Security and data handling

What we store

For each callback request: name, phone, optional email and message, the exact consent text shown and when it was accepted, and a keyed hash of the visitor's IP address used only to block abuse. We never store the raw IP address.

Calls from your phone system

To find callers who didn't get through, we keep for each call only its date and time, direction, outcome, duration and the caller's number. No names, notes, recordings or text messages. Calls are deleted automatically after 90 days.

If you connect a phone system (CallRail, Quo, Aircall or Ringover), its API key is encrypted before it is stored, is never shown again, and is used only to read calls. Disconnecting deletes it. Call-log files you import are read in your browser; only the fields above are sent to us.

Who can see it

Only the account linked to your shop. Access is enforced by the database itself (row-level security), not just by the web pages, and is covered by automated tests that try to read another shop's data.

Retention and deletion

You can delete any request from your dashboard at any time. Requests older than the retention period agreed with you are deleted automatically once retention is configured for your account. Closing your account deletes your shop and all its requests.

Abuse protection

Submissions are size-limited, validated on the server, rate-limited per connection and per shop, and duplicate requests from the same phone number are merged.