Someone else's customers are on your line
Every call your agent answers creates a record about a real person who never signed up to us. This page is what happens to it.
The short version
The four things a buyer's procurement form asks, answered without a sales call.
Encrypted throughout
In transit and at rest. Call audio and transcripts are never held in the clear.
ICO registered
Registered with the Information Commissioner's Office as a UK data controller.
90-day retention
Recordings and transcripts are deleted after 90 days by default, and sooner on request.
DPA on request
A Data Processing Agreement is available before you take a single call, not after you sign.
What we keep, and for how long
Taken from the privacy policy rather than written for this page, so the two cannot drift apart.
| Data | Kept for | Deletable on request | Leaves your dashboard |
|---|---|---|---|
| Call recordings | 90 days | ||
| Transcripts and summaries | 90 days | ||
| Caller name and number | 90 days | ||
| Bookings written to your calendar | Yours to control | Your calendar, your rules | |
| Your account and billing records | 12 months after closure | Where law allows | |
| Dashboard usage analytics | 12 months |
Who else touches a call
A call cannot happen without these. Naming them is more useful than a badge saying we take security seriously.
| Processor | What it does | Region |
|---|---|---|
| Twilio | Carries the call to and from your number | UK / EU |
| ElevenLabs | Turns your agent's words into speech | EU / US |
| Google or Microsoft | The calendar you chose, via OAuth you grant | Your tenancy |
| Stripe | Takes your subscription payment. Never your callers' | UK / EU |
| Our own infrastructure | The agent, your dashboard and your records | EU |
The signed DPA is the canonical list and takes precedence over this table. If you need a named sub-processor removed from the chain, that is an Enterprise conversation rather than a no.
What we will never do
Commitments are only worth reading when they are things we are giving up.
Certifications, honestly
Where we are, plainly, including the parts that are not finished.
We are a young company and have not bought certifications we have not earned. If ISO 27001 is a hard requirement for you, say so and we will tell you where we honestly are on it.
A caller wants their data deleted
Forward it to us and we will action it within the statutory month, usually the same week. You do not need to work out whether you are the controller first.