How Numi collects, stores, and protects your data. Plain language, no legalese.
Effective date: 1 June 2026 | Controller: Ron Junior van Cann (Einzelunternehmer trading as Numi), Germany
Numi is a sales call intelligence platform operated by Ron Junior van Cann, a sole proprietor (Einzelunternehmer) under German law, trading as "Numi" and based in Germany. We record, transcribe, and AI-coach sales calls so reps and managers can close the coaching loop after every conversation.
For GDPR purposes, Ron Junior van Cann (Einzelunternehmer trading as "Numi") is the data controller for personal data processed through numigtm.com and the Numi application. Questions or requests: privacy@numigtm.com.
| Category | Examples | Legal basis (GDPR Art. 6) |
|---|---|---|
| Account data | Name, work email, password hash | Contract performance (Art. 6(1)(b)) |
| Call recordings | Audio files from integrated dialers | Contract performance; legitimate interest |
| Transcripts | Text of recorded calls | Contract performance |
| Coaching data | AI-generated coaching cards, scores, notes | Contract performance |
| Practice sessions | Role-play recordings and feedback | Contract performance |
| Usage data | Feature interactions, session metadata | Legitimate interest (product improvement) |
| Billing records | Invoice amounts, payment provider references | Legal obligation (Art. 6(1)(c)) |
Call recordings are processed exclusively on our own infrastructure in Germany. Audio does not leave our servers for transcription. We use self-hosted Whisper for speech-to-text. No audio is sent to third-party AI providers.
All production data is stored on Hetzner Cloud servers in Frankfurt, Germany (EU). We do not transfer personal data outside the European Economic Area.
Audio files and exports are stored in MinIO object storage on the same infrastructure. The Numi application database runs on PostgreSQL, also hosted in Frankfurt.
We maintain 30-day rolling backups of both the PostgreSQL database and MinIO object storage. If you delete your account, the deletion propagates to all active backups within 30 days. After that window, no backup containing your personal data will exist.
You have the right to receive a copy of all personal data we hold about you in a structured, machine-readable format.
Log in to your Numi account, go to Settings → Data → Export my data, and confirm the request. You can also email privacy@numigtm.com and we will prepare the export manually within 30 days.
Your export is delivered as a ZIP archive containing:
The download link for your export is valid for 24 hours from the time it is generated. If the link expires before you download the file, return to Settings and generate a new one.
You have the right to request deletion of your account and all associated personal data.
Go to Settings → Account → Delete account and confirm. You will receive an email confirmation. You can also contact privacy@numigtm.com.
After initiating deletion, your account enters a 7-day grace period. During this window you can log back in and cancel the deletion. After 7 days, deletion is permanent and irreversible.
When your account is permanently deleted, we remove:
After deletion we keep only:
Active backups are rotated on a 30-day rolling window. Your personal data will no longer exist in any backup within 30 days of your deletion being processed.
Under the GDPR you also have the right to:
To exercise any of these rights, email privacy@numigtm.com. We respond within 30 days.
We engage a small set of vetted sub-processors to deliver the Service. Each one is bound by a data processing agreement and processes only the data needed for its purpose. The complete, up-to-date list (with legal entity, country, data categories, and transfer safeguards) is published at numigtm.com/legal/subprocessors.
We do not sell your data. We do not share your audio recordings, transcripts, or coaching data with any third party except as required by law or as instructed by you through a connected integration.
If you are a business customer in the EU, you can sign our pre-signed Data Processing Agreement (Auftragsverarbeitungsvertrag) at numigtm.com/legal/dpa. It is also available from Settings → Legal inside your Numi account. For questions, email privacy@numigtm.com.
Passwords are stored as salted hashes (bcrypt). All data in transit is encrypted via TLS. Data at rest is encrypted on Hetzner's infrastructure. Access to production systems is restricted to authorised personnel and logged.
If we become aware of a breach affecting your personal data, we will notify you and the relevant supervisory authority within 72 hours where required by Art. 33 GDPR.
We may update this policy when the product or applicable law changes. Material changes will be communicated by email to registered users at least 14 days before they take effect. The effective date at the top of this page will always reflect the latest revision.
For any privacy questions, data requests, or complaints:
Ron Junior van Cann
Einzelunternehmer, trading as "Numi"
Germany
privacy@numigtm.com