How we protect your data.

Encryption

Data is encrypted in transit (TLS) and at rest. Sensitive details you provide for a task are used only to complete that task.

Tenant isolation and access control

Every account's data is isolated at the database level with row-level security, so one account can never read another's. Internal access follows least-privilege principles and is logged.

Recordings and sensitive data

Call recordings and transcripts are stored privately and are accessible only to the owning account through short-lived, signed links. Per-call account details are passed to the calling system only at call time and are not embedded in any stored assistant.

Payments

Payments are processed by Stripe. We never see or store full card numbers, which keeps card data out of our systems.

Webhooks and integrations

Incoming webhooks (for example from our voice and payment providers) are signature-verified and processed idempotently, so events cannot be forged or double-applied.

Responsible disclosure

Found a vulnerability? We appreciate responsible disclosure. Email security@rekoope.com and we will work with you. For details on data handling and sub-processors, see our Privacy Policy.