects to the voice platform. Those requests reveal your IP address and browser to those companies. That is how the web works, but you should know it happens.
Why we use your data, and our lawful basis
- Replying to a demo booking or an email. Legitimate interests: you approached a business about its product and we need to answer. Where we are working out terms with you, we also rely on taking steps towards a contract.
- Following up on your enquiry. Legitimate interests. This is business-to-business contact with people in their work role. Ask us to stop and we stop.
- Running the voice demo — your microphone audio and the transcript. Consent. You give it by tapping "Start call" and allowing your browser's microphone prompt. You can withdraw it by ending the call, and you can email us to have the call record deleted.
- Reviewing demo calls to improve Cooper. The same consent as above.
- Keeping the site running and secure. Legitimate interests.
- Meeting legal duties, such as handling a rights request. Legal obligation.
Where we rely on legitimate interests we have weighed our interest in running a business against your privacy. Ask and we will explain the reasoning in your case.
Do you have to give us anything?
No. Nothing here is required by law or by any contract. You can read every page of this site without giving us anything. If you don't book a demo, email us or start a voice call, all we get is the server log described above.
Marketing emails
If you book a demo or email us, we may follow up about Cooper. Every one of those emails carries an unsubscribe line, and one word back stops them for good. We don't add you to a list you didn't ask for, we don't buy contact lists, and we don't send marketing to people who have never contacted us.
Cookies and similar technologies
What we set ourselves
We set no cookies of our own and we do not use browser storage to track you. There is no analytics, no tag manager and no tracking pixel in this page. The voice software may write a small amount of data into your browser while a call is running — that is there to run the call, and it is described below.
The booking calendar
The scheduler is not embedded in the page until you ask for it. Until you press “Show booking calendar”, nothing is requested from Calendly and Calendly cannot set anything in your browser.
When you do load it, Calendly sets its own cookies from its own domains. Some run the scheduler and protect it from bots; others are Calendly's own analytics, which are not needed to give you the service. We cannot read those cookies and we do not control the list. That is why loading it is your choice rather than ours, and why the button says so before you press it.
The voice demo
The voice software is only downloaded when you tap "Start call" inside the Talk to Cooper panel. Opening the panel itself loads nothing and contacts nobody. Once a call is running, the software may keep a small amount of data in your browser to deliver it. It is not used for advertising.
Fonts
Our typefaces come from Google Fonts. Google states that font requests do not set cookies. Google does receive your IP address, because it needs it to send the files.
Analytics
We do not use any analytics or advertising cookies on this site. There is no Google Analytics, no advertising pixel, no retargeting and no A/B testing tool. The page does note which call-to-action you clicked, in a variable inside your own browser — nothing collects it, nothing is stored on your device, and nothing is sent anywhere. If we later add a privacy-friendly analytics tool, we will name it in this section, say what it measures, and set out what it stores in your browser, before it goes live.
Your choices
The simplest choice is not to load the calendar or start a voice call — neither happens unless you press a button. You can also block or delete cookies in your browser settings and refuse the microphone prompt. Blocking third-party cookies may stop the booking calendar working; if that happens, email us and we will book you in by hand.
Who else handles your data
The list is short on purpose. Today it is:
| Who | What they do for us | What they get |
|---|---|---|
| Calendly | The demo booking calendar embedded on this site | Your name, email address, chosen time and anything you type in the form; technical data about your session; sets its own cookies |
| Vapi | Runs the "Talk to Cooper" voice demo | Your microphone audio, the transcript, and technical data about the call |
| Vapi's speech, language and audio suppliers | Speech-to-text, generating Cooper's replies, text-to-speech | Your audio and the words of the call. Some keep it for a short period under their own terms, typically to monitor abuse. Ask us and we will tell you who they are and what they keep. |
| esm.sh | Public CDN that serves the voice software, only when you start a call | Your IP address and browser details |
| Google Fonts | Serves the typefaces used on the page | Your IP address and browser details |
| Our hosting provider | Serves the website | Server log data, including your IP address |
We also use ordinary business email to talk to you, so your messages sit in our mailbox with our email provider.
