Speak Privacy Notice

Version 2.3. Effective date: 24 October 2026. This notice replaces the Speak Privacy Policy dated 1 January 2025.

The short version. Speak is run by Vidara, LLC, a US company. This notice explains what we do with personal information when we decide how it is used: when you visit our website, fill in one of our forms, try a demo, ask our AI agent to call you, hear from us about Speak, or use a Speak account. When a business uses Speak to call you (for example in a Managed Campaign), that business decides how your information is used and we act for it as its processor, so please read its privacy notice and contact it first. Speak's own AI caller tells you at the start that it is an AI assistant and that the call may be recorded. If you ask not to be called again, no business using Speak will call or text that number again through Speak. We don't sell personal information, and we don't use call data to train AI models unless the customer has opted in. If you live in the United States, section 17A explains your rights under US state privacy laws.

1. Who we are

Speak is a trading name of Vidara, LLC, a limited liability company formed in Delaware, United States ("Speak", "we", "us"). Vidara, LLC is the controller of the personal information described in this notice. Our address is 1111B S Governors Ave STE 37713, Dover, DE, USA.

Speak is not connected with any other business that uses the name "Speak", "Speak AI" or a similar name.

For anything in this notice, including using your rights, email phil@speak.ad with "Privacy" in the subject line.

Our UK representative. Because we are based outside the UK, we have appointed a representative in the UK under Article 27 of the UK GDPR: Inspire (GBR) Limited (company number 09477696), Victoria House, Ack Lane East, Bramhall, Stockport, Cheshire, England, SK7 2BE. You can contact our representative instead of us about anything in this notice.

2. Our two roles: controller and processor

When we are the controller. We decide why and how your information is used in the situations in sections 3 to 10, and for the Speak-wide do-not-contact list described in section 10. This notice is our explanation of that use.

When we are a processor. Businesses use Speak to make and answer calls and send messages with AI voice agents. For example, a recruitment agency may use a Speak Managed Campaign to screen candidates or confirm interviews. The business (our "customer" or "client") decides who is contacted, what its agent says and what happens to the results. It is the controller of that data, and Vidara, LLC processes it only on the client's instructions, as its processor (or, under US state laws, its "service provider"), under a data processing agreement. Section 11 explains this.

If you were called by, or spoke to, a business that uses Speak, please contact that business about your information. If you contact us instead, we will pass your request to the business without undue delay.

3. Visiting our website and using our forms

What we collect when you visit. When you visit speak.ad, our hosting provider, Vercel, receives technical information, such as your IP address, browser and device type, the pages you request and the time of your visit. Vercel keeps short-term technical logs under its own retention period. We don't keep a copy. Our website fonts are hosted on our own site, so loading them doesn't send your information to anyone else.

Cookies. We use HubSpot cookies to understand visits and follow up on enquiries only if you accept them in our cookie banner. They are off unless you accept. We use your browser's local storage to remember your cookie choice and your country or language setting. You can change your choice at any time through "Cookie settings" in the footer. Our Cookie Policy at www.speak.ad/cookies lists the cookies and how long they last.

No advertising pixels. We don't use advertising pixels or conversion tags (for example from Google, LinkedIn or Meta) on our website.

Ad and link tracking. If you reach our website from a Google Ads or LinkedIn Ads advert, or from a link in one of our outreach messages, the link may carry campaign tags (the five standard "UTM" tags, such as the source and campaign name). Until you make a cookie choice, the tags are held only in the memory of the page you are on and are not saved to your browser's storage. We save them to your browser's storage (for that browser tab) only if you click Accept in the cookie banner. If you click Reject, any tags already saved are cleared and nothing is saved. If you send us one of our website forms, the campaign tags for that page are sent with it, so that we know which advert or link brought you to us.

LinkedIn click ID. If you arrive at one of our sector demo pages from a LinkedIn advert, the link may also contain a LinkedIn click ID (li_fat_id). The call-back form on those pages reads this click ID from the link and submits it with the form. We don't store it, and we don't send it to HubSpot.

