Privacy Policy

Effective Date: November 4, 2026

Last Updated: November 4, 2026

Document Version: 1.1

This Privacy Policy explains how Axespire Solutions Limited ("Axespire," "YuhChat," "we," "us" or "our") collects, uses, stores, protects and otherwise processes personal information when you visit our website, create an account, use YuhChat, communicate with us, or interact with YuhChat-enabled communications.

We are committed to handling personal information responsibly and transparently.

This Privacy Policy should be read together with the YuhChat Terms of Service and, where applicable, the YuhChat Data Processing Agreement (DPA).

1. WHO WE ARE

Axespire Solutions Limited operates YuhChat, an AI-powered communication platform that may provide voice-assistant, telephone, messaging, scheduling, transcription, automation and related services.

For privacy purposes, Axespire may act in different roles depending on how information is processed.

When you use YuhChat directly, Axespire may act as a Data Controller when determining why and how your personal information is collected and used for purposes such as: creating and managing your account; providing customer support; processing payments; communicating with you; maintaining our business relationship; protecting our systems; preventing fraud and abuse; improving our services; and complying with legal obligations.

When a YuhChat customer uses the platform to communicate with callers, clients, patients, customers or other individuals, Axespire may act as a Data Processor processing Personal Data on behalf of that Customer. In those circumstances, the Customer generally determines the purposes and lawful basis for the processing. The relevant responsibilities are governed by our Data Processing Agreement where applicable.

2. INFORMATION WE COLLECT — ACCOUNT INFORMATION

When you create or manage an account, we may collect: name; email address; telephone number; account credentials; organisation or business information; billing information; subscription information; account preferences; and other information you provide during registration.

3. INFORMATION COLLECTED THROUGH YUHCHAT

When you interact with a YuhChat-powered AI Voice Assistant or other communication service, the Customer using YuhChat may configure the system to collect information such as: your name; telephone number; email address; appointment information; messages; requests; preferences; information provided during a conversation; call recordings; voice information; call transcripts; AI-generated summaries; notes; call metadata; and other information necessary to fulfil the purpose of the interaction.

The Customer operating the particular YuhChat assistant is generally responsible for determining why this information is collected and how it is used.

If you are interacting with YuhChat on behalf of another organisation, you should direct privacy questions concerning that organisation's use of your information to that organisation.

4. CALL RECORDINGS AND TRANSCRIPTS

YuhChat may support call recording; speech-to-text transcription; call summaries; conversation analysis; quality monitoring; and other voice-processing functionality.

Whether a call is recorded or transcribed may depend on the Customer's configuration.

Customers are responsible for determining whether recording or transcription is legally permitted and for providing any notices or obtaining any consent required by Applicable Data Protection Law.

Where Axespire processes recordings or transcripts on behalf of a Customer, we process that information according to the Customer's instructions and the applicable DPA.

5. AI AND VOICE PROCESSING

YuhChat uses artificial intelligence and related technologies to understand communications and generate responses, which may involve: speech recognition; natural-language processing; large language models; text-to-speech; automated classification; summarisation; information extraction; workflow automation; and other AI-assisted processing.

AI-generated outputs may contain errors.

Where you communicate with a YuhChat AI assistant, you should not assume that every response is accurate or that the AI is a human representative unless the Customer has explicitly configured a human interaction.

YuhChat may identify itself as an AI assistant where appropriate or where required by law.

6. INFORMATION FROM WEBSITE AND DASHBOARD USERS

When you visit our website or use the YuhChat dashboard, we may automatically collect: IP address; browser type; device information; operating system; approximate location derived from technical information; pages or features accessed; dates and times of access; referring website; session information; diagnostic information; and security and log information.

We use this information to operate, secure and improve our services.

7. COOKIES AND SIMILAR TECHNOLOGIES

We may use cookies, local storage and similar technologies to: keep you signed in; remember preferences; maintain sessions; understand website usage; improve functionality; measure performance; protect against abuse; and support analytics.

Where required, we will obtain appropriate consent before using non-essential cookies or similar technologies.

A separate Cookie Policy may provide additional information about specific technologies used on our website.

8. PAYMENT INFORMATION

If you purchase YuhChat services, payments may be processed through third-party payment providers.

