Security & privacy
We are open about what happens to calls.
Marco talks to your customers. That is why this page explains how he behaves on the phone, where data is processed and what we agree with you before going live.
Honest with your callers
- At the start of the call Marco says that an AI assistant is speaking.
- He is instructed to answer only from your knowledge. What he doesn’t know becomes a callback.
- No diagnoses, no legal advice, no binding prices.
- Marco never calls anyone on his own initiative.
This website
- Audience measurement with Google Analytics only with your consent
- Without consent only technically necessary cookies, on the contact page for the form
- Fonts, images and videos from our own server
Data flows
Where data is processed.
Hosting, data storage and knowledge search are in Germany. The AI language model runs at a provider that also processes outside the EU, including the USA, with appropriate safeguards. Telephony runs via a provider with an EU region. This page states the location for each step. The providers, with names and locations, are listed in the annex to the data processing agreement.
1 · Telephony
Phone numbers and answering calls.
Location: Provider with an EU region.
2 · Speech recognition and speech output
Turns speech into text and Marco’s replies into speech.
Location: Via the telephony provider. Processing may partly take place outside the EU, including the USA.
3 · AI language model
Understands the request, writes replies and the summary.
Location: At a provider that also processes outside the EU, including the USA, with appropriate safeguards.
4 · Application and data
Knowledge and knowledge search, transcripts, summaries, contacts and appointments.
Location: Hosting and data storage in Germany. The knowledge search runs with our own model, hosted in Germany.
5 · Calendar
Only if you connect your calendar: reading free slots, adding appointments.
Location: Your own calendar account.
6 · Service area and travel time
Only if you switch it on: addresses are sent to a map service for the calculation.
Location: See the annex to the data processing agreement.
7 · Email delivery and billing
Notifications by email; payments and invoices via a payment provider.
Location: See the annex to the data processing agreement.
8 · WhatsApp
Your customers’ messages via WhatsApp.
Location: Meta processes WhatsApp messages outside the EU as well. For practices, law firms and tax advisers WhatsApp is therefore off by default and can be switched on deliberately.
Before going live
What we agree with you.
You are the controller for your customers’ data; we process it on your behalf.
- Data processing agreement (DPA)
- We sign it with you before going live. Read the DPA
- Call recording
- Each business decides for itself. The template for your industry sets a default; for professions bound by secrecy recording is off. Before a recording starts, the caller hears a notice.
- Retention and deletion
- You set per business how long calls and summaries are kept: 30, 90 or 365 days. The default is 90 days. After that they are deleted. Contacts stay until you delete them. What you delete stays in the trash for 30 days and can be restored there.
- Practices, law firms and other professionals bound by secrecy
- We agree which details Marco asks for and conclude the addendum for professional secrecy holders. Whether your business needs further steps, please clarify with your data protection officer or professional chamber.
- A team member’s voice
- Only with the person’s written consent, revocable at any time.
Demo call
Questions about privacy?
In the demo call we go through your questions, including confidentiality and data processing.