Privacy Policy

What we collect
  Your name, email address, mobile number and an Australian address. We also
  hold the result of an identity check, records of your service and billing, and
  metadata about calls to your number: when they happened, how long they lasted,
  the number the call came from and where it was delivered.

About the people who call you
  Telecommunications data-retention law requires us to keep the number each call
  came from, so we do, for two years, and then clear it. That number is all we
  keep about your callers. We never record who they are, what was said or why
  they called, and we do not use their numbers for anything else: not marketing,
  not profiling, and never to contact them. Your customers are your business, not
  ours.

Identity documents
  Your identity document is photographed and assessed by a specialist identity
  verification provider. We never receive it and never store it. We keep only
  the outcome: whether the check passed, when, which method was used, and a
  reference number.

Call content
  We have no access to call audio. We do not record, transcribe or analyse
  calls. Our upstream telecommunications provider carries the call; we only
  receive metadata for billing and support.

How long we keep things
  Retention periods are set by approved policy, by record type. When you close
  your account we stop your service and billing straight away, and delete what
  we have no reason to keep, such as your sign-in sessions and security codes.
  Your name, contact details, date of birth and address, your invoices, the
  outcome of your identity check and call metadata are kept in a restricted
  state for as long as business record-keeping and telecommunications
  data-retention laws require — at least two years after closure, and up to
  seven years for financial records — and are then de-identified or deleted.
  Caller numbers and call destinations are cleared two years after each call.

Your rights
  You can ask for a copy of the personal information we hold about you, ask us
  to correct it, or make a complaint. You can start any of these from your
  account, and we will respond within 30 days.

Law enforcement
  We do not give any external agency direct access to our systems. We assess
  every request against the authority claimed, and we disclose only what that
  authority covers and what we actually hold. Network records and any
  interception capability sit with our upstream telecommunications provider, not
  with us.