We may receive information such as: payment status; transaction identifier; subscription information; billing address; payment method type; amount paid; and limited payment-related information.

Unless expressly stated otherwise, Axespire does not need to directly store complete payment-card details when payment processing is handled by a third-party payment provider.

The relevant payment provider's privacy policy may also apply.

9. HOW WE USE PERSONAL INFORMATION

Depending on the circumstances, Axespire may use Personal Data to:

Provide Services — create accounts; operate YuhChat; process communications; provide customer support; process transactions; provide requested functionality; maintain integrations.

Maintain and Improve Services — troubleshoot technical issues; monitor performance; improve reliability; develop new features; understand service usage; conduct analytics; test systems.

Security — detect fraud; prevent abuse; protect accounts; investigate security incidents; monitor suspicious activity; enforce our Terms of Service.

Communications — send service notifications; respond to enquiries; provide support; communicate about accounts; provide important updates.

Legal Compliance — comply with applicable law; respond to lawful requests; establish or defend legal claims; enforce contractual rights; maintain required records.

10. LEGAL BASES FOR PROCESSING

Where Applicable Data Protection Law requires a lawful basis for processing, Axespire will seek to rely on an appropriate basis depending on the circumstances, which may include: consent; performance of a contract; compliance with a legal obligation; protection of vital interests where applicable; legitimate interests where permitted; and another lawful basis recognised by Applicable Data Protection Law.

Where Axespire acts as a Data Processor for a Customer, the Customer is generally responsible for determining the lawful basis for the processing it instructs Axespire to perform.

11. CUSTOMER DATA

When a Customer uses YuhChat, Customer Data may include Personal Data belonging to the Customer or its End Users, such as: customer records; patient information; client information; caller information; employee information; appointment information; call recordings; transcripts; messages; contact information; notes; and other information submitted through the Service.

Where Axespire processes such information solely on behalf of the Customer, Axespire does not generally determine the purposes of that processing. The Customer's privacy notice and applicable DPA govern the Customer's processing responsibilities.

12. DATA PROCESSING AGREEMENT

Where Axespire acts as a Data Processor for a Customer, processing is governed by the YuhChat Data Processing Agreement, which addresses: processing instructions; security; subprocessors; data breaches; international transfers; Data Subject rights; retention; deletion; audits; and other processor obligations.

In the event of a conflict concerning the processing of Customer Personal Data, the DPA will generally take precedence over this Privacy Policy.

13. DATA SHARING

We may disclose Personal Data to:

Service Providers supporting cloud hosting; telecommunications; telephone numbers; SIP/VoIP; artificial intelligence; speech recognition; text-to-speech; databases; messaging; analytics; security; monitoring; authentication; payment processing; and technical infrastructure. Where a provider processes Personal Data on our behalf, we seek to impose appropriate contractual and security requirements.

Legal and Regulatory Authorities where required or permitted by law, including in response to lawful government requests; court orders; regulatory requirements; law-enforcement requests; or legal proceedings.

Business Transactions — if Axespire undergoes a merger, acquisition, restructuring, financing, sale of assets or similar transaction, Personal Data may be transferred as part of that transaction, subject to applicable legal requirements.

14. SUBPROCESSORS

YuhChat relies on third-party infrastructure and technology providers supporting: voice communications; telephone numbers; AI; speech processing; hosting; storage; messaging; analytics; security; monitoring; and other technical functions.

Axespire maintains a separate Subprocessor List identifying material providers involved in processing Personal Data.

15. INTERNATIONAL DATA TRANSFERS

Some YuhChat providers may operate outside Jamaica. As a result, Personal Data may be processed or stored in jurisdictions outside Jamaica.

Where international transfers are subject to Applicable Data Protection Law, Axespire will seek to implement appropriate safeguards or rely on another lawful transfer mechanism.

The availability and location of particular YuhChat services may affect where information is processed.

16. DATA RETENTION

We retain Personal Data only for as long as reasonably necessary for the purposes for which it was collected, unless a longer period is required or permitted by law.

Retention periods may depend on: the type of information; the purpose of processing; the Customer's configuration; contractual requirements; legal requirements; security requirements; dispute resolution; fraud prevention; and backup and disaster-recovery systems.

Customer-controlled information processed by YuhChat is generally retained according to the Customer's instructions and applicable contractual arrangements.

