Security and your data

Who can hear your calls

You, and anyone you've given a sign-in to. Each recording, transcript and summary is only reachable when you're signed in to your own business. We look at a call only to fix a problem, to check Toby is answering well, or when you ask us to.

Callers know

Toby says he's an AI assistant at the start of every call, and tells callers the call is recorded. He never pretends to be a person.

Keeping it locked

• Every page, sign-in and recording travels over an encrypted connection (HTTPS).
• Passwords are stored scrambled (PBKDF2 with 200,000 rounds), never in a form anyone can read, us included.
• Your sign-in cookie can't be read by scripts on the page, and only works on our site.
• Card payments are handled by Stripe. We never see or store your card number.

What we do with it

We use your calls to run your Toby: answer, take the details, send them to you. We don't sell your data or your callers' data, and we don't use call recordings to advertise to anyone.

Who helps us run it

A telephone network (Telnyx), speech-to-text and voice providers, an AI language model provider, cloud hosting, an email service and Stripe. Some are based outside the UK, so data may be processed in the EU or the US under the UK's approved safeguards. The full list is in our privacy notice.

Deleting things

Delete any call, with its recording, from your dashboard whenever you like. If a caller asks us to delete theirs, we do. When you close your account, we delete its call data within 90 days. Billing records are kept for six years, because the tax rules say so.

Our own website

We count visits to this site ourselves, without cookies and without any outside analytics company. A visit is recognised for a single day by a scrambled code made from your IP address and browser; the IP address itself is never stored.

Spotted a problem?

If you think you've found a security issue, email hello@closedcalls.com. We'll reply quickly and fix it.