Security and data handling

Clients trust us with their customers' calls, forms and bookings. This page explains where that data lives, who can see it and how long we keep it.

Where data is kept

• Website and records: hosted on Amazon Web Services in the United States.
• Calls and texts: Twilio.
• Email: SendGrid.
• Payments: Stripe. We never see or store full card numbers.
• Transcription and analysis: AI providers that work on our instructions. See how we use AI.

Who can see it

• A call recording can be heard by the business that was called, by the people at Proven & Found who review leads, and by the providers that transcribe it.
• One client's leads are never shared with, or sold to, another business.

How it is protected

• Every page and form on this site is served over HTTPS, so data is encrypted in transit.
• Each service provider works only on our instructions.
• No system is perfectly secure, so we do not promise that one is.

How long we keep it

• Call recordings and transcripts: up to 24 months, or sooner if the client asks.
• Forms, applications and messages: up to 24 months after our last contact.
• Lead and billing records: 7 years, for tax and accounting.

Our commitments to clients

• We use a client's customer data only to deliver that client's services and bill for them.
• We never sell it, and never use one client's data for another client.
• We help clients answer their customers' privacy requests, such as a request to delete a recording.
• When a client leaves, we delete or return their customer data on request, except records the law requires us to keep.
• If we learn of a breach that affects a client's data, we tell that client promptly and as the law requires.

Report a security problem

If you find a security issue on this site, contact the message form on our contact page and tell us what you found. Please give us a chance to fix it before telling others.