17. DELETION

Where appropriate, Personal Data may be deleted; anonymised; de-identified; or securely destroyed.

Following termination of a Customer account, Customer Data will be handled according to the Terms of Service and applicable DPA.

Certain information may remain temporarily in backups or be retained where required for legal, security or legitimate business purposes.

18. DATA SECURITY

We take reasonable technical and organisational measures designed to protect Personal Data, including: access controls; authentication; role-based permissions; least-privilege principles; encryption in transit where supported; appropriate protections for stored data; monitoring; logging; vulnerability management; backups; disaster recovery; incident-response procedures; secure credential management; and confidentiality obligations.

However, no internet-connected service can guarantee absolute security.

19. PERSONAL DATA BREACHES

If Axespire becomes aware of a security incident involving Personal Data, we will take reasonable steps to investigate, contain and mitigate the incident.

Where Axespire is acting as a processor for a Customer, we will notify the Customer in accordance with the applicable DPA and Applicable Data Protection Law.

Where Axespire acts as a Data Controller, we will assess whether notification to a regulator or affected individuals is required.

20. YOUR DATA PROTECTION RIGHTS

Depending on Applicable Data Protection Law and the circumstances of processing, you may have rights to: request access to Personal Data; request correction of inaccurate information; request deletion where applicable; object to certain processing; request restriction of processing where applicable; withdraw consent where processing is based on consent; request information about processing; exercise rights relating to automated decision-making where applicable; and make a complaint to a competent data-protection authority.

The availability of a particular right depends on the applicable law and circumstances.

21. HOW TO EXERCISE YOUR RIGHTS

To make a privacy request concerning information controlled directly by Axespire, contact: Admin@axespire.com

Please provide enough information for us to identify who you are, what information or processing your request concerns, and what action you are requesting.

We may request reasonable information to verify your identity before responding.

If your Personal Data was collected by a YuhChat Customer and Axespire is processing it solely on that Customer's behalf, we may direct your request to the relevant Customer.

22. CHILDREN'S PRIVACY

YuhChat is not intended to knowingly collect Personal Data from children in circumstances where such collection is prohibited by Applicable Law.

Customers are responsible for determining whether their use of YuhChat involves children and for implementing appropriate safeguards where required.

If you believe a child has provided Personal Data to Axespire in circumstances where it should not have been collected, contact us at Admin@axespire.com

23. AI-GENERATED INFORMATION

YuhChat may generate responses; summaries; transcriptions; classifications; recommendations; extracted information; and other automated outputs. These outputs may be inaccurate.

Axespire does not guarantee that AI-generated information is complete, accurate or suitable for a particular purpose.

Customers should implement appropriate human review where an AI output could materially affect an individual.

24. NO SALE OF PERSONAL DATA

Axespire does not sell Personal Data in the ordinary meaning of selling Personal Data to third parties for their independent commercial use.

We may disclose information to service providers and subprocessors where necessary to provide YuhChat and related services.

We may also use aggregated or appropriately de-identified information for analytics, research, security, service development and business purposes where permitted by law.

25. AI MODEL TRAINING

Unless expressly agreed otherwise in writing, Axespire does not intentionally use identifiable Customer Data from customer communications to train a general-purpose AI model.

This does not prevent processing necessary to operate YuhChat; generate responses; provide transcription; maintain security; detect abuse; troubleshoot; monitor service performance; comply with law; provide support; or use appropriately aggregated or de-identified information.

Third-party AI providers may have their own processing terms and technical architectures, and applicable Subprocessor arrangements govern their role in processing Customer Data.

26. THIRD-PARTY SERVICES

YuhChat may connect with third-party services selected by Axespire or enabled by Customers, including telecommunications services; messaging services; calendars; CRMs; payment providers; AI services; hosting providers; analytics services; and other software platforms.

Third-party services may have separate privacy policies and terms.

Axespire is not responsible for the privacy practices of third parties acting independently as Data Controllers.

27. CUSTOMER-CONTROLLED INTEGRATIONS

If you connect YuhChat to another service, information may be transferred between YuhChat and that service according to your configuration.

You are responsible for ensuring that such integrations are appropriate and lawfully configured.

