Privacy policy
This policy explains what personal data Decibel handles, why, and what you can do about it.
Last updated 7 October 2026
1. Who we are
Decibel (“we”, “us”) provides a contact database, browser dialler and pipeline for B2B sales teams. [Legal entity name, company number and registered address to be confirmed before publication.] You can reach our privacy team at oliver@usedecibel.com.
2. Who this policy covers
- Customers and users: people who sign up for and use the Decibel app.
- Website visitors: people who browse this site.
- People in the database: business contacts whose professional details appear in our database. If that is you, the Article 14 notice is written for you.
- People our customers call: for calls, notes and recordings our customers are the controller and we act as their processor under our Data Processing Addendum.
3. Data we collect and why
| Data | Purpose | Lawful basis |
|---|---|---|
| Account details: name, work email, workspace, role | Creating and running your account | Contract |
| Billing details: plan, invoices, payment status (card details are held by Stripe, not us) | Taking payment and keeping accounts | Contract, legal obligation |
| Usage data: actions in the app, device and browser information | Security, support and improving the product | Legitimate interest |
| Website analytics | Understanding which pages are useful | Consent |
| Business contact data in the database: name, job title, employer, business phone or mobile, work location | Providing a B2B contact database to customers | Legitimate interest |
| Support correspondence and demo requests | Answering your questions and arranging demos | Legitimate interest |
| Free tools: the phone number or email you enter, and your IP address | Running the check you asked for and preventing abuse of the free tools | Legitimate interest |
4. Where data is stored
Our primary database is hosted in the UK (London). Some sub-processors may process data outside the UK. Where they do, we rely on adequacy regulations or the UK International Data Transfer Agreement or Addendum with appropriate safeguards.
5. Who we share data with
We share data with the sub-processors listed in our DPA (Supabase, Twilio, Stripe, Vercel, Resend and PostHog) so they can provide their services to us. We do not sell personal data to advertisers. We may disclose data where the law requires it.
Free tools. When you use our free tools, the number or email you enter is sent to the provider that runs the check: TPS Services API (tpsapi.com) for TPS and CTPS checks, MillionVerifier for email checks and Twilio for phone checks. We do not keep the number or email itself. We keep a one-way hashed copy, with the result, for up to 7 days (TPS), 14 days (email) or 30 days (phone) so repeat checks are instant, and a hashed copy of your IP address for 30 days to enforce daily limits.
6. How long we keep it
- Call recordings: 1 year on Pro.
- Call metadata: 3 years.
- Deleted workspaces: purged 30 days after deletion.
- Billing records: as long as tax and accounting law requires.
7. Your rights
Under UK GDPR and EU GDPR you can ask us to:
- give you a copy of your data;
- correct data that is wrong;
- erase your data;
- restrict or stop processing, including an absolute right to object to direct marketing;
- move your data to another provider, where that applies.
Email oliver@usedecibel.com or use the opt-out page. We respond within one month. You can also complain to the Information Commissioner’s Office (ico.org.uk) or your local supervisory authority.
8. Cookies
See the cookie policy. Analytics are off unless you accept them.
9. Changes
If we make a material change to this policy we will update the date above and tell account holders by email.