Our website forms. We have four website forms:

• the call-back form on our homepage (including our sector demo pages), which asks our AI agent to call you (section 6);
• the call-back form on our pages for UK recruitment agencies (section 6);
• the contact form; and
• the demo booking form.

What we collect from the forms. The details you enter (such as your name, company, email address, phone number and message), your choices, the campaign tags described above, the form you used, the time and your IP address. We use your IP address to stop misuse, such as limiting how many submissions come from one address. The forms use a bot check by Cloudflare Turnstile, which receives your IP address and technical information about your browser.

Where form data is stored. Website form submissions are stored in our database with Supabase in London (UK). For the contact and demo booking forms, we store the form name, your IP address and the campaign tags, but not the text of your message. Your message is sent by email, through our email delivery provider Resend (which sends our speak.ad emails from Ireland), to our sales inbox (sales@speak.ad, hosted by Google Workspace), and Resend also sends you a confirmation email (with a calendar invitation for a demo booking). If you email us directly, your email goes to our Google Workspace inbox.

Our customer relationship system. HubSpot, our CRM, receives submissions from all four website forms, so that we can keep a record of your enquiry and follow up. For the call-back forms, HubSpot receives your contact details, your choices, the campaign tags, the call outcome and a short summary, but not the recording or full transcript (section 6). For the contact and demo booking forms, HubSpot receives the details you submit and the campaign tags, and records that you did not give marketing consent through that form.

Why, and our lawful basis.

Who receives it. Vercel (website hosting and form handling, USA), Google Workspace (our sales@speak.ad inbox, USA), Cloudflare (Turnstile bot check, USA), Supabase (form storage, UK, London), HubSpot (CRM; cookies only if you accept; EU data centre) and Resend (Plus Five Five, Inc., email delivery from Ireland). See section 13 for transfers.

4. Trying a demo on a demo page

Our demo pages let you talk to a live AI voice agent. Nothing is sent to the AI provider until you tick the box and press Start. Each demo page names its provider before you start.

What we collect. When you press Start, your voice is sent to the named provider so that it can understand you and generate the agent's spoken replies. Some demos also let you type messages, which are sent to the same provider. The provider also receives technical information such as your IP address and browser details. Demo pages are not designed to use your camera.

Providers on our demo pages:

• ElevenLabs (USA)
• xAI (USA)
• LiveKit (USA)
• Telnyx (USA). Some demos that run on Telnyx also use, through Telnyx, OpenAI (AI model), Microsoft Azure (voice), Soniox (speech recognition), FishAudio (voice) or ElevenLabs (voice), all in the USA.
• Spatius (SpatialWalk Pte. Ltd., Singapore), for avatar demos that we show privately to invited businesses only.

How long it's kept. Speak doesn't receive or keep a copy of conversations on ElevenLabs demo pages. Other providers may keep a recording and transcript under their own terms. Where a demo runs on Speak's own Telnyx account, Telnyx keeps the recording, transcript and a short summary for us. Our retention period for these is 90 days after the demo (section 14).

Please don't share sensitive personal information, such as health or financial details, in a demo.

Lawful basis. Your consent, which you give by ticking the box and pressing Start. You can withdraw it at any time by ending the session.

5. The help assistant in the Speak app

A help assistant, provided by ElevenLabs (USA), loads in the logged-in Speak app. ElevenLabs receives your IP address and browser details when a logged-in page loads. If you start a conversation with the help assistant, including by voice, your voice and the conversation are processed by ElevenLabs, which may keep a recording and transcript under its own retention settings (section 14).

Lawful basis. Legitimate interests (helping people use Speak) and, for our customers, performing our contract with them.

6. Asking our AI agent to call you from our website

Our homepage, sector demo pages and pages for UK recruitment agencies let you ask our AI voice agent to call you straight away so you can try it.

