LEGAL

Privacy policy

Last updated: 20 May 2026

Data we collect

We process call audio, transcripts, caller phone numbers, and the metadata your clinic provides during onboarding. We do not sell or share data with third parties beyond the strict subprocessors listed below.

Subprocessors

• Vapi (AI voice infrastructure) — EU region
• Twilio (telephony) — EU region
• Supabase (database & auth) — EU region
• Stripe (billing) — EU region
• OpenAI (call QA scoring) — enterprise tier, no training
• Resend (transactional email) — EU region

Retention

Recordings auto-delete after 90 days. Transcripts retained 12 months. You can request earlier deletion via [email protected].

Your rights

UK GDPR: access, rectification, erasure, portability, objection. Email [email protected] to exercise.