Privacy notice
Last updated 21 October 2026
This explains what information Unmissd holds, why, and who helps us process it. It covers two groups of people: businesses who use Unmissd, and their customers who message them.
Businesses using Unmissd
When you sign up we keep your name, business name, trade, email address, mobile number and password (stored only as a secure hash). If you pay, Stripe handles your card — we never see or store card numbers. We use this to run your account, bill you and contact you about the service. We rely on our contract with you to do this.
The phone app. If you use the Unmissd app, we keep which phones are signed in and, if you allow notifications, a token to send them. The app only records your location while you're clocked in: it's used to work out when you'll arrive at a job and to remind you to mark jobs done. Location history is deleted after 90 days (you can choose 30 to 365 days in Settings), and you can delete it at any time in the app or in Settings. Your location is never shown to customers: an "On my way" text tells them a time, never where you are. When you tap "On my way", one location reading, rounded to about 100 metres, is sent to OpenRouteService to work out the drive. If you switch on the morning briefing, a notification at 7am lists the day's jobs by job type, time and the customer's first name. We use this to provide the features you've chosen to use (our contract with you).
Google Calendar. If you connect Google Calendar, we read the calendar you choose to check when you're free, add the jobs Unmissd books (with the job, the customer's name and the address), and keep them in step both ways: if you move or delete one of those jobs in Google, Unmissd moves or cancels it, and if you move or cancel it in Unmissd, the event changes too. The app shows your other calendar entries for the day next to your jobs; we read those when you look and don't store them. You can disconnect Google at any time in Settings.
Your records of jobs and customers. You can keep notes on each customer (other numbers, addresses, how to get in, their appliances) and on each job (notes, parts used and what they cost you, before and after photos, time on site, and the customer's signature if they sign on your phone). Photos you take or send are stored by us with their location and other hidden details removed first. If you ask Unmissd to read an appliance's details from a customer's photo, that photo is sent to Anthropic to do it. Only you see these records. Your costs, miles and profit on a job are never shown to customers.
Invoices and getting paid. If you use invoices, we keep your bank account name, sort code and account number (encrypted), your VAT number if you have one, and the address you put on invoices, so they can appear on your invoices. We check the sort code and account number against the banks' published rules; nothing is sent to your bank. If you choose to take card payments, Unmissd sets up a Stripe account in your own name (we pass Stripe your business name and email; Stripe asks you for the rest). Card payments then go straight from your customer to you through Stripe: Stripe tells us when an invoice is paid, refunded or disputed, so the invoice can show it, but we never see card numbers or your Stripe balance.
Customers who message a business
When someone texts, WhatsApps or fills in the website form of a business that uses Unmissd, we store their name, phone number, the messages and any job booked, on that business's behalf.
Who is responsible for your details. The business you contacted is the controller of your details: it decides why and how they're used. Unmissd is its processor: we only use your details on the business's instructions, to run this service for it, and never for our own purposes, under a data processing agreement with the business. So if you want to see, correct or delete your details, or object to how they're used, please contact the business first. If you contact us instead, we'll pass your request to the business straight away and help it answer.
Reply STOP to any message and you won't get further automatic messages from that business, by text or WhatsApp.
Photos. Photos a customer sends stay with Twilio, are only shown to the business, and are deleted after 90 days. So that the automatic reply can mention what a photo shows, the newest photos a customer sends are passed to Anthropic with the conversation when that reply is written. If the business asks for an estimate from them, the photos and the conversation are sent to Anthropic to suggest a price range for the business only; the estimate is never shown to the customer unless the business chooses to send them a price. Photos the business sends you have their location and other hidden details removed first; by text, they come as a private link that stops working after 30 days.
Your details with the business. The business may keep other numbers and addresses for you, a note on how to get in, details of your appliances (for example a boiler's make and model, which can be read from a photo you send), and notes, photos and parts for each job. If you sign for a job on the business's phone, your signature is kept with that job. Only the business sees these.
Your jobs in the business's calendar. If the business uses Google Calendar, a job booked for you is added to it with the job, your name and the address.
Invoices. An invoice is sent to you as a link. Its page shows the business's details, the work, what's owed and how to pay; we tell the business when the page has been opened. If you pay by card, you pay the business through Stripe, which handles your card details (we never see them). If the business has switched on reminders, you may get a text when the invoice is due and a week later; if you usually message the business on WhatsApp and it's been more than a day, the reminder comes by text. If you ask the business to delete your details, invoices already sent to you are kept for the business's tax records, with your name and address as they were on the invoice, but the link stops working.
After a job. A business may text you a couple of days after a job to check everything's all right, and, if you had a boiler or heating service, when the next one is due. Your reply to the check is read automatically (with Anthropic's help) so that a problem goes straight to the business, which is told at once so they can call you. Whatever you reply, they may ask whether you'd leave a review; they will never ask for a particular rating. Every one of these texts says how to opt out, and STOP stops them all.