We do not sell personal data. We do not pass it to advertisers or data brokers. We would share it with our professional advisers, or with the authorities, if the law required it.
Where your data goes
Our suppliers are based outside the UK, mostly in the United States, and may process data in other countries. So some of your data leaves the UK. We are not going to claim otherwise.
For those transfers we rely on the safeguards UK law recognises: the International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses, in the supplier's data processing terms. Where a supplier is certified under the UK Extension to the EU–US Data Privacy Framework, we rely on that instead. Ask us and we will tell you which applies to which supplier.
How long we keep it
- Demo bookings: 12 months after our last contact with you, unless you become a customer.
- Emails: 24 months after the last message in the thread. Emails about a signed contract are kept for 6 years after it ends, because of tax and limitation rules.
- Voice demo audio and transcripts: we delete these from our voice platform account within 30 days, and sooner if you ask. We do not copy them anywhere else. The platform's own speech and AI suppliers may hold a call for a short period under their terms, which we don't control.
- Server logs: a short period only, normally no more than 30 days, then overwritten.
- A record of any request you make under this policy: 12 months, so we can show how we handled it.
Ask us to delete something sooner and we will, unless we are required to keep it.
Your rights
Under UK GDPR you can ask us to:
- tell you what personal data we hold about you, and give you a copy;
- correct anything that is wrong;
- delete it;
- stop using it for a while, if you are disputing something;
- stop using it for our legitimate interests, including any follow-up contact;
- hand it to you or another provider in a portable format, where that applies;
- stop relying on your consent, where consent is the basis — this applies to the voice demo. Withdrawing consent does not undo what we did before you withdrew it.
Email alan@callcooper.ai. It costs nothing. We will reply within one month. If the request is complicated, or you have made several, we can take up to two months longer — and we will tell you inside the first month if that is going to happen. We may ask a question or two to check it is really you.
If someone else's details come up
If you name a colleague in an email to us, or say someone else's details out loud in the voice demo, we end up holding that too. We don't go looking for it and we don't use it for anything. Tell us and we will delete it.
Complaining
Tell us first if you can — it is usually the fastest fix. You also have the right to complain to the Information Commissioner's Office, the UK regulator, at any time.
- Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
- Helpline: 0303 123 1113
- ico.org.uk/make-a-complaint
Automated decisions and AI training
Cooper is an AI, but nothing on this site makes an automated decision about you with legal or similarly significant effects. A person reads every demo booking and every email.
We do not use anything from this site to train our own models. Calendly and Vapi process data for us under their standard data processing terms, which allow them to use it only to provide their service to us. Google's font servers and the esm.sh CDN are public services we have no contract with; they receive only the request data described above.
Children
This site sells software to car dealerships. It is aimed at owners and managers, not at children. In the UK a child of 13 or over can agree to an online service themselves, but we are not aiming the demo at anyone under 18 and we have no reason to want their data. We do not knowingly collect it. If a child has used the voice demo, email us and we will delete the call record.
Security
The site is served over HTTPS. Voice calls are encrypted in transit.
Access to our bookings, our mailbox and our voice platform account is limited to the people who need it, with strong unique passwords and two-factor authentication where the supplier supports it.
We use suppliers that publish security and data protection terms. Calendly and Vapi process data for us under their standard data processing terms.
We hold no security certifications. We are not ISO 27001 or SOC 2 certified and we are not going to imply that we are. No website or supplier is perfectly secure. If you think you have found a security problem, email alan@callcooper.ai and we will act on it.
Changes to this policy
We will update this page whenever what we do changes — for example if we add analytics, change voice supplier, or register the company. The date at the top tells you when it last changed. If a change matters to you and you have an open enquiry with us, we will say so by email.
← Back to CallCooper.ai