Privacy Policy
Last Updated: July 2026
Baddies for Business Calls ("Company", "we", "us", "our") respects your privacy and is committed to protecting your personal information.
This Privacy Policy explains how we collect, use, disclose, store, and protect personal information when you visit our website, book services, apply as a co-host, communicate with us, or otherwise interact with our platform.
This Policy applies to all visitors, clients, applicants, co-hosts, contractors, and users of our services, and to professional contacts whose details we obtained from public sources (see section 2.E).
1. Who We Are
“Baddies for Business Calls” is a trading name operated by Gonzalo San Martín Díaz de Terán.
Data Controller
Gonzalo San Martín Díaz de Terán, operating under the trading name “Baddies for Business Calls”, Zürich, Switzerland — postal address in the Legal Notice.
For privacy-related questions you can also write to [email protected].
2. Information We Collect
A. Information You Provide
We may collect:
- Name
- Email address
- Phone number
- Country of residence
- Billing information
- Booking details
- Communications with us
- Application information
- Professional background
- Photos submitted by applicants
- Reference images you upload for a booking (e.g. visual setup)
- Social media profiles voluntarily provided
- Payment-related information
- Payout information for hosts (e.g. PayPal or bank details)
- Identity verification information, where required
B. Information Collected Automatically
When you use our Website, we may collect:
- IP address
- Browser type
- Device information
- Operating system
- Referring URLs
- Website usage information
- Pages visited
- Session information
- Cookie information
C. Information From Third Parties
We may receive information from:
- Stripe (payments)
- Stripe Identity (identity verification, where required)
- Supabase (authentication and database)
- Crisp (live chat and support)
- Google Analytics
- Vercel Analytics
- Marketing platforms
- Social media platforms
D. Push Notifications (Hosts)
If a host opts in to instant push notifications, we store, for each device:
- The browser push subscription (endpoint URL and its encryption keys)
- Your browser/device user agent and the date it was registered
- Delivery telemetry for each notification we send (accepted, shown, clicked, and timestamps)
This is used only to deliver operational alerts (e.g. replacement offers) to your device and to measure delivery. You can turn it off at any time from your profile or in your browser settings, which revokes the subscription. Deleting your account removes all push subscriptions and notification telemetry.
E. Professional Contacts Obtained From Public Sources
We build a list of professional contacts for business-to-business outreach. The people on it have not interacted with us and did not give us their details.
What we collect: name, professional role, company, professional email address and the public URL the details came from.
Where it comes from: publicly accessible professional and social profiles and business websites — currently Instagram, LinkedIn-equivalent professional pages, Reddit, Skool, X, YouTube and company sites.
What we use it for: a single business-to-business commercial contact about our services. We do not use it for advertising profiling and we do not sell it.
Legal basis: our legitimate interest in contacting businesses about a business service, balanced against the limited nature of the data (professional contact details only) and an unconditional right to object.
Who processes it for us: Instantly (outbound email delivery), Resend (email delivery) and Supabase (database). Where these providers operate outside Switzerland or the EEA, transfers rely on the providers' standard contractual safeguards.
How long we keep it: until you object, or until the contact is no longer relevant to our outreach. On objection we erase the personal details and retain only the minimum record needed to make sure we never contact you again.
Your rights: you may ask for access, rectification, erasure, or object to the processing at any time, by writing to [email protected]. An objection stops any further outreach immediately and prevents the same address from re-entering our lists.
3. How We Use Your Information
We use personal information to:
- Provide our services
- Process bookings
- Process payments
- Verify identities
- Manage co-host applications
- Schedule meetings
- Communicate with users
- Provide customer support
- Improve the Website
- Analyze usage
- Prevent fraud
- Enforce our Terms
- Comply with legal obligations
- Protect our business interests
4. Legal Basis for Processing
Where applicable under GDPR, we process information based on:
- Performance of a contract
- Legitimate business interests
- Legal obligations
- User consent
5. Payments
Client payments are processed by our payment provider, Stripe. Host payouts may be made using providers such as PayPal or bank transfer.
We do not store complete payment card information.
Payment providers process payment information according to their own privacy policies.
6. Co-Host Applications
Applicants may submit:
- Contact information
- Photographs
- Professional information
- Availability information
- Other application materials
We use this information solely for recruitment, evaluation, onboarding, and platform operations.
7. Analytics and Marketing
We may use Google Analytics, Vercel Analytics, and Meta Pixel.
These tools help us understand Website performance and improve our marketing efforts.
Where required by law, we obtain consent before activating non-essential tracking technologies.
We also use our own first-party, aggregated analytics to measure how people move through this Website — for example, how many visitors reached the landing page, scrolled, clicked the main call to action or joined the waitlist. These records contain no cookies, no IP address, no name or email, no device fingerprint and no identifier that persists between visits, so they cannot be traced back to you or linked across sessions. We keep only the event name, the page path, the referring website’s domain, campaign labels, a scroll milestone, a broad screen-size category and the time. They are deleted after 90 days.
8. Cookies
We use cookies and similar technologies as described in our Cookie Policy.
Cookies help us:
- Operate the Website
- Authenticate users
- Process payments
- Improve performance
- Analyze usage
- Measure marketing effectiveness
9. Sharing of Information
Service Providers
- Stripe (payments and identity verification)
- Supabase (authentication and database)
- Vercel (hosting)
- Resend (email)
- Crisp (live chat and support)
- PayPal (host payouts)
- SignWell (electronic signature of host agreements)
- Analytics providers
- Marketing providers
Professional Advisors
- Lawyers
- Accountants
- Auditors
Authorities
Where required by law, court order, or regulatory request.
Business Transfers
In connection with a merger, acquisition, restructuring, or sale of assets.
We do not sell personal information.
10. International Transfers
Your information may be processed in countries outside Switzerland. Where required, we implement appropriate safeguards to protect personal information during international transfers.
11. Data Retention
We retain personal information only as long as necessary to:
- Provide services
- Maintain records
- Comply with legal obligations
- Resolve disputes
- Enforce agreements
Retention periods may vary depending on the nature of the information and legal requirements.
Material you write or upload for a call is kept for 90 days after that call, then deleted. This covers your prep notes, talking points, background references and any visual references you upload. Deletion is suspended only while a dispute, chargeback, complaint, fraud investigation, legal hold or a specific retention obligation is open; when that ends, deletion applies again rather than the material becoming permanent.
This period does not apply to accounting records, booking records, contractual acceptances or payment records, which follow their own retention as set out above and are not deleted with your call material.
12. Security
We implement reasonable technical and organizational measures designed to protect personal information.
However, no system can guarantee absolute security.
Users acknowledge that transmission of information over the Internet carries inherent risks.
13. Your Rights
Depending on applicable law, you may have the right to:
- Access your personal information
- Correct inaccurate information
- Request deletion
- Restrict processing
- Object to processing
- Withdraw consent
- Request data portability
Requests may be submitted to:
14. Children
Our services are not intended for individuals under eighteen (18) years of age. We do not knowingly collect personal information from minors.
15. Third-Party Websites
Our Website may contain links to third-party websites.
We are not responsible for the privacy practices of third parties.
16. Changes to This Policy
We may update this Privacy Policy from time to time. Updated versions will be posted on this page with a revised "Last Updated" date. Continued use of our services following publication of changes constitutes acceptance of the updated Policy.
17. Contact
For privacy-related inquiries, please contact:
Baddies for Business Calls — Switzerland