Legal

Privacy Policy

Lessmedia Limited (company no. 15128741) · Last updated: August 2026 · Registered office: 10 Bellegrove Road, Welling, DA16 3PR

1. Who we are

Aiva is a service operated by Lessmedia Limited (registered in England and Wales, company no. 15128741), trading as Aiva ("Aiva", "we", "us"). Our registered office is 10 Bellegrove Road, Welling, DA16 3PR.

This policy explains what personal data we handle, why, and what rights people have. If you have a question about anything in it, email hello@textaiva.com.

2. Two different roles

We handle personal data in two distinct capacities, and it matters which one applies:

  • As a controller. For data about the businesses that buy or enquire about Aiva. We decide why and how that data is used.
  • As a processor. For data about the members of the public who call a business using Aiva. That data belongs to the business. We only handle it on their instructions.

Section 7 explains what this means for callers in practice.

3. What we collect

From businesses enquiring about Aiva

  • Business name and the name of the person enquiring
  • Phone number and email address
  • Trade type (for example plumbing, electrical, roofing)
  • Anything else you choose to tell us in an enquiry or on a call

From businesses using Aiva

  • Account and login details, handled by our authentication provider (see section 6)
  • Your business phone number and the configuration you set: services, prices, working hours, service area
  • Billing details, handled by our payment provider. We do not store card numbers.

From people who call a business using Aiva

  • The phone number the call came from, and the time and duration of the call
  • The content of the SMS conversation that follows
  • Details the caller gives in order to book or enquire about a job, such as their name, address and what work they need

4. What we do not collect

We do not record calls. When Aiva answers, it plays a short spoken message and the conversation moves to text. The caller's voice is not recorded, stored or transcribed at any point. If that ever changes, we will update this policy and callers will be told on the call before any recording takes place.

We do not sell personal data. We do not use the content of caller conversations for advertising, and we do not use it to train third-party AI models (see section 6).

5. Why we use it, and our lawful basis

  • To provide the Aiva service for a business: answering calls, sending and replying to SMS, qualifying enquiries and booking jobs. Where this involves caller data we act on the business's instructions as its processor.
  • To set up, support and improve a business's account. Lawful basis: performance of a contract, and our legitimate interest in running and improving the service.
  • To respond to enquiries made through our website or by email. Lawful basis: legitimate interest, and the steps necessary to enter into a contract.
  • To take payment and meet our legal, accounting and tax obligations. Lawful basis: performance of a contract, and legal obligation.

6. The providers we rely on

We use a small number of third parties to deliver the service. Each acts as our processor or sub-processor, handles only what it needs to, and is bound to protect it.

  • Twilio provides the phone numbers, call routing and SMS delivery Aiva runs on. It handles caller phone numbers, call metadata and message content.
  • Anthropic provides the AI model that reads and writes the SMS conversation. Message content is sent to Anthropic to generate each reply. Anthropic does not use this data to train its models.
  • ElevenLabs generates the spoken greeting audio for each business at onboarding. It processes the greeting script you approve, not caller data.
  • Clerk provides authentication for the business dashboard: sign-in, sessions and password handling for account holders.
  • Calendly handles the booking of discovery calls from our website, and receives the name, email and any details you enter when booking.
  • Vercel hosts this website and provides basic, privacy-preserving traffic analytics.

We keep this list current. If we add a provider that handles personal data, we will update this section.

7. If you called a business that uses Aiva

If you rang a plumber, electrician or other trade and ended up texting with Aiva, the business you called is the data controller for that conversation. It decides why your data is held and for how long. We are its processor and act on its instructions.

That means requests about your data are best directed to the business you contacted. If you are not sure who that is, or you cannot reach them, contact us at hello@textaiva.com and we will help you identify them or pass your request on.

You can ask Aiva to stop texting you at any point by replying STOP. That ends the conversation immediately.

8. Where your data is held

Our own systems store data in the United Kingdom or the European Economic Area. Some of the providers in section 6 are based outside the UK, so data may be transferred to and processed in other countries, including the United States.

Where that happens, the transfer is covered by an appropriate safeguard recognised under UK data protection law, normally the UK International Data Transfer Addendum to the European Commission's standard contractual clauses, or an adequacy decision. You can ask us for details of the safeguard used for any particular provider.

9. How long we keep it

  • Caller conversations and job records: 24 months from the last contact, unless the business that controls the data asks us to delete it sooner. Businesses can request deletion at any time.
  • Website and sales enquiries: 24 months from your last contact with us, unless you ask us to delete them sooner.
  • Business account data: for as long as the account is open, and 12 months after it closes.
  • Invoices and financial records: 6 years, as required by UK tax law.

When a retention period ends, data is deleted or irreversibly anonymised.

10. How we protect it

Access to systems holding personal data is restricted to people who need it, and protected by individual accounts and multi-factor authentication where the provider supports it. Data is encrypted in transit. We keep the number of people and systems that can reach caller data as small as we practically can.

No system is perfectly secure. If a breach occurs that is likely to result in a risk to people's rights, we will report it to the Information Commissioner's Office within 72 hours and tell affected businesses without undue delay.

11. Your rights

Under UK data protection law you have the right to:

  • Ask what personal data we hold about you, and get a copy
  • Have inaccurate data corrected
  • Ask for your data to be erased
  • Ask us to restrict how we use it, or object to us using it
  • Receive data you gave us in a portable format
  • Withdraw consent, where we relied on consent

To exercise any of these, email hello@textaiva.com. We will respond within one month. There is no charge unless a request is manifestly unfounded or excessive.

12. Cookies and website analytics

This website does not use advertising or tracking cookies. We use Vercel's analytics, which measures page visits without cookies and without building a profile of you. If you book a call, Calendly may set cookies of its own, governed by Calendly's privacy policy.

13. ICO registration

We are completing our registration with the Information Commissioner's Office. The registration reference will be published here once it is issued.

14. Complaints

If you are unhappy with how we have handled your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk, by post, or on 0303 123 1113.

15. Changes to this policy

If we change this policy we will update the date at the top. Where a change materially affects businesses using Aiva, we will tell them by email before it takes effect.

16. Contact us

For any privacy question or data request, email hello@textaiva.com or write to Lessmedia Limited, 10 Bellegrove Road, Welling, DA16 3PR.