Terms Help center

Privacy Policy

Effective 4 August 2026 · Contact: support@casly.app

This policy explains what data Border and Bridges Ltd, a company registered in the United Kingdom, trading as Casly ("Casly", "we", "us"), collects when you use casly.app and app.casly.app, why we collect it, and what we will never do with it. The short version: we process data only to run your workspace — we don't sell it, we don't use it for advertising, and we don't train AI models on it.

1. Two kinds of data

Your account data — your name, work email, company name and billing details. For this, Casly is the data controller.
Your workspace data — the leads, clients, conversations, documents and financial records your team stores in Casly. This belongs to your company; we process it only on your instructions, as a processor. Your company is responsible for having the right to store it.

2. What we collect and why

To run the Service: account data, workspace data, and the connection credentials you add yourself (for example an email app-password or a WhatsApp access token) — stored to operate those channels for you and used for nothing else.
To keep it secure: sign-in events, IP addresses and an audit trail of changes inside your workspace.
To bill you: subscription status and payment history. Card details go directly to our payment partner (merchant of record) — we never see or store card numbers.
To improve Casly: bug reports you choose to send (including the screenshot you attach) and basic technical logs. No behavioural ad tracking, no third-party analytics cookies.

3. What we never do

We never sell or rent your data to anyone.
We never use your data for advertising, and we don't run ad trackers.
We never use your workspace data to train AI models. Where AI features process your data (for example drafting a reply), it is processed to serve you in that moment and not used for model training.
Our team does not browse your workspace. Access is limited to what is needed to operate the platform, investigate a problem you report, or comply with law.

4. Where your data lives

Casly runs on established cloud infrastructure. Each company's workspace is isolated with database-level row security, encrypted in transit and at rest, and backed up daily. The services that help us run Casly ("sub-processors") are:

Service	What it does
Supabase (on AWS)	Database, file storage and authentication
Vercel	Application hosting and delivery
Payment partner (merchant of record)	Checkout, invoicing and payment processing
Meta Platforms	Only if you connect WhatsApp, Facebook or Instagram — messages flow through Meta under your own connected accounts
Your email provider	Only if you connect a mailbox — mail is sent and received through your own provider
Formspree	Delivers messages sent through the contact form on casly.app

Each of these processes data only for the purpose shown. We will update this list if it changes.

5. How long we keep it

While your workspace is active (trial or paid), we keep your data so the Service works.
When a trial or subscription ends, your workspace becomes read-only — nothing is deleted, and you can still export everything.
If you ask us to delete your workspace, we delete it permanently, with residual copies leaving encrypted backups on their normal rotation shortly after.

6. Your rights

You can ask us at any time to access, correct, export or delete the personal data we hold about you — and if you are in the UK/EU or a similar jurisdiction, these are your legal rights (including the right to complain to your data-protection authority). One email to support@casly.app is enough; we respond within 30 days. For personal data inside a company workspace, we may redirect your request to that company, since the data is theirs to control.

Step-by-step deletion instructions — including for data connected through Facebook, Instagram or WhatsApp (where removing the Casly app from your Meta account also triggers automatic deletion) — are on our Data Deletion page.

7. Cookies

Casly uses only essential storage: your sign-in session and preferences like light/dark theme. No advertising cookies, no cross-site tracking, so there is nothing to consent to and no cookie banner.

8. Changes and contact

If we materially change this policy, we will tell you by email or inside the app before the change takes effect. Anything unclear? Write to support@casly.app — a human reads it.

See also the Terms of Service — including what happens to your data when a subscription ends (it stays yours, read-only and exportable).