Security & Compliance

• Client and lead data is encrypted in transit (TLS) and, where supported by our infrastructure providers, at rest.
• Access to client accounts, CRM workspaces, and automation dashboards is restricted to authorized personnel on a need-to-know basis.
• We do not store full payment card numbers — billing is processed through a PCI-compliant third-party payment processor.
• Call recordings, transcripts, and message logs are stored within access-controlled systems and retained only as long as needed for service delivery, quality review, or your agreed retention period.
• We conduct periodic reviews of our internal access permissions and third-party integrations.

Our automation platform is built on established, industry-recognized providers rather than custom, unvetted infrastructure. Core systems we rely on include:

We evaluate vendors for their own security and compliance posture before integrating them into our service stack, and we limit the data shared with each vendor to what's necessary for that function.

Because our Services include AI voice and SMS/chat agents, we build compliance-aware features into the platform, including:

• Automated opt-out handling for SMS (e.g., "STOP" keyword recognition)
• AI agent disclosure — callers/texters can be informed they are interacting with an automated system, where required
• Support for call-recording consent disclosures where required by state law (e.g., two-party consent states)
• Configurable calling/texting windows to help clients stay within TCPA-permitted contact hours

Shared responsibility: our clients remain responsible for ensuring they have proper consent to contact their leads and customers, and for how they use exported data outside our platform. Full details are in our Terms of Service.

• We do not sell client or lead data to third parties.
• Data collected through a client's AI agents and forms is used to deliver that client's services — not shared across unrelated clients.
• We may use de-identified or aggregated data to monitor and improve the overall performance of our AI systems.
• Clients can request an export or deletion of their data in accordance with our Privacy Policy.

In the event of a suspected data security incident affecting client or customer data, we will investigate promptly, take reasonable steps to contain and remediate the issue, and notify affected clients in accordance with applicable law and our service agreements.

• Keep your account credentials confidential and report suspected unauthorized access immediately.
• Ensure you have the legal right to contact the leads and customers you load into your automation workflows.
• Review and configure calling/texting hours, consent disclosures, and opt-out handling appropriately for your states of operation.