Privacy Policy

Last updated: April 2026

1. Who We Are

ClientDriven is a business platform for appointment-based and service businesses. Our solutions include the booking and messaging system, the Voice AI receptionist, social media content creation and advertising management, and custom app development. We are operated by ClientDriven, based in Limassol, Cyprus.

If you have any questions about this Privacy Policy or how we process data, you can contact us at:

  • Email: info@clientdriven.me
  • Website: clientdriven.me

2. What Information We Collect

We collect different types of information depending on how you use ClientDriven.

Account Information

When you create an account, we may collect details such as your name, business name, email address, phone number, and login details.

Business Information

During onboarding or account setup, we may collect information about your business, including staff details, services, working hours, booking preferences, contact details, and related setup information required to configure your system.

Payment Information

Payments are processed by third-party payment providers such as Stripe. We do not store your full card details on our servers. We may store billing-related information such as customer ID, subscription status, invoices, and payment history.

Messaging and Usage Data

We may log message-related activity associated with your account, such as message type, timestamp, recipient number, sender details, delivery status, and related usage records. This information may be used for reporting, service delivery, support, and billing.

Support Communications

If you contact us by email, forms, chat, or support channels, we may store your messages and contact details so we can respond and maintain support records.

Voice AI Call Data

If you use our Voice AI receptionist, we process call-related data such as the caller's phone number, call time and duration, call recordings and transcripts where enabled, the outcome of the call, any appointment or enquiry details captured, and usage records used for reporting and billing.

Social Content and Advertising Data

If you use our social media service, we process the photos, videos, captions and other material you send us, along with the account or advertising access you grant us to publish on your behalf, and performance data such as reach, engagement, ad spend and results reported by the platforms.

Custom App Data

If we build a custom app or internal system for you, we process the business information, workflows, files and records you provide or store in it in order to build, host, operate, support and maintain that application for you.

Technical and Device Data

We may collect technical data such as login activity, browser type, device information, IP address, pages viewed, and general platform usage data to operate, secure, maintain, and improve the service.

3. How We Use Your Information

We use your information to:

  • • Provide, configure, and operate the ClientDriven platform and related services
  • • Set up and manage your booking system, messaging workflows, and account features
  • • Send messages on your behalf where enabled in your account
  • • Answer, handle and log calls through the Voice AI receptionist, and book appointments or capture enquiries on your behalf
  • • Edit, schedule, publish and promote social media content and advertising campaigns on the accounts you authorise
  • • Design, build, host, operate, support and maintain custom apps we deliver to you
  • • Process subscriptions, billing, invoices, and related account administration
  • • Provide customer support and respond to requests
  • • Improve, maintain, secure, and monitor the platform
  • • Comply with legal, tax, regulatory, and contractual obligations

We do not sell your personal data to third parties.

4. Your Clients' Information Across Our Solutions

If you use ClientDriven to send booking confirmations, reminders, follow-ups, updates, or similar messages, we process your clients' contact details and related message data on your behalf for the purpose of delivering and managing those communications.

The same applies to the other solutions we provide: calls handled by the Voice AI receptionist may involve your callers' phone numbers, recordings, transcripts and enquiry details; social media content you send us may contain images or videos of identifiable people; and custom apps we build may store records about your own customers, staff or suppliers.

You remain responsible for ensuring you have the appropriate legal basis and permissions to use your clients' personal data, to send messages to them, to record or transcribe calls where required by local law, and to publish photos or videos in which they appear.

In relation to your clients' personal data, you generally act as the data controller and ClientDriven acts as a processor or service provider on your behalf, except where we are required to process data for our own legal, security, billing, or operational purposes.

5. Who We Share Your Data With

We share personal data only with service providers and infrastructure partners that help us operate ClientDriven and deliver the service.

These may include providers for:

  • • Payment processing
  • • Booking, CRM, calendar, and automation infrastructure
  • • SMS and messaging delivery
  • • Voice AI, telephony, speech recognition and call handling
  • • Social media platforms, publishing tools and advertising networks
  • • Hosting, application infrastructure, and technical operations
  • • Analytics, monitoring, support, and security tools where applicable

Key providers we may use include Stripe, GoHighLevel, Base44, Evremas, Retell AI, Google, Meta (Facebook and Instagram), TikTok, and SMS delivery providers connected to the service.

