Security and data

Your database, your accounts, your transcripts and your appointments are hosted in the European Union, in the Frankfurt region. That choice was made when the service was created and cannot be changed afterwards.

We stay honest about two limits. Some one-off processing, such as language model inference, may go through infrastructure located outside the Union. And the real-time voice transport during the call may go through infrastructure outside the European Union covered by standard contractual clauses; audio recordings, for their part, are kept in our own storage in the European Union region for their retention period. The processors involved and the related safeguards are detailed in our compliance pages and our privacy policy.

Two retention periods coexist, because the data is not equally sensitive. They apply automatically, with no action from you.

A call producing no useful content, silent or hung up at once, generates neither summary nor recording: its audio is deleted as soon as it ends. Its trace stays in your Conversations, classified as no interaction, and follows the one-year anonymisation rule.

• Audio recordings: deleted automatically after 30 days, for all accounts. This duration is fixed; no setting is needed.
• Conversations, summaries and transcripts: anonymised after one year. Contact details disappear, statistics remain.

Some information has no place in a transcript, even when a caller says it out loud. Card numbers, bank account numbers and social security numbers are masked before the transcript of a call is stored.

Your assistant is also required to refuse such data when someone tries to dictate it. That is one of the rules no instruction of yours can bypass.

In our technical logs, phone numbers are masked as well.

European regulation on artificial intelligence requires that a person knows they are talking to a machine. Your assistant says so in its very first sentence. It is not an option, and no instruction can remove it.

When the call is recorded, the caller is informed the same way. If they object, the assistant acts on it during the call: the audio is deleted at their request, the transcript remains as proof of the service provided. The conversation then carries an explicit note in your dashboard.

European regulation opens several rights, which can be exercised with us or directly from your dashboard.

Two buttons live in the Your data card of your profile. Export my data produces a full copy. Delete my account permanently erases your account and everything attached to it, including your subscription.

In a shared workspace, both actions apply to your identity, never to someone else’s workspace.

• Access and portability (articles 15 and 20): obtain a copy of your data.
• Rectification and erasure (articles 16 and 17): correct or delete.
• Restriction and objection (articles 18 and 21): limit or refuse processing, including the recording of a call.
• Automated decisions (article 22): not to be subject to a purely automatic decision with legal effect.

If you work as a team, permissions are not merely displayed: they are enforced in the interface, in the server routes and in the database itself.

Four levels exist, from account holder to viewer, and only the holder has access to billing. A removed member loses access immediately.

Several measures run in the background, with no setting on your side.

• Password-free sign-in: Google, or a six-digit code received by e-mail. No password is stored, and anti-bot protection filters automated attempts.
• Filtered inbound calls: your numbers only accept calls from France, Belgium, Switzerland, Luxembourg and Monaco, a first line of defence against phone fraud.
• Checked customer text: an instruction or an information entry containing hostile content is refused before it reaches your assistant.

Our compliance pages detail European hosting, the AI regulation, the GDPR and the use of your data. They are public and reachable from the contents of this documentation.

A specific question about a processing activity or a processor? Write to us, we answer within the one-month period set by the regulation.

• CNIL, listening to and recording calls
• CNIL, data retention periods
• GDPR, regulation (EU) 2016/679
• EU AI Act, article 50 (transparency)
• EU AI Act, article 113 (entry into application)