Last updated: 21 August 2026
This policy explains what personal data TillyCall collects, why, and what your rights are. TillyCall lets you have an AI receptionist answer your phone calls, take messages and text you your leads.
TillyCall is operated by TillyCall Ltd, a company registered in England & Wales (company number 17402622), registered office 66 Paul Street, London EC2A 4NA ("we", "us", "our"). We are the "data controller" for the personal data described in this policy, except where we act as a "processor" on behalf of our business customers (see section 5).
For any privacy question or request, contact us at info@tillycall.com.
| What we do | Lawful basis (UK GDPR) |
|---|---|
| Provide and run the service for you | Performance of our contract with you |
| Take your subscription payment | Performance of our contract with you |
| Keep the service secure, prevent abuse, and improve it | Our legitimate interests |
| Meet our legal and accounting obligations | Legal obligation |
We do not sell your personal data, and we do not use it for third-party advertising.
We use a small number of trusted providers to run the service. They only process data on our instructions and to provide their part of the service:
| Provider | Purpose |
|---|---|
| Stripe | Subscription billing |
| Twilio | Sending messages by SMS, and making/handling phone calls |
| ElevenLabs | Generating the voice used on calls |
| Railway | Secure cloud hosting of the application and database |
| Resend | Sending emails (where email delivery is used) |
| Anthropic / OpenAI | AI processing of the text you provide (only when AI features are enabled; your content is not used to train their models under their business terms) |
We may also share data where required by law, or in connection with a business sale or reorganisation.
When you enter other people's details (such as your customers'), you are the data controller for that information and TillyCall acts as your data processor. You are responsible for having a lawful basis to hold and use those details (including to contact them). We only process that data to provide the service to you and on your instructions.
Some of our providers may process data outside the UK, including in the United States. Where they do, the transfer is protected by appropriate safeguards such as the UK International Data Transfer Agreement or Addendum to the EU Standard Contractual Clauses.
We keep your data for as long as your account is active and for a reasonable period afterwards to meet legal, tax and accounting obligations (generally up to 6 years for financial records). You can ask us to close your account and delete your data at any time, subject to those legal retention requirements.
TillyCall uses only strictly-necessary cookies — a secure session cookie to keep you logged in, and (across the Tilly family of products) a single sign-on cookie. We do not use advertising or third-party tracking cookies.
We protect your data with encryption in transit (HTTPS), securely hashed passwords, and access controls. Card payments are handled entirely within Stripe's PCI-compliant systems. No online service can be guaranteed 100% secure, but we take reasonable steps to protect your information.
Under UK data protection law you have the right to access, correct, delete, restrict or object to our use of your personal data, and to data portability. To exercise any of these, email info@tillycall.com. You also have the right to complain to the UK's Information Commissioner's Office (ICO) at ico.org.uk, though we'd appreciate the chance to put things right first.
We may update this policy from time to time. We'll change the "last updated" date above and, for significant changes, let you know by email or in the app.
TillyCall Ltd, 66 Paul Street, London EC2A 4NA · info@tillycall.com