What we collect.

• From the form: your name, agency or company name, company website, mobile number and work email.
• Your choices: whether you ticked each box, the exact wording you agreed to, the time, the page you used and the number you confirmed.
• How you reached us: the campaign tags in the link you followed (section 3). On sector demo pages, the form also reads and submits a LinkedIn click ID if the link contains one, but we don't store it or send it to HubSpot (section 3).
• Security information: information we use to stop misuse, such as your IP address and how many requests a number or address makes. The form uses a bot check by Cloudflare Turnstile. If we need to confirm your mobile number before calling, Telnyx Verify sends a code to that number.
• From the call: your voice, a recording and transcript of the call, your answers to the agent's questions (for example about your desk and hiring needs), the outcome of the call, and a short summary.

How the call works.

• We call only if you tick the required box: "Yes, call me now on this number. I agree that Speak's AI voice agent may call me and record the call."
• The agent introduces itself at the start as an AI assistant calling on behalf of Speak and says that the call may be recorded. You can end the call at any time.
• The call comes from 01925 311441.
• To personalise the call, we use your company name and website and a short summary of your company's public website. To create it, we send only your company name and website to Exa (USA), which looks up public information about your company, and Inception (USA), whose AI model summarises those results. We don't send them your name, email address or phone number.
• Nothing you enter in our website forms is sent to pipe0 or to any business contact database, and we don't add information about you from those databases to your demo call.

Where your information is stored. We store your form submission and the record of your choices in our database with Supabase in London (UK). Our AI calling platform, which uses the same London database, places the call using your name, email address, phone number and any message you added. After the call, our workflow tool (n8n, hosted by Railway in the USA) uses your email address and the call summary to run follow-up, booking and post-call tasks.

After the call. We record your contact details, your choices, the campaign tags, the call outcome and a short summary in HubSpot (EU data centre). We don't put the recording or the full transcript in HubSpot. They stay with our telephony provider and in the Speak platform, and HubSpot holds only a link. If you book a call with us during or after the demo, we use your details to arrange it.

Why, and our lawful basis.

Who receives it.

None of these is pipe0 or a business contact database.

Stopping the call or future calls. Say "stop" or "don't call me again" at any point, or email phil@speak.ad. We will end the call and add your number to our suppression list and to the Speak-wide do-not-contact list (section 10).

6A. Call recordings and transcripts

This section applies to calls made by Speak's own AI caller (section 6) and explains how recordings and transcripts are handled. Where we make calls for a client, the client decides these things (section 11), and our contract requires it to make sure people are told at the start of each call that they are speaking to an AI and that the call is recorded.

What the AI caller tells you. At the start of the call, Speak's AI caller introduces itself as an AI assistant calling on behalf of Speak and says that the call may be recorded.

Why we record and transcribe calls.

• to deliver the call and its outcome (for example, a summary and next steps);
• to keep a record of what was agreed, including any consent or request to stop;
• to check quality, investigate complaints and fix problems; and
• to keep our service secure and prevent misuse.

Lawful basis. For our own demo calls, your consent (the required box). For keeping a record of consents and opt-outs, and for handling complaints and legal claims, legitimate interests and legal obligation. For calls we make for a client, the client's own lawful basis (section 11).

Who can access them. Access is limited to authorised Speak staff who need it to provide the service, handle a complaint or request, keep the service secure or meet a legal requirement, and to the providers listed in this notice that store or process calls for us. For calls we make for a client, the client's authorised users can access its recordings and transcripts, and Speak staff access them only on the client's instructions or where needed for support, security or a legal requirement.

If you don't want to be recorded. You can end the call at any time. You can also ask us to delete a recording of a call we made to you by emailing phil@speak.ad. We will do so unless we need to keep it to deal with a complaint or legal claim, or the law requires us to keep it. For calls made for a client, please contact the client.