Calls. If a business uses Unmissd for missed calls, we keep the number of anyone who rings it (or whose call is diverted to it), when they rang and whether the business answered, and we may text them once to ask what they need. Calls are not recorded. A withheld number is never texted. Voice notes sent on WhatsApp are converted on our own systems so the business can play them; they aren't sent to any transcription service.
Safety checks. Every message is checked for signs of an emergency, such as a gas smell, sparking electrics or flooding, so that safety advice can be sent straight away. If a message looks serious, the business is texted and emailed what you said, your name, number and the job address, so they can call you. We keep a record of each check for the business, and delete it with the rest of your details.
Who helps us
- Twilio — sends and receives texts and WhatsApp messages, and connects calls.
- Meta (WhatsApp) — carries WhatsApp messages between the customer and the business. If a business uses Facebook lead ads, Meta also sends us the enquiries people make through them.
- Anthropic — the AI model that writes replies, helps spot emergencies, reads booking details from a conversation, reads a customer's reply to an after-job check, and, when the business asks, suggests an estimate or reads an appliance's details from a photo. Message text, and the photos customers send, are sent to it to do this.
- Google — only if a business connects Google Calendar: to check free times, add the jobs Unmissd books (with the job, the customer's name and the address) and keep them in step both ways.
- postcodes.io and OpenRouteService (HeiGIT) — work out driving times and miles between jobs, so there's time to travel and the business can see what a job cost them in fuel. Only postcodes are sent: never names, full addresses or messages. When a business taps "On my way" in the app, OpenRouteService also gets one rounded location reading for the business's own phone.
- Expo (650 Industries), with Apple and Google — deliver notifications to the business's phone app. Notifications say who got in touch and what kind of message it is, never what the customer wrote; the morning briefing lists the day's jobs by job type, time and the customer's first name.
- SendGrid — sends account and notification emails.
- Stripe — takes subscription payments from businesses. If a business takes card payments on its invoices, Stripe also runs that business's own payment account and handles its customers' card payments; Unmissd only learns whether an invoice was paid, refunded or disputed.
- Railway — hosts the app and its database.
Each of them is bound by contract to protect the data and only use it to provide their service to us.
Sending data outside the UK
Some of these companies process data outside the UK, mostly in the United States. UK data protection law only allows that with a safeguard it recognises, so each transfer has one:
- Twilio (United States) — Twilio Inc. is certified under the UK Extension to the EU–US Data Privacy Framework (the "UK–US data bridge"). SendGrid, Twilio's email service, is covered by Twilio's data protection addendum, which uses the standard contractual clauses with the UK Addendum issued by the Information Commissioner.
- Anthropic (United States) — Anthropic's data processing addendum uses the standard contractual clauses with the UK Addendum.
- Meta (WhatsApp; United States and Ireland) — Meta's WhatsApp Business UK Data Transfer Addendum, which uses the standard contractual clauses with the UK Addendum.
- Google (United States) — Google LLC is certified under the UK–US data bridge.
- Stripe (United States) — Stripe, LLC is certified under the UK–US data bridge.
- Expo (650 Industries, United States) — the standard contractual clauses in Expo's terms. Apple (United States), which delivers notifications to iPhones — the standard contractual clauses in Apple's terms.
- Railway (United States) — Railway says it is certified under the UK–US data bridge, and its data processing addendum includes the standard contractual clauses with the UK Addendum as well.
- OpenRouteService (HeiGIT, Germany) — in the European Economic Area, which UK law already treats as protecting personal data properly, so no extra safeguard is needed.
- postcodes.io (Ideal Postcodes) — a UK company, and only postcodes are sent to it.
You can ask us for more detail about any of these safeguards using the contact details below.
How long we keep it
We keep account and message history while the account is open, so the business can see past conversations. Photos customers send are deleted after 90 days, as are photos the business sends them; job photos stay with the job until the business removes them (a removed photo is deleted the next day). Location history is kept for the period the business chooses (90 days unless they change it). When a business deletes a customer, we delete that customer's messages, jobs, records, photos and calls; sent invoices are kept for the business's tax records, without a working link. When a business asks us to close their account, we delete its customers, messages, jobs and invoices. Billing records are kept as long as the law requires.
Cookies
We only use cookies needed to keep you logged in, protect forms, and connect Google Calendar securely. There are no advertising or tracking cookies.
Your rights
You can ask to see, correct or delete your information, or object to how it's used. If you're a customer of a business that uses Unmissd, please ask that business first: it's responsible for your details, and we'll help it answer. If you run a business that uses Unmissd, ask us. You can also complain to the Information Commissioner's Office (ico.org.uk).
Contact
Unmissd is a trading name of [Company name] (company number [Company number]), [Registered address]. ICO registration number: [ICO registration number].
Email cyphasolutions@gmail.com with any question about this page.