Privacy policy

Follow-Up Live is run by Wayne Agency, a sole trader based in the United Kingdom. For the purposes of UK data protection law (UK GDPR and the Data Protection Act 2018), Wayne Agency is the controller of your account and billing details, and the processor of the email content we handle on your instructions when you connect Gmail.

If you have a question about this notice, use the contact details published on this website, or reply to any email you have received from Follow-Up Live.

We keep the minimum needed to run the service:

• Account details. Your company name, work email address, and a hashed password. We use these to create your login and keep your workspace separate from every other customer.
• Billing. Payments are taken by Stripe. We store your Stripe customer and subscription IDs and the subscription status (for example “trialing”, “active”, or “past due”). We never see or store your full card number. A 7-day trial still collects a card at Stripe; we do not store it.
• Google connection. When you click Connect Google in Wayne Agency onboarding, Google gives us one token. That token lets Follow-Up Live read new enquiries in the inbox you chose, look at a small sample of your own Sent mail to match your writing style, and send follow-ups from that address. The token is encrypted before it is stored.
• Follow-up records. The follow-ups we draft or send on your behalf (recipient, subject, body, when it was sent), your like/dislike ratings, and per-lead sequence status so we know when to stop.
• Activity log. A short audit trail (who turned follow-up on or off, when a run happened, whether it succeeded) so you and we can see what the system did.

We do not sell your data, we do not use your emails to train AI models, and we do not show advertising.

When you connect Google, Follow-Up Live asks for two Gmail permissions and nothing else:

• Read your email (gmail.readonly). We read new messages in your inbox to spot enquiries from potential customers, we check those email threads so we can stop following up as soon as the customer replies, and we read a small number of emails from your own Sent folder so the follow-ups we write sound like you.
• Send email on your behalf (gmail.send). We send follow-up emails from your address, only to people who contacted you, and only after you have turned follow-up on.

What we store. We store an encrypted token that lets us connect to your Gmail. We also store a short extract of each enquiry (up to 500 characters), the sender's address and subject line, and a copy of each follow-up we send, so you can see what was sent and so we know when to stop. We do not copy your whole mailbox.

Who we share it with. To write a follow-up, we send the relevant enquiry text and a short style guide based on your Sent emails to our AI provider, xAI, through its business API. This is done only to provide the follow-up feature you turned on. xAI does not use this data to train its models. Gmail data is never used to train or improve any general AI model, and it is never sold, used for advertising, or shared with anyone else, except where the law requires it.

Limited Use. Follow-Up Live's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. This means:

1. We only use Google user data to provide and improve the follow-up feature you can see in the app.
2. We only transfer it to provide that feature, for security, to comply with the law, or as part of a merger or sale with your prior consent.
3. People at Wayne Agency do not read your email unless you ask us to for support, it is needed for security or to comply with the law, or the data has been aggregated and anonymised.
4. We never use it for advertising, sell it, or use it to decide creditworthiness.

Your control. You can disconnect at any time from your Google Account permissions page or from your dashboard. When you disconnect or close your account, we delete your Gmail token straight away and delete stored enquiry extracts and follow-up records within 30 days. To ask us to delete your data sooner, use the contact details published on this website, or reply to any email you have received from Follow-Up Live.

Follow-ups are drafted by an AI model. To write a reply we send the model the relevant enquiry text, a short style guide built from your Sent samples and ratings, and the reply we are about to send. The model is not given your account ID, your Gmail token, or any other customer's data, and it has no direct access to Gmail. Every read and send goes through our servers, scoped to your workspace.

Nothing is sent to a lead until you have subscribed, connected Gmail, and turned follow-up on yourself.

• Contract. Account, billing and follow-up records are needed to provide the service you signed up for.
• Consent. You choose to connect Gmail and can revoke that consent at any time.
• Legitimate interests. Keeping the service secure, preventing abuse, and keeping an audit log of automated actions.
• Legal obligation. Keeping invoices and payment records for HMRC.

Only the providers we need to run the service, each under their own data-processing terms:

• Stripe. Payment processing and subscription billing.
• Google. Gmail access, under the permissions you grant.
• xAI. The AI model that drafts follow-up text.
• Vercel and Neon. Hosting and the database that stores your workspace.

Some of these providers process data outside the UK. Where they do, transfers rely on the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or an adequacy decision.

We will disclose information if the law requires it, for example to a court or regulator.

Every customer is a separate tenant. Each database read and write is scoped to your tenant ID, which is taken from your login session on our servers. It is never taken from a form field, a URL, or the AI. Gmail tokens are encrypted at rest and are never sent to the AI model. Passwords are stored as one-way hashes.

If we ever discover a breach that puts your rights at risk, we will tell you and the Information Commissioner's Office without undue delay.

• Account and workspace. For as long as your account is open. Ask us to close it and we delete the tenant, its Gmail connection, follow-up records and sequences within 30 days.
• Gmail tokens. Deleted as soon as you disconnect Gmail or close your account.
• Activity logs. Up to 12 months, then removed.
• Billing records. 6 years after the tax year they relate to, as UK tax law requires.

Follow-Up Live sets one essential cookie (saas_session) so you stay logged in. It is signed and encrypted, and it holds no personal details beyond a reference to your session. A second small cookie (fl_consent) remembers your cookie choice.

We do not currently run analytics or advertising cookies. If we add privacy-friendly analytics later, they will stay off until you opt in through the cookie banner, and this notice will be updated.

Under UK GDPR you can ask for a copy of your data, ask us to correct or delete it, restrict or object to how we use it, and take a copy elsewhere. You can also withdraw consent for Gmail access at any time. To make a request, use the contact details published on this website, or reply to any email you have received from Follow-Up Live. We will reply within one month.

If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office.

If we change this notice in a way that matters, we will show the new date at the top and, for significant changes, email account holders. See also our terms & conditions.