Privacy

The short version

• We only collect what you send us: what you write or say to us, and the contact details you choose to give.
• No advertising, no tracking cookies, no analytics. Nothing is sold or shared for marketing.
• Some of it is handled for us by other companies, for example to draft a reply or transcribe a voice note. They’re all listed below.
• Email [email protected] and we’ll delete what we hold about you.

Who we are

Duet is Duet AI Ltd, a company registered in England and Wales, number 17064015. Our registered office is Bishops Orchard, East Street Lane, West Pennard, Glastonbury, BA6 8NJ.

We’re the controller of the personal data described here.

For anything on this page, write to [email protected]. A person reads every email.

What we collect, and why

When you talk to us on the site

When you type or record a voice note in the conversation, we:

• send what you say to Anthropic, whose Claude model drafts our reply;
• send voice notes to OpenAI to be turned into text first.

We keep a record of the conversation so we can follow up. The record holds:

• what you said;
• any answers about your team or timing;
• the page you came from;
• a scrambled form of your browser session’s id;
• your name, email address, phone number or website, if you give them.

If you ask us to email you a write-up, we use your email address to send it.

When we write you a proposal

The proposal holds your name, your contact details, what you told us about your business and what we’d suggest. It lives at a private web address made of a random code. Anyone you share that link with can open it. Search engines are told not to index it.

When you give us your website

We visit your site’s homepage and send its address to Google PageSpeed Insights to measure how quickly it loads. We also read your business name, brand colour and logo from the page and keep a copy of the logo, so your proposal can show it. We only check the address you give us, and only the public pages anyone can see.

When you message us on WhatsApp

WhatsApp is run by Meta, so your messages and voice notes reach us through Meta’s systems. They’re handled the same way as on the site: Anthropic drafts the reply and OpenAI transcribes voice notes. We record your phone number on the conversation and on any proposal we write, so we can reply. We remember where the conversation got to for 30 days after your last message.

When you email us or book a call

We keep emails in our inbox, like anyone would. Booking a call takes you to Calendly, which has its own privacy notice.

What every visit records

Our servers see your IP address, browser and the page you came from. We use your IP address to stop the conversation being flooded: it counts how many messages arrive from one address and forgets after a short while. Server logs record each conversation without the words you typed, and they’re deleted when they’re rotated.

Our legal basis

• Answering you, and following up. Our legitimate interest in replying to people who get in touch and in keeping the service safe from abuse. You’re telling us about a problem you’d like solved, and a reply is what you’d expect.
• Proposals and site checks. Steps you’ve asked us to take before we might agree to work together.

Who else handles it

These companies process data for us, under contracts that stop them using it for anything else:

• Anthropic drafts replies and proposals, under business terms that rule out training its models on what you send.
• OpenAI transcribes voice notes. Its API terms don’t allow training on them either.
• Meta carries WhatsApp messages, if you use WhatsApp.
• Google measures your website’s speed, if you give us its address.
• DigitalOcean hosts the site and its database, on a server in London.
• Cloudflare runs the network the site is served through.
• Postmark sends the site’s emails.

Anthropic, OpenAI, Meta, Google and Postmark may process data in the United States. Where data leaves the UK, it’s protected by the safeguards in their data processing terms, such as the UK’s International Data Transfer Addendum or the UK–US data bridge.

How long we keep it

• Conversations and proposals: 12 months after we last hear from you, then deleted. If we end up working together, we keep what we need for the work and for our accounts.
• WhatsApp conversation memory: 30 days after your last message.
• Rate limit counts: minutes to a day.

Cookies

The site sets two cookies, both needed for it to work: one keeps your visit together, so the conversation remembers what you’ve said, and one protects its forms against forgery. While your tab is open, your browser also keeps the conversation and any email address you’ve typed in, so they survive moving between pages. They’re gone when you close the tab.

The cookie banner remembers your answer in a third cookie, for a year, and we keep a record of the choice and when it was made, but not who made it. The banner lists analytics and advertising categories, but the site doesn’t load any analytics or advertising tools, so accepting them switches nothing on.

Your rights

You can ask for a copy of what we hold about you, ask us to correct it, delete it or stop using it, or object to how we use it. Email [email protected]. We’ll answer within a month, and usually much sooner.

If you’re unhappy with how we’ve handled your data, tell us first and we’ll try to put it right. You can also complain to the Information Commissioner’s Office.

Changes

If what we do with your data changes, this page changes with it, and so does the date at the top.