Privacy Notice

1. Who is responsible

Clyde Works Limited (SC897847), registered in Scotland and trading as Agent Telco, is the controller for account, billing, security, pilot-access, support, website, and service-usage information. We are registered with the Information Commissioner's Office, reference ZC223604. Our registered office is 48 West George Street, Glasgow, Scotland, G2 1BP.

When a customer uses Agent Telco to send or receive messages, the customer normally decides why that communication happens. For that customer-directed information, the customer is the controller and we are its processor. Our Data Processing Addendum covers that work.

2. Information we use

• name, email address, login and account-security records;
• workspace names, members, roles, invitations, and pilot decisions;
• subscription status, plan, invoices, usage, and provider-spend records, but not full card details;
• API-key names and hashes, OAuth clients, authorisations, scopes, token records, and consent decisions;
• assigned numbers, message senders and recipients, message content, delivery status, operation and idempotency records;
• webhook endpoints, encrypted signing secrets, subscribed event types, delivery attempts, responses, and replay records;
• IP address, browser and device details, request logs, and security events;
• support messages and privacy or service complaints;
• if you allow analytics, fixed route names, page-performance measurements, and internal user and workspace identifiers.

Account and security details are required to create an account. A workspace needs billing and telecom records before it can acquire a number or send a message. Without that information we cannot provide the relevant part of the service.

3. Why we use it

We use information to authenticate people and software, keep workspaces separate, provide numbers and messaging, deliver customer webhooks, enforce limits, collect payment, prevent abuse, investigate incidents, and answer support requests. We rely on contract where the work is needed to provide Agent Telco, legal obligation for records the law requires, and legitimate interests for security, support, fraud prevention, pilot administration, and reliable operation. We use consent for optional browser analytics.

4. Sources and automated checks

Information comes from you, people in your workspace, software you authorise, message senders and recipients, service activity, payment and telecom providers, and public technical records. Agent Telco automatically checks pilot access, account status, billing entitlement, API scopes, request rates, message and number limits, and estimated provider spend. A failed check blocks the requested operation. Contact support if you believe a check is wrong. A person can review the record and correct it.

5. Who receives information

We give providers only the information needed for their part of the service. These providers cover cloud hosting and storage, telecom number provisioning and SMS carriage, email delivery, protection against automated abuse, product analytics, and billing and payment processing. PostHog, Inc. processes consented route and performance events in its EU Cloud service. Our analytics integration excludes email addresses, phone numbers, message content, API keys, webhook URLs, and record identifiers. We may also disclose information to advisers, regulators, courts, or law enforcement where required. We do not sell personal data.

6. International transfers

Some providers may process information outside the UK. Where UK data protection law requires a safeguard, we use an adequacy regulation or appropriate contractual safeguards and assess the protection available. Contact us to ask which safeguard applies to a provider.

7. How long we keep it

• account, workspace, numbers, messages, operations, and webhook records are kept while the account is open and while needed to provide the service or resolve an operation;
• expired sessions, rate-limit entries, and replay-protection records are removed by their configured expiry or scheduled cleanup;
• policy acceptance, billing, fraud, and account-closure evidence may be kept for up to 6 years after the account closes for legal claims, tax, and fraud prevention;
• consented analytics events and identified profiles are kept for up to 1 year;
• support records are kept for 2 years after resolution and service and data-protection complaint records for 3 years after the outcome.

When you ask to close an account, we will explain what can be deleted, what must first be returned or disconnected, and what limited records we must retain. A live dispute, security investigation, telecom operation, or legal obligation may require a longer period.

8. Your rights

Depending on the circumstances, you can ask for access, correction, deletion, restriction, portability, or object to our use of your information. You can withdraw consent without affecting earlier use. We may need to verify your identity. If your request concerns a message sent by an Agent Telco customer, contact that customer first.

Email support@sharedmobile.co.uk with "Privacy complaint" in the subject line to complain. We will acknowledge the complaint within 30 days, investigate it without undue delay, keep you informed, and explain the outcome. You can also complain to the Information Commissioner at ico.org.uk.

9. Cookies and analytics

Agent Telco uses essential cookies and browser storage for login, security, and preferences. If you allow analytics, PostHog uses first-party cookies and browser storage for up to 1 year to record the limited route and performance events described above. We do not use analytics session replay, advertising cookies, or cross-site advertising. Declining analytics does not affect the service. You can reopen Cookie settings at any time.