Card details and sensitive information. Please don't read out payment card details, or other sensitive information such as health details, on a call. Access to recordings and transcripts is restricted.

No model training. We don't use call recordings, transcripts or other call data to train AI models, unless the customer whose calls they are has opted in to this in writing.

How long we keep them. Our retention period for AI demo call recordings and transcripts is 90 days after the call, and for Managed Campaign recordings and transcripts it is 30 days after the client receives its results. See section 14.

7. Marketing from us

If you asked for a call from our website. On the call form there is a separate, optional box: "Speak can follow up with me about Speak Managed Campaigns by phone (including AI calls), SMS and email. I can opt out at any time." It is never ticked for you, and leaving it unticked doesn't affect the demo call. If you tick it, we may contact you about Speak Managed Campaigns by phone (including AI calls), SMS and email. Lawful basis: consent. You can withdraw it at any time, and doing so doesn't affect anything we did before.

If you sign up for a Speak account. If you sign up for Speak, or start to, we may send you emails and SMS messages about similar Speak products and services. We rely on the "soft opt-in" in PECR: we give you a simple way to refuse these messages when you sign up, and every message includes an unsubscribe (an unsubscribe link in emails, and "reply STOP" in SMS). We don't make marketing calls to you on this basis, and we don't make AI marketing calls to you unless you have consented to them. Lawful basis: legitimate interests (telling our customers and sign-ups about our services), which UK law recognises as a possible legitimate interest for direct marketing.

How to opt out. Use the unsubscribe link in any email, reply STOP to any SMS, tell the agent on any call, or email phil@speak.ad. You always have the right to object to direct marketing, and we will stop. If you unsubscribe from our marketing emails, we will honour it and stop sending them. Phone and SMS opt-outs also go on the Speak-wide do-not-contact list (section 10).

Advertising platforms. We don't share your details with Google, LinkedIn or other advertising platforms, and we don't use advertising pixels or conversion tags.

8. Business contacts we reach out to

We sometimes contact people at businesses we think could use Speak, such as owners and directors of UK recruitment agencies, to tell them about our services.

What we collect. Your name, job title, employer, work email address, LinkedIn profile link and basic information about your company (such as its size, location, sectors and Companies House details), the web page where we checked your details, and a record of our messages, your replies and any request to stop.

Where we get it.

• Your company's website and other public company sources, such as Companies House.
• LinkedIn.
• Business contact databases, which we search through pipe0 (PWLL UG, Germany). pipe0 draws on providers such as Wiza, Amplemarket and Crustdata (all USA). Each provider decides how it collects and shares its own data, under its own privacy notice. We send these providers only company details, such as a company website or company LinkedIn page, not information about you.

Before we message you, we check your details against your company's website or another public company source. Our first message tells you where we got your details.

How we contact you. By email or LinkedIn message, written and sent by a person. Links in these messages may carry campaign tags (section 3). We don't make automated or AI calls to you unless you ask us to (section 6).

Lawful basis. Legitimate interests: telling businesses about services relevant to their work. We have assessed this and keep the contact limited, relevant and easy to stop.

How long. If you don't reply, we delete your details 12 months after our first message. If you reply, we keep them as an enquiry record (section 14). If you ask us to stop, we keep a minimal suppression record (section 10).

How to opt out. Reply "stop" to any of our messages, or email phil@speak.ad. You can object at any time, you don't need to give a reason, and we won't contact you again.

Who receives it. HubSpot (EU data centre), Google Workspace (email), LinkedIn (if we message you there) and pipe0 (Germany), which retrieves data for us as our processor.

9. Customers and their users: accounts, billing and support

What we collect.

• Account information: names, business contact details, job titles, login details, account settings and the information you give us when we set up your account.
• Order and billing information: order forms and their signatures, invoices, payment status and limited payment details. Card payments are handled by Stripe; we receive confirmation of payment and limited card details (such as card type and last four digits), not your full card number.
• Support and communications: emails, calls, meeting notes and help assistant conversations.
• Usage information: how you use the Speak platform, such as log-ins, features used, call counts, call durations and error reports. This does not include the content of your calls.

