Security and privacy, in plain words.
What we keep from a call, for how long, who can see it, and how we protect it. Our privacy notice, terms and data processing agreement say the same, in full.
In short
- Calls are recorded only if you turn recording on and tell your callers.
- Transcripts and summaries are deleted automatically after 90 days.
- Each business sees only its own calls and bookings.
- We don’t sell your data, use it for ads, or train AI models on your calls.
Callers always know they’re talking to an AI.
The first sentence of every call says so, before your greeting. It’s fixed: it can’t be removed or interrupted. The call page says it in writing too.
Nile Smile Dental
You are speaking with an AI assistant. The business receives a transcript of your call.
- The fixed AI sentence
- Then your greeting
What we keep, and only for a while.
The caller’s voice is turned into text as they speak. The audio is kept only if you turn recording on: then it is stored, encrypted, in private storage in the EU.
| What | How long we keep it |
|---|---|
| Call recording | Only if you turn recording on; deleted automatically 90 days after the call |
| Transcript, summary and booking change requests | Deleted automatically 90 days after the call |
| Call details without the words (time, length, outcome) | While you use Echo Calls |
| Bookings (name, phone, service, time) | While you use Echo Calls, or less if you ask us to erase one |
| Encrypted backups | Deleted data can remain in them for up to about six months. Recordings are not in our backups. |
When a business stops using Echo Calls, its data is deleted as our agreement with it sets out.
Each business sees only its own calls.
Here is everyone who can see a call, and why.
- Your team
- In your Echo Calls workspace, including recordings if you record calls.
- Echo Calls staff
- Only when needed to run, support or secure the service, under a duty of confidentiality.
- Public authorities
- Only where the law requires it.
How we protect it.
The measures written in our privacy notice and data processing agreement.
- Encrypted connectionsTLS (the padlock in your browser) for the website, the console, call links and email.
- Encrypted storageThe server’s disk is encrypted. Every backup is encrypted before it leaves the server.
- Few people, strong sign-inOnly Echo Calls administrators can reach the servers, with key sign-in. Their administrator accounts need two-step verification.
- Clean technical logsWhat callers say is not written to technical logs, and contact numbers in them are masked.
- Deletion that checks itselfA nightly task deletes call text 90 days after each call, and an alert fires if it falls behind. Backups are tested with a restore drill every month.
People can see, correct or erase their data.
Egypt’s Personal Data Protection Law (No. 151 of 2020) gives callers and business users these rights.
How to send a request- A caller can ask the business they called, or write to us. We work with the business, because it decides about its callers’ data.
- Deletion is done by our team, on request.
- We, or the business, reply within six working days.
- Anyone not satisfied with the reply can complain to Egypt’s Personal Data Protection Center.
If something goes wrong, you hear from us.
If a breach affects personal data, we tell the business concerned straight away, and within 24 hours at the latest. Egypt’s Personal Data Protection Center is notified within 72 hours, as the law requires.
The full texts.
This page is a plain summary. These are the documents that count.
Hear your business answered.
Tell us about the calls you get. We set up your assistant on your own information, and you try it with us before it goes live.