Scope
This policy describes the processing carried out to provide the website, the CloseLynx account, the Chrome extension, live assistance and post-call analyses. It applies to users of the service and to the data they choose to process with it.
Data processed
CloseLynx processes account and organization information, roles and invitations, evidence that participants were informed, audio sent during an active session, transcripts, summaries, suggestions, scores, follow-ups, usage data, security logs, support requests and the information required for billing. Passwords are stored in protected form and authentication tokens never appear in user exports.
Purposes
Data is used to authenticate users, provide transcription and sales analysis, generate post-call deliverables, manage credits and organizations, secure the service, answer support requests, honor rights requests and improve the product from consented audience measurement. It is never sold or used for targeted advertising.
Legal bases
Processing required for the account and the service is based on performance of the contract. Security, abuse prevention and technical improvement are based on legitimate interest, with respect for people’s rights. Non-essential audience measurement is enabled only after consent. Accounting and legal obligations are based on the applicable laws.
Providers and access
Access to data is limited to the people and services needed for hosting, authentication, transcription, analysis generation, email delivery, support and monitoring. Each organization controls its members, and advanced features are restricted to the owner or admin roles.
Retention
Account data is kept for the duration of the contractual relationship. Transcripts and call objects follow the organization’s retention period and are deleted automatically when it ends. Subscription credits expire at the end of their cycle and purchased packs after 12 months. Logs required for security and legal obligations are kept for a period proportionate to their purpose.
Security
The service applies encryption in transit, private object storage, per-organization access controls, short-lived tokens for the extension, audit logs, restorable backups, rate limits and network separation in production. Analyses rely on explicit statements and never try to infer people’s emotional or psychological state.
Your rights
Users can view, correct, export and delete their data from the product. They also have the rights of access, rectification, erasure, restriction, objection and portability provided by the GDPR, and the right to withdraw consent without affecting the lawfulness of prior processing.
Contact
Any request about personal data can be sent through the form on the website’s Contact page. A reply may require reasonable verification of identity or of the link with the organization concerned.