Last updated: 28 August 2026
Zennor AI ("we", "us") provides an AI receptionist tool that small businesses embed on their own websites. This policy explains what personal data we collect, why, and what rights you have over it — whether you're a business using Zennor AI, or someone chatting with a business's AI receptionist.
Zennor AI is the data controller for the personal data described in this policy. If you have any questions, contact us at support@getleadflowai.co.uk.
If you sign up as a business: your name, email address, and a securely hashed password. We never store your password in plain text. You may also add business details — services, opening hours, FAQs, and contact information — which we use to run your AI receptionist.
If a business adds you as a team member: the name, email address, and password the business owner sets for you, so you can log in and use the same dashboard. This is set up by the business, not by you signing up directly.
If you chat with a business's AI receptionist widget: the messages you send, and any name, phone number, email address, or appointment details you choose to share during the conversation. This information is collected on behalf of the business you're messaging — they, not Zennor AI, are the ones who'll use it to get back to you.
We process business account data to perform our contract with you (providing the service you signed up for). We process conversation data from a business's customers on the basis of the business's legitimate interest in responding to enquiries about their own services — the same basis that would apply if they answered the phone themselves.
We don't sell personal data, and we don't use it for advertising. We share it only with the service providers that help us run Zennor AI, each only to the extent needed:
Where any of these providers process data outside the UK/EEA, we rely on their standard contractual safeguards for international transfers.
We keep business account data for as long as the account is active, and conversation/lead data for as long as it's useful to the business it was sent to. If you close your business account, or ask us to delete your data, we'll remove it within a reasonable time, except where we're required to keep it for legal reasons.
We use one essential cookie to keep you signed in to your dashboard. We don't use advertising or tracking cookies, and we don't run any third-party analytics on the customer-facing chat widget.
Under UK GDPR, you have the right to access, correct, or delete your personal data, to object to or restrict certain processing, and to receive a copy of your data in a portable format. To exercise any of these, email support@getleadflowai.co.uk.
If you're not satisfied with how we've handled your data, you have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.
Passwords are stored using industry-standard hashing, never in plain text. Data is encrypted in transit. We apply rate limiting across sign-up, login, and the chat widget to reduce the risk of abuse.
We may update this policy from time to time. If we make material changes, we'll update the date at the top of this page.
Questions about this policy or your data: support@getleadflowai.co.uk