Where your data lives, and who can see it.

What we collect

Conversation transcripts across every channel your agent answers on, call recordings where you enable them, and the contact details a customer gives during a conversation, such as a name, number, email address or booking detail.

We also hold the business knowledge you supply to train the agent: your pricing, availability, policies, product data and the internal notes you choose to share. That material is yours, and you decide how much of it the agent gets.

Where it lives

Your knowledge base and your conversation logs are hosted on managed cloud infrastructure and isolated per client. One client's agent cannot read another client's data, and there is no shared pool of conversations behind the scenes.

Access to the infrastructure is limited to the people who operate it, and credentials are not shared outside that group.

Who can see it

Your authorised users, through your console, see every conversation your agent handles, in real time and in full.

Attorus staff see it only for support, tuning and the monthly improvement work included in every plan. Nobody else has access, and we do not sell, share or syndicate client conversation data.

Model training

Your data is used to operate and improve your own agent, and nothing else. It is never used to train models for other clients, and it is never handed to a third party to train theirs.

If that ever changes it will be a contract change you agree to in writing, not a quiet update to a policy page.

Call recording and consent

Call recording law differs by state, and the obligation to make the required disclosure sits with you as the business operating the line.

We configure the disclosure wording with you at onboarding so it is said the same way on every call, and we will not switch recording on for a deployment that has not agreed that wording.

Retention and deletion

Conversation data is retained for the life of the engagement, so your console history stays complete while the agent is running.

On termination we export your conversation data on request and then delete it, on the timetable set out in your agreement and subject to any records we are legally required to keep.

Privacy Act

Personal information is handled in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

Our privacy policy sets out what we collect, why, and how to ask for access or correction.

Questions

Security reviews are a normal part of a deployment and we would rather answer the hard questions before you sign than after. Bring them to the consultation, or send them in writing and we will answer in writing.