How Numi collects, stores, and protects your data. Plain language, no legalese.
Effective date: 29 May 2026 | Controller: Marememo UG (in formation), Germany
Numi is a sales call intelligence platform operated by Marememo UG (in formation), based in Germany. We record, transcribe, and AI-coach sales calls so reps and managers can close the coaching loop after every conversation.
For GDPR purposes, Marememo UG (in formation) is the data controller for personal data processed through numigtm.com and the Numi application. Questions or requests: privacy@numigtm.com.
| Category | Examples | Legal basis (GDPR Art. 6) |
|---|---|---|
| Account data | Name, work email, password hash | Contract performance (Art. 6(1)(b)) |
| Call recordings | Audio files from integrated dialers | Contract performance; legitimate interest |
| Transcripts | Text of recorded calls | Contract performance |
| Coaching data | AI-generated coaching cards, scores, notes | Contract performance |
| Practice sessions | Role-play recordings and feedback | Contract performance |
| Usage data | Feature interactions, session metadata | Legitimate interest (product improvement) |
| Billing records | Invoice amounts, payment provider references | Legal obligation (Art. 6(1)(c)) |
Call recordings are processed exclusively on our own infrastructure in Germany. Audio does not leave our servers for transcription. We use self-hosted Whisper for speech-to-text. No audio is sent to third-party AI providers.
All production data is stored on Hetzner Cloud servers in Frankfurt, Germany (EU). We do not transfer personal data outside the European Economic Area.
Audio files and exports are stored in MinIO object storage on the same infrastructure. The Numi application database runs on PostgreSQL, also hosted in Frankfurt.
We maintain 30-day rolling backups of both the PostgreSQL database and MinIO object storage. If you delete your account, the deletion propagates to all active backups within 30 days. After that window, no backup containing your personal data will exist.
You have the right to receive a copy of all personal data we hold about you in a structured, machine-readable format.
Log in to your Numi account, go to Settings → Data → Export my data, and confirm the request. You can also email privacy@numigtm.com and we will prepare the export manually within 30 days.
Your export is delivered as a ZIP archive containing:
The download link for your export is valid for 24 hours from the time it is generated. If the link expires before you download the file, return to Settings and generate a new one.
You have the right to request deletion of your account and all associated personal data.
Go to Settings → Account → Delete account and confirm. You will receive an email confirmation. You can also contact privacy@numigtm.com.
After initiating deletion, your account enters a 7-day grace period. During this window you can log back in and cancel the deletion. After 7 days, deletion is permanent and irreversible.
When your account is permanently deleted, we remove:
After deletion we keep only:
Active backups are rotated on a 30-day rolling window. Your personal data will no longer exist in any backup within 30 days of your deletion being processed.
Under the GDPR you also have the right to:
To exercise any of these rights, email privacy@numigtm.com. We respond within 30 days.
| Service | Purpose | Data transferred |
|---|---|---|
| Hetzner Cloud (DE) | Infrastructure hosting | All data, stored in Frankfurt (EU) |
| Sentry (EU endpoint) | Error monitoring | Stack traces, request metadata (no audio or transcripts) |
| PostHog (EU) | Product analytics | Anonymised usage events (no audio or transcripts) |
| Google Analytics | Landing page analytics | Anonymised page view data |
We do not sell your data. We do not share your audio recordings, transcripts, or coaching data with any third party except as required by law.
Passwords are stored as salted hashes (bcrypt). All data in transit is encrypted via TLS. Data at rest is encrypted on Hetzner's infrastructure. Access to production systems is restricted to authorised personnel and logged.
If we become aware of a breach affecting your personal data, we will notify you and the relevant supervisory authority within 72 hours where required by Art. 33 GDPR.
We may update this policy when the product or applicable law changes. Material changes will be communicated by email to registered users at least 14 days before they take effect. The effective date at the top of this page will always reflect the latest revision.
For any privacy questions, data requests, or complaints:
Marememo UG (in formation)
Germany
privacy@numigtm.com