28. GOOGLE SERVICES AND INTEGRATIONS

This section describes the Google products YuhChat uses and how we handle the information involved. YuhChat currently uses two Google products: Google Calendar, which a Customer can choose to connect, and Google Analytics, which we use to understand how our public website pages are used. YuhChat does not offer "Sign in with Google" and does not access Gmail, Google Drive or any other Google service.

YuhChat's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.

28.1 Google Calendar

What it is. A Customer can choose to connect a Google Calendar to YuhChat so that the YuhChat assistant can check when the Customer is available and book appointments into that calendar. Google Calendar is being rolled out: until it is shown as available in your YuhChat dashboard, YuhChat does not read or write any calendar data.

Access only with your authorisation. YuhChat can access a Google Calendar only after an authorised user of the Customer's YuhChat account signs in with Google and approves the request on Google's own consent screen. Connecting is optional.

What we access and why. YuhChat requests only the minimum Google Calendar permissions needed for this feature: calendar.freebusy (to view free/busy information) and calendar.events.owned (to manage events in calendars you own). YuhChat does not accept a connection that grants more than these two permissions, and never requests access to Gmail, Google Drive or any other Google service. We use this access only to: (a) read free/busy information, meaning which times in the authorised calendar are busy or free, so that the assistant offers only open times and prevents double-booking; and (b) create appointment events in the calendar you authorise when an appointment is booked through YuhChat.

How we use Google user data. We use Google user data only to provide and improve the calendar feature you asked for, in line with the Limited Use requirements. We do not sell or rent Google user data, and we do not use it for advertising. Google user data is not used to train general artificial-intelligence or machine-learning models. People at Axespire do not read Google user data except with your consent, where it is needed for security purposes (such as investigating abuse or a security incident), or where the law requires it.

What we store. To keep the connection working, we store only the OAuth access credentials (tokens) that Google issues to YuhChat when you connect, together with when they expire and which permissions were granted. These credentials are encrypted before they are written to our database. We store them so that YuhChat can keep checking availability and booking appointments without asking you to sign in to Google each time. We do not keep a copy of your calendar's events or of your free/busy results.

Sharing. We do not share or transfer Google user data to any third party, including artificial-intelligence, voice or other service providers. It is used only by YuhChat's own systems to talk to Google on your behalf. The only exceptions are where the law requires a disclosure or, with your prior consent, as part of a merger, acquisition or sale of assets.

Retention. We keep the stored Google credentials only while Google Calendar is connected to your YuhChat account. When you disconnect Google Calendar in YuhChat, we ask Google to revoke YuhChat's access and delete the stored credentials from our active database straight away. We do the same when a YuhChat customer account is deleted. Copies of the encrypted credentials may remain in our encrypted backups until those backups expire under our backup schedule, which is up to approximately six months.

How to disconnect. In YuhChat, go to Dashboard → Automation → Integrations and select Disconnect next to Google Calendar; this also revokes YuhChat's access at Google. You can also remove YuhChat's access at any time from your Google Account at https://myaccount.google.com/permissions.

How to request deletion. Email Admin@axespire.com from the email address on your YuhChat account and ask us to delete your Google data. We will verify the request, ask Google to revoke YuhChat's access, delete the stored credentials from our active database, and confirm to you by email when this is done. Backup copies expire as described above.

28.2 Google Analytics

Where it runs. Google Analytics runs only on our public marketing pages (such as the home, pricing, features, industry, blog, contact and legal pages). It does not run on the YuhChat dashboard, the admin console, onboarding, or the sign-in and registration pages.

What it is and why. On those pages we use Google Tag Manager to load Google Analytics, which helps us understand how the pages are used (for example, which pages are visited, how visitors arrive, and general device, browser and approximate location information) so that we can improve them.

Other analytics on marketing pages. Google Tag Manager also loads a session analytics tool from another service provider on the same marketing pages. It records how visitors interact with those pages - for example clicks, scrolling and mouse movement - as session replays and heatmaps, so that we can find pages that are confusing or broken. It uses its own cookies. Like Google Analytics, it does not run on the dashboard, admin, onboarding, sign-in or registration pages.

Cookies and IP addresses. Google Analytics uses first-party cookies (such as _ga) to tell visits apart. According to Google, Google Analytics 4 does not log or store IP addresses. We do not send your name, email address, telephone number, call recordings, transcripts or Google Calendar data to Google Analytics or to the session analytics tool.

