Privacy

General notes

These notes give a simple overview of what happens to your personal data when you use this website. Personal data is any data that can identify you.

Data collection on this website

Who is responsible for data collection on this website?

The website operator processes the data. Contact details are in “Controller” below and in the legal notice.

How do we collect your data?

We collect data you give us — for example when you register (email, password, organization name) or set up a voice agent and SIP trunk. Other data is collected automatically when you visit, such as browser, operating system, or time of the request.

What do we use your data for?

We use data to provide the site and the service: account, organization, agent configuration, and inbound calls in real time. There is no billing. If Umami is configured, page views may be collected.

What rights do you have?

You may request information about origin, recipients, and purpose of your stored personal data, and ask for correction or deletion. Owners can download a JSON export in Settings. You may withdraw consent for the future. You may also request restriction of processing in certain cases and lodge a complaint with a supervisory authority. Use the contact details in the legal notice.

External hosting

This website is hosted externally. Personal data collected here is stored on the hoster’s servers. That can include IP addresses, account data, agent and trunk metadata, page views, and other data generated through the site.

Hosting is for performing contracts with prospective and existing customers (GDPR Art. 6(1)(b)) and for providing the service securely and efficiently (Art. 6(1)(f)).

Our hoster processes your data only as needed to provide its service and follows our instructions.

We use the following hoster:

The application (Nuxt/Nitro) runs with Coolify on Hetzner. Coolify is our operations software, not a separate US SaaS processor. The PostgreSQL database (accounts, organizations, agent name/prompt, SIP trunk records, call log including conversation turns when present) and self-hosted LiveKit run on the same Hetzner setup in Germany / the EU. We do not use LiveKit Cloud or Vercel.

Privacy

We treat personal data as confidential and in line with data-protection law and this notice. Transmission on the internet can have security gaps; complete protection against third-party access is not possible.

Controller

The controller for data processing on this website is:

The controller is the natural or legal person who decides on the purposes and means of processing personal data.

Retention

We keep the call log including conversation turns for 30 days, then delete it automatically. Unless a more specific period is stated, we keep personal data until the purpose ends. After a valid deletion request or withdrawal of consent we delete the data unless another lawful reason to keep it applies.

Legal bases

Where you have consented, we process data under GDPR Art. 6(1)(a). Consent can be withdrawn at any time. Where data is needed to perform a contract, we rely on Art. 6(1)(b). Processing may also be based on our legitimate interest under Art. 6(1)(f).

Recipients

We share personal data only where needed to perform a contract or another legal basis allows it. Hosting is Hetzner. Transactional mail (sign-up confirmation, password reset) goes through Postmark. Speech on the call is processed by Grok Voice (xAI). If Google Calendar is connected, an availability query for that account's own calendar goes to Google. Appointment titles, attendees, and busy blocks are not sent. If Sentry is configured, technical error reports may go there. Your own SIP / telecom provider remains your contractor — not a processor we appointed. We run LiveKit ourselves on Hetzner, not LiveKit Cloud.

Withdrawal of consent

You may withdraw consent at any time. Processing that already happened remains lawful.

Right to object (GDPR Art. 21)

If processing is based on GDPR Art. 6(1)(e) or (f), you may object on grounds relating to your particular situation. If data is processed for direct marketing, you may object at any time. This platform does not do direct marketing.

Right to lodge a complaint

If you believe GDPR has been breached, you may complain to a supervisory authority, in particular in the member state of your habitual residence, workplace, or the place of the alleged breach.

Data portability

You may receive data that we process automatically on the basis of consent or a contract in a common, machine-readable format.

Access, correction, and deletion

You may request information about your stored personal data, its origin and recipients, and the purpose of processing, and ask for correction or deletion. Owners download the machine-readable export in Settings. You can also use the phone and email in the legal notice.

Restriction of processing

You may request restriction of processing, for example if you contest accuracy, processing was unlawful, we no longer need the data but you need it for legal claims, or you have objected and the balancing of interests is still pending.

TLS encryption

This site uses TLS encryption. You can see an encrypted connection from https:// in the address bar and the lock icon in the browser.

Account and sign-in

On registration we store email, a password hash, and the organization name. Sign-in uses a session cookie; without it, login does not work. GitHub OAuth is only for allowlisted platform admins, not the customer login.

Email delivery

Confirmation and password-reset mail is sent in production through Postmark. Postmark is a third-party processor. The technical from-address is not a public contact address — privacy requests go to the email and phone in the legal notice.

Voice agent and telephony

You save agent name, prompt, and SIP trunk data. The trunk password is encrypted at rest and is not shown again in the UI. Inbound calls use your own SIP trunk (BYO). Media and routing run on our self-hosted LiveKit (open source) on Hetzner. The inbound worker speaks on the call in real time. We do not store call recordings (audio). We store a call log (time, numbers when present, room name, outcome) and, when present, conversation turns from the session report (agent text; caller text only if speech-to-text wrote it). That log is deleted after 30 days.

Connectors

If you connect Google Calendar, we store access and refresh tokens encrypted in our database. The connected calendar only allows a query of your own availability. During a call we name free times from that, inside the stored opening hours. We do not store appointment titles, attendees, or busy blocks. Disconnect revokes the token at Google when possible and deletes our row. Gmail and Calendly are listed but not available yet.

Voice model

Speech on the call is processed by Grok Voice (xAI). Audio and dialogue may leave the EU worker and go to that provider. There is no model picker in the UI.

Data export

Owners can download a JSON export of organization data in Settings (account, organization, members, agents, trunks without passwords, connectors without tokens, call logs). You can also reach us via the contact details in the legal notice.

Contact by email or phone

If you contact us by email or phone, we store the request and related personal data to handle it. We do not share this without your consent.

Billing

There is no payment feature and no paid plan. We do not process payment data.

Further notes

There is no automated decision-making that legally affects you. We do not sell your data.

Analytics (Umami)

There is no cookie banner and no CMP product. We do not set marketing cookies. If Umami is configured, page views may be collected. Localhost visits are ignored.

Error reports (Sentry)

If Sentry is configured, technical error reports may be sent there. Without a DSN, Sentry is off.