Privacy, data retention, and subprocessors

Where your data lives, who can see it, and how long we keep it.

4 min readUpdated May 20, 2026

Where your data is stored

All customer data — call transcripts, recordings, contact info, integration tokens — lives in our Supabase Postgres instance, hosted in US-East. Recordings are stored in ElevenLabs’ infrastructure for the lifetime of the agent. OAuth refresh tokens for your integrations are encrypted at rest with AES-256-GCM before being written to the database.

Who can access your data

  • You, via the dashboard (gated by your auth + Supabase row-level security)
  • A small number of company engineers, for debugging — only with an audit log
  • Subprocessors below, scoped to the specific functionality

Subprocessors

SubprocessorWhat they processLocation
ElevenLabsCall audio, transcripts, agent promptUS
TwilioPhone routing, call metadata, SMSUS
SupabaseDatabase, auth, file storageUS-East
StripeBilling, card dataUS
ResendTransactional emailUS
VercelHostingUS (edge)
SentryError tracking (not customer call data)US

Data retention

  • Call transcripts: kept for the lifetime of your account
  • Call recordings: kept for the lifetime of your account, deletable on request
  • Caller phone numbers: kept until you delete the call or delete your account
  • Integration tokens: deleted within minutes when you click Disconnect
  • Billing records: kept for 7 years per US tax law

Right to delete

Email hello@rescueyourleads.com from the email associated with your account. We will purge transcripts, recordings, and contact data within 5 business days. Billing records cannot be deleted before the 7-year statutory minimum.

Was this helpful? Email us if it wasn’t.

Suggest an improvement

Still need help?

Email hello@rescueyourleads.com — a human responds within a few hours.

No contracts. Month-to-month. Cancel anytime.