Privacy Policy — Ansurra

Last updated 31 August 2026. This explains what Ansurra collects, why, who we share it with, and how to get it deleted.

Ansurra provides an AI receptionist that answers phone calls and website chats for small businesses. We act as a service provider (processor) for the businesses that use us — they decide what happens to their customers' information, and we handle it on their instructions.

1. What we collect

From the business owner (our customer)

Account details: name, email address, password (stored hashed by our authentication provider)
Business details: business name, industry, website, phone numbers, hours, timezone, service area
Content you give the receptionist: services, FAQs, policies, and any documents or links you upload
Credentials you connect: calendar authorisation, and integration keys or webhook URLs you paste in

From people who call or chat with the receptionist

The caller's phone number, and the number they dialled
Call audio recordings and written transcripts
An AI-generated summary, outcome and sentiment for each call
Details the caller provides: name, email, phone, service address, and what they need
Appointments booked, and website chat conversations

Call recording. Where the business has it enabled, the receptionist announces at the start of the call that it may be recorded. Businesses are responsible for meeting the recording-consent laws that apply where they and their callers are located.

From visitors to ansurra.com

When you open a page on ansurra.com, the page's own script tells our server which page was opened and the site that referred you (for example a search engine or a campaign link). Our server records that together with your device type, your country, and a one-way hash of your connection details that changes every day. We do not store your IP address, we set no analytics cookies, nothing is stored in your browser for this, and no third-party analytics script runs on the site. The country is derived on our server from the GeoLite2 database created by MaxMind.

2. Why we use it

To answer calls and chats, qualify enquiries and book appointments
To show the business its calls, transcripts, recordings, leads and appointments
To send the business notifications about calls and leads
To operate, secure, debug and improve the service
To bill for usage

We do not sell personal information. We do not use call, chat or calendar content for advertising, and we do not use it to train our own models.

3. Who we share it with

We use service providers (sub-processors) to run Ansurra. Each receives only what its job requires, under contract, and none of them may use it for their own purposes.

Retell AI (paid API)
OpenAI (paid API, GPT-4o-mini)
Telnyx (paid)
Supabase and Railway (paid)
Resend (paid)
Polar (paid) — our merchant of record; receives your billing name, address and payment details when you subscribe
Cloudflare (paid) — sign-in bot protection and email routing for our own address
Google and Mozilla push services — only if you switch on phone notifications, and only to deliver the alert to your device
Calendar provider — only the provider you choose to connect (Google Calendar or Cal.com)

These are named rather than described by category on purpose: you should be able to see exactly which companies process your data without having to ask.

We also send data to third-party tools at your own instruction — for example a Zapier webhook you configure. Once it reaches those tools, their privacy policies apply.

4. Google user data

If a business connects Google Calendar, we request only:

calendar.freebusy — to read when the calendar is busy, so the receptionist only offers times that are genuinely free
calendar.events — to create the appointment it books
userinfo.email — to show which account is connected

We read availability and write appointments. We do not read the contents of existing events beyond the busy times needed to avoid double-booking.

To offer times out loud during a call or in chat, the available times and the appointment details are processed by the AI voice and language-model providers described in section 3. They are not used for advertising, not sold, and not used to train models.

Limited Use. Ansurra's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not transfer this data to others except as necessary to provide the service, we do not use it for advertising, and we do not allow humans to read it except with the user's explicit permission, for security purposes, to comply with the law, or where the data is aggregated and anonymised.

Google data and AI models. No Google Workspace data — raw, aggregated, anonymised or derived — is used to develop, train or improve any generalised or foundational AI or machine-learning model, by us or by any provider listed above. Specifically:

The only calendar information we read is free/busy time ranges. We do not read event titles, descriptions, attendees, locations or attachments, and we never list the contents of your calendar.
The calendar.events permission is used only to create, move and cancel the appointments booked through Ansurra — never to read events we did not create.
What the AI model receives is a list of candidate appointment times our own server calculated (for example “Monday 8:00 AM is open”), so it can offer them out loud. Google calendar content is not sent to it.
Both AI providers are used on paid API plans whose terms do not permit training on customer API data.

A business can disconnect its calendar at any time from the Connections page, which revokes our access. You can also revoke it at myaccount.google.com/permissions.

5. How long we keep it

Calls, recordings, transcripts, leads, appointments and chats are kept while the account is active, so the business can refer back to them
When a business account is deleted, its calls, leads, messages, chats, documents and login are permanently deleted
Backups and provider logs may persist for a short period afterwards
Anonymised website visit records are deleted after 180 days

6. Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal information, and to object to or restrict how it is used.

If you called or chatted with a business that uses Ansurra, that business controls your information — contact them first. If you contact us, we will help them respond.

To make a request, email hello@ansurra.com.

7. Security

Data is encrypted in transit. Access to production systems is restricted to the people who operate the service. No system is perfectly secure, and we cannot guarantee absolute security.

8. International transfers

Our providers process data in the United States and other countries. Where information is transferred out of your country, we rely on the safeguards offered by those providers.

9. Children

Ansurra is a tool for businesses and is not directed at children under 13. We do not knowingly collect their information.

10. Changes

If we change this policy we will update the date at the top and, for significant changes, notify account holders by email.

11. Contact

Questions about this policy: hello@ansurra.com