Security
Where your calls actually go
Anyone can write “your data is safe with us”. Here is the boring version instead: which company handles which part of a call, which country it happens in, and what we keep afterwards.
Which part runs where
A call is not one system. It is a phone network, a voice, a model working out what to say, a database, and a text message, and they do not all sit in the same country. So we have split it up.
- United States The phone line and the voice. Twilio, in the United States. Your Jessie number and the audio of the call are handled on Twilio’s US infrastructure. Twilio does not do all of it alone, and you should know the other two names: the voice you hear is made by ElevenLabs, and what your caller says is turned into text by the provider Twilio uses when we do not pick one, which its documentation names as Deepgram. Twilio does run a Sydney region and we would rather be in it, but it does not list the part that runs a conversation as available there. Twilio’s list of what its Sydney region supports.
- United States The words she says back. Anthropic’s Claude works out what Jessie should say. Anthropic is a US company and we have not pinned its processing to one country, so treat the words of a call as leaving New Zealand. What we can point you at is Anthropic’s own written commitment: retained data is never used to train a model without express permission. We have not given it. Anthropic on what it keeps and what it trains on.
- Australia (Sydney) Everything that gets stored. Sydney, three ways. Your leads, the call transcripts, your settings and your sign-in sit in a Postgres database in Sydney (Amazon’s ap-southeast-2). The server that answers your calls and the dashboard you log in to both run in Sydney as well. Storage is the part that sticks around, and what we store, we store here. That is not the same as saying your caller’s words never leave: they pass through Twilio and Anthropic in the United States while the call is happening, and how long those two hold them is set by their policy, not by our database.
- New Zealand The text that tells you about a lead. The message is written on our Sydney server and handed to 2talk, a New Zealand company, who send it from an ordinary New Zealand mobile number. Your customer can save that number like any other contact. No overseas gateway touches it.
- United States The email that tells you about a lead. The same lead, by email, goes out through Resend, an American company. It carries the caller’s name, number and what the job is, because an alert with none of that in it would be no use to you.
- United States Your subscription and your card. Stripe, an American company, runs the payment and holds the card. We never see a card number: the card screen is Stripe’s own, not ours, so the digits never pass through anything we wrote. This is your billing information, not your callers’.
- Nothing of yours is here This website. Cloudflare’s network serves these pages. There is no form here that sends us anything about one of your customers, so nothing of theirs is ever on this side of the product.
The honest summary: what we store, we store in Sydney. What happens live, while the call is going, runs through American companies, because the voice and the model we use are not sold in an Australasian region yet. The text that reaches your phone is written in Sydney and sent from New Zealand, and no American company touches it. If Twilio brings the conversation product to Sydney, we will move it and say so here.
New Zealand law does let information go overseas, on a condition: the party receiving it has to be under comparable safeguards. That is privacy principle 12. Every company that touches a call is named above, with a link to what it publishes wherever there is one worth giving you, so you can weigh that yourself instead of taking our word for it.
What every caller is told, before they say a word
Jessie’s greeting carries this sentence on every call she answers, spoken before the caller has said anything:
“Just so you know, this call may be recorded.”
It is not optional and an owner cannot turn it off. Write your own greeting and we put the sentence back in. That is the Privacy Act 2020 doing its job, and it is also why the transcript in your dashboard is worth having: the customer was told. Ask her outright whether she is a person and she is built to say she is an AI, not one. That second one is worded carefully on purpose: the phone system itself speaks the recording line and an owner cannot edit it out, while the answer about being an AI is an instruction Jessie is given. They are not the same kind of promise, so we will not dress one up as the other.
What we keep, and for how long
What Jessie takes off a call is written down first. The transcript and the lead are what stay; the audio is the one thing with a clock on it.
- The transcript of every call she answers, and the lead details Jessie wrote down. Yours to read in the dashboard.
- The recording of the call, where there is one, for 90 days. After that the audio is deleted and the transcript stays. You can delete a recording yourself from the call page before then.
- Your business settings: the greeting, your hours, what you told Jessie to ask.
- Your Google Calendar token, if you connected one, encrypted. Disconnect it in Settings and it is deleted on the spot.
- How many minutes you used, so the bill adds up. The card itself is Stripe’s, not ours.
We hold it while your account is live, plus a reasonable stretch after you cancel, because a job you did in March can turn into a question in September. Want it gone sooner? Email hello@jessieanswers.nz and ask. We will delete it and tell you when it is done. The full detail is in our Privacy Policy.
That is what we keep. Anthropic keeps something too, and we would rather you heard it here. The words of the call are what its model is answering, so they reach its systems in the United States, and its own policy for business customers says it deletes API inputs and outputs within 30 days of receiving them, or holds them up to 2 years if its automated safety systems flag a conversation as breaking its usage policy. We have no special arrangement that shortens that. Anthropic on how long it keeps that data.
What we do not claim
We have no SOC 2 report, no ISO 27001 certificate, and no penetration test to send you. A business this size that told you otherwise would be telling you a story. What we have instead is a short list of things that are true and that you can check on this page.
If a certification is what your insurer or your franchise needs, say so before you sign up rather than after. We will tell you straight whether we can get there.
Who you are dealing with
JessieAnswers is a trading name of Web Infinity NZ Limited, a registered New Zealand company. Its NZBN is 9429031766906, so you can check it against the register yourself instead of taking our word for it. Your callers’ information is handled under the Privacy Act 2020. Every price on this site is in New Zealand dollars and includes GST. Nothing gets 15% bigger at checkout. The only thing that lands on top of the plan price is the extra minutes you actually use, and the pricing page says what a minute costs.
Something here you want explained, or something you think is wrong? Email hello@jessieanswers.nz. A person reads it.
Try it on your own phone before you trust it with a customer’s
Start the free trial and ring your own Jessie number. Everything on this page applies from the first call, and the transcript of that call is in your dashboard a minute later.