Our approach
We collect only the data a service needs, keep it in systems with access controls and logging, and delete it when it is no longer required. Website enquiry data is kept separate from any data processed for client voice or automation services.
Website enquiries
This website and the client console are hosted by Vercel, with server functions in Sydney, Australia. Website files are served from a worldwide network. If you accept analytics cookies, we also collect analytics data (see section 1 of our Privacy Policy).
Client call agents
The agent states at the start of every call that the call is recorded. Call audio is carried and stored by Twilio in its Australian (AU1) region, and transcripts and records are stored on our servers and database in Sydney, Australia. The providers that process call data, and where they do it, are listed in section 5 of our Privacy Policy and section 3 of our Data Processing Agreement.
Client automation
Workflows access only the systems and data agreed in scope. Where a workflow runs in the client's environment, data stays within systems the client controls.
Security assessments
Evidence gathered during assessments is limited to what is needed to support findings, stored securely and returned or deleted at the end of the engagement as agreed.
Retention
Recordings and transcripts are automatically deleted after 31 days, unless we need them longer for a legal claim or a client's written instruction. Within 30 days after a client agreement ends, Intelox will, at the client's choice, export the client's data to the client and then delete it, unless the law requires Intelox to keep it. See our Privacy Policy (section 2) and Data Processing Agreement (section 6).
Certifications
Intelox does not currently hold security certifications. We will update this statement if that changes.