Emails about proposals. Some proposal and onboarding emails are sent from our speak.my domain. Resend sends these from its Tokyo (Japan) sending region. Click tracking is off for these emails.

Why, and our lawful basis.

Who receives it. Supabase (database and log-in, UK, London), Vercel (hosting, USA), Stripe (payments, USA), HubSpot (customer records, EU data centre), Resend (email delivery from Ireland, and from Japan for speak.my emails), Google Workspace (email), Telnyx (SMS, USA) and ElevenLabs (help assistant, USA).

10. Opt-outs, our suppression list and the Speak-wide do-not-contact list

Our own suppression list. If you ask us not to call, text or email you, or reply STOP to one of our SMS messages, we add you to our suppression list. It applies across all channels: phone calls (including AI calls), SMS and email. We keep a minimal record: your telephone number (and email address if you give it), the date, and how you asked. We keep it so that we can make sure you aren't contacted again, including if your details reach us another way. If you unsubscribe from Speak's own marketing emails, we honour that and stop sending them.

The Speak-wide do-not-contact list. When anyone replies STOP to an SMS sent through Speak, or asks on a call made through Speak not to be called again, whether the call or message came from us or from a business using Speak, we add the telephone number to a Speak-wide do-not-contact list. Vidara, LLC holds this list as controller. It means that no business using Speak can call or text that number again through Speak. We keep only what we need to do this: the telephone number, the date and how the request was made.

Lawful basis. For our own suppression list: legal obligation (to respect your objection to direct marketing under the UK GDPR and PECR) and legitimate interests (making sure we honour your request). For the Speak-wide do-not-contact list: legitimate interests (respecting people's objections and preventing nuisance calls and messages through our platform).

How long. For as long as we need it to honour your request. If you ask us to delete this record too, we can, but we would then have no way of making sure you aren't contacted again.

If a business that uses Speak called or texted you, you can also tell that business directly. It controls its own customer records (section 11), but your phone or SMS opt-out made through Speak will also go on the Speak-wide do-not-contact list described above.

11. Managed campaigns and the Speak platform: if a business that uses Speak contacted you

This includes candidates or customers contacted during a client's Speak Managed Campaign, and anyone who calls, or is called or texted by, a customer's AI voice agent on the Speak platform.

• The client is in charge of your information. The client is the controller, and Vidara, LLC is its processor. The client decides why you are contacted and what happens to the results. It should tell you about this in its own privacy notice.
• Only the client's own consented contacts. In a Managed Campaign, we call only the client's own contacts who have consented to be called by that client. Our contract requires the client to confirm where its list came from and give us its consent records, and we keep those records (section 14). We don't use bought or third-party lists for these calls.
• What happens on these calls. Our contract requires the client to make sure the agent tells you at the start of the call that it is an AI agent, which business it is calling for, and that the call is recorded. Calls are transcribed, and summaries and outcomes go to the client. Section 6A explains recordings and how to ask about them.
• Opting out. Say so on the call or reply STOP to any SMS. Your number goes on the Speak-wide do-not-contact list, which Vidara, LLC holds as controller on the basis of legitimate interests (respecting objections and preventing nuisance calls), so that no business using Speak contacts that number again (section 10).
• Contact the client first. For questions or to use your rights, contact the client (for example, the recruitment agency). If you contact us, we will pass your request to it without undue delay.
• Decisions are made by people at the client. Speak doesn't decide anything about you. In a Managed Campaign, the client has agreed not to reject anyone based only on an AI call outcome, and that a person reviews the result first.
• How long. For Managed Campaigns, our retention period for recordings, transcripts and the contact list is 30 days after the client receives its results. We keep basic call records (number dialled, date, time, duration and status), billing records and opt-out records for 6 years, for billing, tax, opt-out compliance and legal claims, and the client's declarations and consent records for the life of the campaign plus 6 years. For other customers, data is kept according to that customer's settings and our contract with it.
• No training. We don't use call data to train AI models unless the client has opted in to this in writing.
• Our providers. Our main providers for the platform are Telnyx (telephony, AI calls, SMS and storage of knowledge-base files, USA), Supabase (database, UK, London) and OpenRouter (AI model routing, USA). All our providers are listed in section 12.

