Last updated: July 2026

Privacy

Plain English, because you shouldn't need a solicitor to understand what happens to your information. If anything here is unclear, email me and I'll explain it properly.

Who I am

ALLai is a one-person business based in the United Kingdom, run by Filip Lubas. I'm the data controller for information collected through this website. You can reach me at filip.lubas@allsai.net.

If you fill in the quote form

I collect your name, business name, business type, phone number, email address, and anything you write in the message box. I use it for one thing: to reply to you with a quote and answer your questions.

The lawful basis is legitimate interest — you asked me for a quote, so replying is what you'd expect. I keep enquiry details for up to 24 months in case you come back, then delete them. Ask me to delete yours sooner and I will, same day.

If you ring the demo number

The demonstration line is answered by an AI. Calls to it are processed to generate the conversation, and a transcript is produced. I use these only to check the system is working properly and to improve it. Don't share anything confidential with the demo line — it's a demonstration, not a service.

If you become a client

This is the part worth reading carefully, especially if you work in healthcare, veterinary or legal services.

When ALLai answers your business phone, your callers' words are processed in order to understand what they need and book them in. That typically means a caller's name, phone number, and whatever they say about why they're ringing. Transcripts of these calls are retained so bookings can be verified and problems investigated.

For your callers' data, you are the data controller and I act as your data processor. Before going live I'll put a written data processing agreement in place setting out exactly what's processed, where it's stored, how long it's kept, and what happens if you leave. If you handle patient or client information, ask me for that agreement early — it's a normal part of getting set up, not an obstacle.

Who else touches the data

I use established suppliers to run the service, and they process data on my behalf:

• Vapi and its voice providers — running the phone conversation
• OpenAI — understanding what a caller is asking for
• Google — Workspace for email, Calendar for bookings, Sheets for records
• Twilio — carrying the phone calls and text alerts
• Netlify — hosting this website and receiving form submissions

Some of these process data outside the UK. Where that happens, transfers rely on the safeguards those providers have in place, such as standard contractual clauses. I don't sell data, and I don't share it with anyone for advertising.

This website

No analytics, no advertising trackers, no cookie banner — because there are no cookies to consent to. Fonts are loaded from Google Fonts, which means Google sees your IP address when the page loads. Netlify keeps standard server logs.

Your rights

Under UK GDPR you can ask for a copy of what I hold about you, ask me to correct it, ask me to delete it, or object to how I'm using it. Email me and I'll deal with it within a month, usually much sooner. If you're unhappy with how I've handled something you can complain to the Information Commissioner's Office at ico.org.uk.

Changes

If this policy changes materially, I'll update the date at the top. Clients will be told directly rather than expected to notice.