Privacy Policy

AymexConnect is operated by Aymex LTD (company number 15515557), registered in England and Wales at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ. We are registered with the Information Commissioner's Office under registration C1480174.

For the account data of our direct customers we act as data controller. For the call, message and contact data our customers process through the platform, we act as data processor on their instructions.

We collect only what the service needs to function and to be billed for.

• Account data: name, work email, telephone number, company name and billing details.
• Authentication data: password hashes, session tokens and sign-in timestamps. We never store passwords in plain text.
• Communications data: call detail records (who called whom, when and for how long), voicemails, SMS content, chat messages, and call recordings where recording is enabled.
• AI-derived data: transcripts, summaries, key points, sentiment scores and keyword matches generated from calls and voicemails.
• Technical data: IP address, device and browser information, and application logs used for diagnostics, security and abuse prevention.
• Enquiry data: anything you send us through the contact form or by email.

• To perform our contract with you: providing the phone system, routing calls, delivering messages and hosting your data.
• For our legitimate interests: securing the platform, preventing fraud and abuse, diagnosing faults, and improving the service.
• To comply with legal obligations: telecommunications regulation, emergency-call handling, tax and accounting requirements.
• With your consent where consent is the appropriate basis, such as optional marketing email. You can withdraw consent at any time.

Call metadata, recordings, messages and contacts are stored in United Kingdom data centres. Data is encrypted in transit using TLS 1.3, call media is carried over SRTP, and recordings are encrypted at rest.

Some sub-processors we rely on for payment processing and transactional email operate outside the UK. Where that is the case, transfers are made under appropriate safeguards such as the UK International Data Transfer Agreement or an adequacy decision.

• Account data: for the life of the account and for six years afterwards where required for tax and accounting.
• Call detail records: retained for the period configured by your administrator, subject to regulatory minimums.
• Call recordings and AI summaries: retained according to your tenant's retention setting; deleted on request or when the account closes.
• Application logs: typically 90 days, longer where an active security investigation requires it.

We do not sell personal data, and we do not share it for third-party advertising.

We share data with sub-processors who help us run the service - cloud hosting, telephony carriers, payment processing and transactional email - each under a written data-processing agreement. We also disclose data where we are legally required to, for example to emergency services or in response to a lawful request.

Under UK GDPR you have the right to access your personal data, to have inaccurate data corrected, to have data erased, to restrict or object to processing, and to receive your data in a portable format.

To exercise any of these, contact support@aymextech.co.uk. We respond within one month. If you are an end user of a customer's AymexConnect account, please direct your request to that organisation in the first instance - they control the data and we will assist them in fulfilling it.

If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office at ico.org.uk.

We use a small number of cookies, principally to keep you signed in and to remember interface preferences. Full detail is on our cookie policy page.

We update this policy when our practices change. Material changes are notified to account administrators by email before they take effect. The date at the top of this page always reflects the current version.