12. Who we share personal information with

We share personal information only as described in this notice. We use these providers:

A list of our sub-processors for customer data is available on request from phil@speak.ad.

We also receive business contact information from Wiza, Amplemarket and Crustdata (USA) through pipe0. They are independent organisations that decide how they collect and share their own data. We send them only company details, not personal information.

We may also share information with professional advisers (such as lawyers and accountants), with authorities where the law requires it, and with a buyer or investor if our business is sold or reorganised, under confidentiality.

We do not sell your personal information, and we don't share it for cross-context behavioural advertising.

13. International transfers

Vidara, LLC is based in the United States, so your information is processed in the US, and some of our providers are also in the US or elsewhere outside the UK (see section 12).

Where UK data protection law requires a safeguard for a transfer outside the UK, we rely on:

Some information is kept in the UK (Supabase, London) or in the EU (HubSpot's EU data centre, Resend's Ireland sending region, any legacy records in Lovable Cloud in Ireland, and pipe0 in Germany). The UK recognises the EU and EEA as providing adequate protection. pipe0's own transfers to its US providers are covered by the EU Standard Contractual Clauses with the UK Addendum. You can ask us for more information about the safeguards by emailing phil@speak.ad.

14. How long we keep personal information

Legacy records. Older website enquiry and do-not-call records may be held in a legacy database in Ireland (Lovable Cloud). Access is restricted, and they're kept only to handle possible legal claims and honour opt-outs. We'll delete them when no longer needed.

These are the periods we set for keeping information. We may keep information for longer where we need it to deal with a complaint, a legal claim or a regulator's enquiry, or where the law requires us to. When the period ends, we delete the information or anonymise it so it no longer identifies you.

15. AI, automated decisions and training

• No automated decisions with legal or similarly significant effects. Speak doesn't make decisions about you based solely on automated processing that have legal or similarly significant effects.
• Demo call outcomes. After an AI demo call, the call is sorted into an outcome (for example, whether you'd like to book a call) so that we can follow up in the right way. This only affects how we follow up with you about Speak. You can ask us to review it.
• Training. We don't use your personal information from our website, demo pages, help assistant or calls to train AI models, and we don't use customers' call data for training unless the customer has opted in in writing. Our AI providers process information to provide their services to us. Where a provider gives us the option, we ask it not to use the information we send it to train its models. xAI does not use data sent through its API to train its models by default. Exa receives only your company name and website, not information about you, and may use those searches to improve its own search models.

16. Keeping your information secure

We use appropriate technical and organisational measures to protect personal information, such as encryption in transit, access controls and limiting access to people who need it. No system is completely secure, but we work to protect your information and will act quickly if something goes wrong.

17. Your rights

Under UK data protection law you have the right to:

• access a copy of your personal information;
• correct information that is wrong or incomplete;
• ask us to delete your information;
• ask us to restrict how we use it;
• object to our use of it where we rely on legitimate interests;
• object to direct marketing at any time, and we will stop;
• withdraw your consent at any time, where we rely on consent;
• receive your information in a portable format, or have it sent to another organisation (data portability), where we rely on consent or a contract; and
• not be subject to decisions based solely on automated processing that have legal or similarly significant effects.

Some rights depend on the circumstances. To use any of them, email phil@speak.ad. We may need to check your identity. We'll reply within one month, or tell you within that month if we need up to two more months. There is usually no charge.

