Privacy Policy

1. Who this applies to

FixLeakage is operated by NABX LTD ("we", "us", "our"). This policy covers two groups: businesses that sign up to use FixLeakage ("customers"), and the customers' own callers whose calls FixLeakage handles on a customer's behalf ("callers"). FixLeakage acts as a data processor for caller data on behalf of the customer, and as a data controller for customer account data.

2. Data we collect

From customers (accounts): business name, phone number, email address, hashed password, plan and billing status.

From callers (calls handled on a customer's behalf): phone number, call audio/transcript, and any job details provided during the call — for example the nature of the job, location, urgency, and the caller's name, where given.

3. How we use it

To detect missed calls and trigger an SMS response, to extract structured job details from a call so they can be actioned, to operate customer accounts and billing, to provide customer support, and to maintain the security and reliability of the service.

4. Legal basis

Processing is carried out to perform our contract with the customer, and — for calls handled on a customer's behalf — under the customer's own legal basis for contacting their caller (typically legitimate interest in responding to an enquiry). Account and billing data is processed to perform our contract with the customer and to meet accounting/legal obligations.

5. Third parties we share data with

We use a small number of specialist providers to operate the service, and only share what each needs to do its job:

• Twilio — call and SMS delivery (receives caller phone numbers and message content).
• OpenAI — transcription and extraction of structured job details from call audio/text.
• Stripe — payment processing for customer subscriptions (FixLeakage does not store full card details).
• Meta (Facebook) — advertising measurement, and only if you allow the Marketing cookie category. Section 9 sets out exactly what we send and when.

We do not sell personal data, and we do not share it with data brokers. We never share caller phone numbers, call recordings, transcripts or job details for advertising.

6. International transfers

Our providers may process data outside the UK/EEA. Where they do, we rely on the safeguards those providers offer for international transfers (such as Standard Contractual Clauses). This includes Meta, which processes advertising measurement data in the United States.

7. Data retention

Call and lead data is retained for as long as the customer account is active, so a business can see its own recovery history, and for a limited period afterward for legal/accounting purposes. Customers can request deletion of specific caller data on request.

8. Security

Data is encrypted in transit (TLS) and passwords are stored using bcrypt hashing, never in plain text. Access to customer data is scoped per account (tenant) at the application level.

9. Cookies

We use three categories of cookies and similar local storage. You choose which optional categories to allow via the banner shown on your first visit to our public pages, and can change that choice at any time by managing your cookie preferences.

Necessary (always on): an httpOnly session cookie that keeps you logged in, which JavaScript cannot read; a small non-sensitive flag cookie used only to check whether a session exists; and a local record of your own cookie choices (see below).

Analytics (optional, off by default): reserved for a future Google Analytics integration. This is not currently active on the site regardless of your choice here.

Marketing (optional, off by default): when you allow this category, we load the Meta (Facebook) Pixel on our public marketing pages for advertising and measurement purposes. It sets its own cookies (e.g. _fbp) in your browser, and is never loaded on the FixLeakage dashboard or onboarding, or at all unless you've opted in.

Like any request your browser makes, loading the pixel tells Meta your IP address and browser type. That is how the web works rather than something we send them, but it is worth being plain about.

Allowing Marketing also lets us send Meta a message from our own servers when a trial starts, so we can measure which adverts bring businesses to FixLeakage. We send only that it happened and when, under a random reference that means nothing outside our own records. We never send your name, email address, phone number, business name, or anything a caller told us.

Subscription payments are measured separately, and this choice does not yet control them. When a subscription is paid for, we report the amount and currency to Meta regardless of the setting above. No name, email address, phone number, business name or contact details are attached. We are working on bringing this under the same control, and we will update this policy when it is.

Your cookie choice applies to the browser you made it in. If you have an account, your account setting is what governs the server-side measurement described above, and you change it in your account settings. Changing the cookie banner while signed out stops the pixel in that browser but does not change your account setting.

Your cookie choice itself — which categories you've allowed, and when — is kept in your browser's local storage. If you create an account, we also record your Marketing answer against that account, along with the date and which version of this wording you saw, so that we can honour it. You can see and change that answer at any time in your account settings, and turning it off stops the trial measurement described above, including anything still waiting to be sent. The record holds only your answer and those details: no name, email, phone number, address, IP address, or advertising identifier.

10. Your rights

Under UK GDPR you have the right to access, correct, delete, or export your personal data, and to object to or restrict certain processing. To exercise these rights, contact us through your account or by emailing us.

11. Children

FixLeakage is a business tool and is not directed at, or knowingly used by, children.

12. Changes to this policy

We'll update this page as the product changes and note the date at the top when we do.

13. Contact

Questions about this policy can be raised by emailing us, or through your account manager once you're a customer.