Privacy Policy

Last updated: 11 June 2026

Autumn Agentic Automation ("we", "us") is operated by Marley Richardson, United Kingdom. Contact: marley@autumnagenticautomation.co.uk.

What we collect and why

Free Business Audit. The business figures you enter and the results shown are recorded when you reveal your price or book a call, so that if we speak, the conversation starts from your numbers. Lawful basis: legitimate interest.

Business-to-business outreach. We contact people in business roles using professional contact details (name, role, business email, company information) gathered from publicly available sources such as company websites and business data providers. Lawful basis: legitimate interest in offering relevant business services to businesses. Every email we send tells you how to opt out; replying "no" (or emailing us) adds you to a permanent suppression list and you will not hear from us again.

Bookings. If you book a call, scheduling runs on Cal.com and the meeting on Zoom; their privacy policies also apply.

Where data lives

Data is processed by: Supabase (database, hosted in London, UK), Netlify (website hosting and DNS), IONOS (email), Cal.com (scheduling), Zoom (calls), and Apify (public business data collection). We do not sell personal data.

Retention

Outreach records and Business Audit sessions are kept while relevant to an active or prospective business relationship, then deleted. Suppression list entries are kept permanently so that an opt-out is never forgotten.

Google user data

If you choose to connect a Google account to your Autumn dashboard, we request only the minimum scopes needed for the features you enable: sending email on your behalf (gmail.send) and creating calendar events for booked meetings (calendar.events).

Autumn's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically: we use Google user data only to provide the features you switched on (sending the outreach you approve and creating your calendar events); we do not use it to develop, improve, or train generalised artificial-intelligence or machine-learning models; we do not sell it; we do not transfer it to third parties except as necessary to provide those features, to comply with law, or as part of a merger or acquisition with prior notice to you; and no humans read your data except with your explicit permission, where required for security or legal reasons, or where the data is aggregated and anonymised.

OAuth tokens are stored encrypted, are never shared, and you can revoke access at any time from your dashboard's connections page or at myaccount.google.com/permissions. On disconnection or account closure, stored Google tokens and any cached Google data are deleted within 30 days.

Your rights

Under UK GDPR you may request access to, correction of, or erasure of your personal data, or object to processing, by emailing marley@autumnagenticautomation.co.uk. You may also complain to the Information Commissioner's Office (ico.org.uk).