If Speak is acting as a processor for a business (section 11), please contact that business. We will pass on any request we receive.

Complaints. We'd like the chance to put things right, so please contact us first at phil@speak.ad. We will acknowledge your complaint within 30 days and tell you the outcome without undue delay. You also have the right to complain to the Information Commissioner's Office (ICO), the UK data protection regulator: www.ico.org.uk/make-a-complaint or 0303 123 1113. If you live in the European Economic Area, you can complain to your local data protection authority.

17A. If you live in the United States

This section applies to residents of California and other US states with consumer privacy laws, including the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA). It adds to the rest of this notice.

Categories of personal information we collect. In the last 12 months we have collected these categories, from the sources and for the purposes described in sections 3 to 10:

• Identifiers: name, email address, phone number, IP address and account log-in.
• Commercial information: orders, plans, invoices and payment status.
• Internet or network activity: pages visited, campaign tags, cookie choices (cookies only if you accept) and how you use the Speak app.
• Audio and electronic information: your voice, call recordings and transcripts, and demo and help assistant conversations.
• Professional information: job title, employer and business contact details.
• Inferences: the outcome and summary of a demo call.
• Sensitive personal information: account log-in details (username and password), used only to provide and secure your account.

We disclose these categories for business purposes to the providers listed in section 12, who act as our service providers or contractors, and to the other recipients described in section 12. We keep each category for the periods in section 14.

No selling or sharing. We do not sell personal information, and we do not share it for cross-context behavioural advertising. We have not done so in the last 12 months, and we don't knowingly sell or share the personal information of anyone under 16.

Sensitive personal information. We use sensitive personal information only to provide the services you ask for, to keep them secure and as otherwise permitted by law. We don't use it to infer characteristics about you.

Your rights. Depending on where you live, you have the right to:

• know what personal information we collect, use and disclose, and get a copy of it;
• ask us to delete it;
• ask us to correct inaccurate information;
• opt out of the sale or sharing of personal information, targeted advertising and profiling that produces legal or similarly significant effects (we don't do any of these, but you can still ask);
• limit the use of sensitive personal information (we already use it only as described above); and
• appeal if we decline your request.

How to make a request. Email phil@speak.ad with "Privacy request" in the subject line. We will confirm receipt within 10 business days and reply within 45 days, or tell you if we need up to 45 more days. We will need to verify your identity, usually by matching the information you give us with what we hold, and we may ask for more information to do so.

Appeals. If we decline your request, you can appeal by replying with "Appeal" in the subject line. We will tell you the outcome, and our reasons, within the time your state's law requires. If you are not satisfied, you can contact your state attorney general.

Authorised agents. You can use an authorised agent to make a request for you. We will ask for your signed permission for the agent and may ask you to verify your identity with us directly, unless the agent holds a valid power of attorney.

No discrimination. We won't treat you differently, for example by charging a different price or giving a different level of service, because you used your privacy rights.

When we act for a business. Where we process personal information for a business customer (section 11), we act as that business's service provider or processor. Please send your request to that business. If you send it to us, we will pass it on and help the business respond.

18. Children

Speak is a service for businesses. It is not directed at anyone under 18, and we don't knowingly collect personal information from children. Customers must not include anyone under 18 in their Managed Campaign lists. If you think we hold information about a child, please contact us and we will delete it.

19. Changes to this notice

We'll update this notice when our practices change. We'll publish the new version here with a new effective date, and tell customers about important changes by email or in the Speak app.

20. Contact us

Email: phil@speak.ad (please put "Privacy" in the subject line)

Post: Vidara, LLC (trading as Speak), 1111B S Governors Ave STE 37713, Dover, DE, USA

UK representative: Inspire (GBR) Limited (company number 09477696), Victoria House, Ack Lane East, Bramhall, Stockport, Cheshire, England, SK7 2BE

Speak is a trading name of Vidara, LLC.