AfterCaller

LEGAL

Privacy policy

Last updated: 1 June 2026

Data we collect

We process call audio, transcripts, caller phone numbers, and the metadata your clinic provides during onboarding. We do not sell or share data with third parties beyond the strict subprocessors listed below.

Subprocessors

  • Vapi (AI voice infrastructure) — EU region
  • Twilio (telephony) — EU region
  • Supabase (database & auth) — EU region
  • Stripe (billing) — EU region
  • OpenAI (call QA scoring) — enterprise tier, no training
  • Resend (transactional email) — EU region

Retention

Recordings auto-delete after 90 days. Transcripts retained 12 months. You can request earlier deletion via hello@aftercaller.com.

Your rights

UK GDPR: access, rectification, erasure, portability, objection. Email hello@aftercaller.com to exercise.