We share data only where necessary to provide the service, operate the platform, comply with legal obligations, or protect our legitimate business interests.

6. Data Retention

We retain personal data for as long as necessary to provide the service, maintain business and billing records, comply with legal obligations, resolve disputes, and enforce our agreements.

In general:

  • • Account and business setup data may be retained while your account is active
  • • If your subscription ends, we may retain certain account data for a limited period in case you return, request support, or where retention is required for legal, billing, tax, fraud-prevention, or operational reasons
  • • Messaging logs and operational records may be retained for reporting, support, security, and billing purposes for a reasonable period based on the type of data and applicable obligations
  • • Call recordings and transcripts from the Voice AI receptionist may be retained for a limited period for quality, support, dispute-resolution and billing purposes, and can be deleted earlier on request where no legal obligation requires retention
  • • Social media source files, edited content and campaign reporting may be retained while the service is active and for a reasonable period afterwards so we can re-publish, report on or hand over your content
  • • Data inside a custom app we built for you is retained for as long as that app is operated for you, subject to any separate arrangement or export you request

When data is no longer required, we will delete it or anonymise it where appropriate.

7. Your Rights Under GDPR

If you are located in the European Union, European Economic Area, or a jurisdiction with similar privacy rights, you may have the right to:

  • • Access the personal data we hold about you
  • • Request correction of inaccurate or incomplete data
  • • Request deletion of your personal data
  • • Object to or restrict certain processing
  • • Request a copy of your data in a portable format where applicable
  • • Withdraw consent at any time where processing is based on consent
  • • Lodge a complaint with your local data protection authority

To exercise your rights, contact us at info@clientdriven.me. We will respond within a reasonable time and in accordance with applicable law.

8. Cookies

ClientDriven uses cookies and similar technologies to operate the website and platform, remember preferences, improve performance, and, where permitted, measure usage or support marketing activities.

Some cookies are strictly necessary for the website or platform to function. Other cookies, such as preferences, analytics, or marketing cookies, are used only where applicable and, where required by law, only with your consent.

You can manage your cookie choices through our cookie banner or cookie settings panel at any time. For more information, please see our Cookie Policy.

9. Security

We use reasonable technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, disclosure, or alteration.

This includes measures such as encrypted HTTPS connections, access controls, and the use of third-party providers that apply recognised security standards appropriate to their services.

However, no system can be guaranteed to be completely secure, and we cannot guarantee absolute security.

10. Children's Privacy

ClientDriven is intended for business use and is not directed to children. We do not knowingly collect personal data from anyone under the age of 18.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in the service, legal requirements, or how we process data.

When we make updates, we will revise the "Last updated" date at the top of this page. If changes are material, we may provide additional notice, such as by email or through the platform.

12. Contact Us

If you have questions about this Privacy Policy or how we process personal data, contact us at:

  • Email: info@clientdriven.me
  • Address: Limassol, Cyprus
  • Website: clientdriven.me

13. Legal Bases for Processing

We process personal data under one or more of the following legal bases, depending on the context of the processing:

  • • Performance of a contract — where processing is necessary to provide the service or take steps at your request before entering into a contract
  • • Legal obligation — where we are required to process data to comply with applicable law
  • • Legitimate interests — where processing is necessary for the operation, security, improvement, and administration of our service, balanced against your rights and interests
  • • Consent — where you have given consent for a specific purpose, such as certain cookies or marketing communications

Where we rely on consent, you may withdraw it at any time. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

14. International Data Transfers

Some of our service providers and infrastructure partners may process personal data outside the European Economic Area (EEA).

Where this happens, ClientDriven uses appropriate safeguards required by applicable law, such as adequacy decisions, standard contractual clauses, or other lawful transfer mechanisms, to ensure that personal data continues to receive an appropriate level of protection.

15. Requests from End Customers

If you booked an appointment, received a message, or otherwise interacted with a business that uses ClientDriven, that business is generally the controller of your personal data in connection with that interaction.

Requests to access, correct, delete, or port your personal data, or to object to or restrict its processing, should usually be directed to that business in the first instance.

Where applicable and permitted by law, ClientDriven may assist the relevant business in responding to such requests as part of the services we provide to them.