What information does the service process?
The service processes call metadata, recorded audio, the generated transcript, account and routing information, and configured delivery destinations. Caller number availability depends on the originating network and permissions.
How long is audio and transcript data retained?
Audio and transcripts are retained for 30 days. Connected systems may create their own records, which are governed by the customer's configuration and policies.
Do callers need to be told?
Recording and transcription laws vary by jurisdiction and context. The service should be configured with appropriate notice and consent. Businesses remain responsible for their use of recordings and for the information they ask callers to provide.
What should not be captured casually?
Avoid asking callers to state payment-card details, passwords, identity documents, unnecessary health information or other sensitive data. The service is for ordinary business conversations, not emergency or high-risk intake.
How are remote endpoints trusted?
Webhook consumers should verify signed events. API and MCP access should be scoped to the authorised account and operations. Credentials, one-time codes and payment data should never be placed into prompts, tool outputs or webhook URLs.
This prototype describes the intended product approach. The complete legal privacy policy, subprocessors and security controls will be published before launch.