Retention and sharing. These providers process this information as our analytics providers under their own terms, and keep it for the periods set in our accounts with them. We do not sell this information.

Your choice. These analytics tools load only after you select Accept on the cookie banner shown on our public pages; if you select Reject, or make no choice, they do not load. You can change your choice at any time with the Cookie settings link at the bottom of our public pages. Your choice is saved in your browser on that device. You can also block or delete cookies in your browser settings, or install the Google Analytics Opt-out Browser Add-on (https://tools.google.com/dlpage/gaoptout). Rejecting these cookies does not affect your use of YuhChat.

How to request deletion. Analytics data from our marketing pages is not linked to your YuhChat account. If you have a question about it, email Admin@axespire.com and we will help with any request we can act on.

29. BUSINESS AND PROFESSIONAL CUSTOMERS

Businesses, professionals and organisations using YuhChat may process information concerning customers; patients; clients; employees; suppliers; members of the public; and other individuals.

Such Customers are responsible for ensuring that their use of YuhChat complies with applicable industry requirements, particularly for healthcare; legal services; financial services; insurance; education; and other regulated sectors.

30. HEALTH INFORMATION

YuhChat may be used by healthcare organisations and may therefore process information relating to health where instructed by a Customer.

Where Axespire processes health information on behalf of a healthcare Customer, the Customer remains responsible for determining the lawful basis, required notices, retention requirements, professional obligations and other regulatory requirements applicable to its use.

YuhChat is not itself a healthcare provider.

31. LEGAL AND PROFESSIONAL INFORMATION

YuhChat may process communications involving legal practices and other professional organisations.

Customers remain responsible for determining whether information is confidential, privileged or subject to professional secrecy obligations and for configuring YuhChat accordingly.

32. MARKETING COMMUNICATIONS

Where permitted by law, we may send marketing communications about Axespire or YuhChat.

You may opt out of marketing communications by following the unsubscribe instructions provided in the communication or contacting Admin@axespire.com

Service-related and legally required communications may continue even if you opt out of marketing.

33. ACCOUNT SECURITY

You are responsible for protecting your account credentials and notifying Axespire if you believe your account has been compromised.

We may suspend or restrict access where reasonably necessary to protect the account, Services or other users.

34. DATA ACCURACY

We seek to maintain accurate information where we control the relevant data.

However, information provided by users or generated automatically — including AI-generated transcripts and summaries — may contain errors.

You should notify us if information that we control is inaccurate and should be corrected.

35. PRIVACY OF CUSTOMER CALLERS

If you communicate with a YuhChat-enabled number, your information may be processed by the organisation operating that YuhChat assistant.

That organisation may have its own privacy policy.

Where the organisation controls the processing, requests concerning that processing should generally be directed to that organisation.

36. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes to our Services; new technologies; legal or regulatory requirements; changes to our processing activities; security improvements; or changes to business operations.

When we make material changes, we may provide additional notice where required.

The "Last Updated" date at the top of this Policy indicates when it was most recently revised.

37. GOVERNING LAW

This Privacy Policy shall be interpreted in accordance with the laws of Jamaica to the extent applicable.

Nothing in this Privacy Policy limits any mandatory rights or protections provided by Applicable Data Protection Law.

38. CONTACT US

Axespire Solutions Limited Privacy / Data Protection Contact: Admin@axespire.com Legal Contact: Admin@axespire.com Country: Jamaica

39. COMPLAINTS

If you believe that your Personal Data has been handled improperly, we encourage you to contact us first so that we can investigate and attempt to resolve the issue.

You may also have the right to lodge a complaint with the competent data-protection authority under Applicable Data Protection Law.

40. LEGAL NOTICE

This Privacy Policy is intended to describe Axespire's privacy practices and responsibilities in connection with YuhChat. It is not intended to remove or reduce rights that cannot lawfully be excluded.

Where a separate written agreement, including a Data Processing Agreement, applies to the processing of Customer Personal Data, that agreement may contain additional or more specific requirements.

© 2026 Axespire Solutions Limited. All rights reserved.

Document Version: 1.1 | Effective Date: November 4, 2026