Skip to content
Security and your data

We record your customers.
Here is what happens to that.

Asking a business to route its phone through somebody else is a big ask, and the recordings are the part that should give you pause. So this page answers the questions people actually ask on the call, including the ones where the answer is not flattering.

The binding version of all of this is in the privacy policy and the terms. This page is the plain English one, and where they disagree, they win.

Who can listen to my customers' calls?

The people in your business who you give a login to, and Sean. Rootline is one person, so the honest answer to this question is a name rather than a department. Every month a sample of conversations gets read to find what the assistant got wrong and fix it, which is part of what the fee pays for.

Where does it live?

In the United States, in our CRM and conversation platform. Nothing is stored outside the US, and nothing is moved anywhere else without telling you.

How long do you keep the recordings?

90 days, then they are deleted. The written record of who called and what they wanted stays with your lead records, which are yours and stay with you. A short window is deliberate: the recording is useful for the month we spend tuning the assistant, and after that it is a liability sitting on a hard drive.

Are you training AI on my calls?

No. Not our own assistant, not anyone else's model, and never another client's. Your calls do your work and nothing else. This is the single most common question and the answer does not have a caveat attached to it.

Do you make a voiceprint of my customers?

No. We do not use voice biometrics, speaker identification or voice authentication, and we have not switched on any feature that would. The assistant turns speech into text so it can hold a conversation. It does not identify anyone by the sound of their voice and it does not match a caller against a stored voice profile.

Whose data is it?

Yours. You are the controller of your callers' information and Rootline is your processor, which is a legal distinction that matters: we act on your instructions and we cannot decide to use it for something else. The recordings, transcripts and summaries are your data, and if the engagement ends you take them with you.

Do my customers know they are being recorded?

Yes, before they say anything. The assistant states that it is an AI and that the call is recorded at the very start of the call, before it asks a single question. That notice stays inside the recording permanently and is never trimmed off it. Several states require every party to a call to consent, which is why the notice comes first rather than somewhere in the middle.

Can you see the rest of my accounts?

Only what you grant, and only read only. Typically that is your ad account and your analytics. Read only means we can see it and change nothing in it. You can revoke it yourself in the platform at any time without telling us first.

The unflattering part

What we do not have

A security page that only lists strengths is a marketing page. These are the things a careful buyer would find out eventually, so they go here rather than in a procurement questionnaire after you have signed.

No SOC 2, no ISO 27001, no penetration test report

Rootline is one person and none of those exist yet. If you need a vendor who has them, that is a completely reasonable requirement and we are not that vendor today. We would rather say so here than have it come up in a procurement questionnaire after you have signed.

No uptime guarantee, and no availability credit

The assistant and the messaging layer run on telephone carriers and software platforms we do not own. Promising a number we cannot control would be a number we would break. Your own phone line is not affected by any of this: it rings first, every call, and if this stops working the call goes to voicemail the way it does today.

No claim that nothing will ever go wrong

It is software and it will get something wrong at some point. What is designed is the size of the damage: there is a list of things the assistant will never say, and a list of words that stop it and put a person on the phone. Price, insurance, emergencies and unhappy customers are all on the second list.

Not a policy, a design decision

What we will never do with it

These are not promises we are choosing to keep this quarter. Several of them are the reason the product is built the way it is, and reversing one would mean rebuilding something.

  • Sell your data, or anyone's data. There is no version of the business where that happens.
  • Merge one client's calls, contacts or recordings with another's. They never touch.
  • Market to your customers on Rootline's behalf. They are your customers and they contacted you.
  • Resell a lead. Not to a competitor, not to anyone.
  • Take your phone number. We never port one. Forwarding is a code you dial from your own handset and reverse yourself, without calling us first.
  • Make outbound AI voice calls. Not at any package. Follow up and reactivation run on text and email only, to people who agreed to hear from you.
  • Send to a bought list, or to contacts who never agreed to hear from you. That one is not negotiable.
Where we stop

Some industries we will not take on

Every call here is recorded and transcribed. In a medical setting that recording is held to a standard we have not built for, and in a legal or financial one the assistant would be a single question away from an answer it has no business giving.

So we do not work with medical, dental, chiropractic, physical therapy, med spa or mental health practices, and we do not work with attorneys, insurers or financial advisers. That is not a waiting list and you cannot sign a form to get around it. It is easier to say no now than to explain later why a recording exists that should not.

The exit

If you leave

No contract is the easy half of that sentence. The harder half is what happens to the recordings and to the assistant you spent a month teaching about your business.

  • You switch it off yourself, tonight, with a code from your own handset. No notice period for that, and no call to us first.
  • Everything gets sent to you without being asked for: the transcripts, the summaries, the call records, and the knowledge base the assistant was answering from, which was built out of your own words about your own business.
  • Recordings are deleted after 90 days whether you stay or go.
  • Your ad account, your tracking, your leads and your landing page domain were in your name from day one, so there is nothing to hand back.
Still not sure

Ask the version you would rather not email

If there is a question about your customers’ data that this page did not answer, it is worth fifteen minutes rather than a paragraph. Bring the awkward one.

(775) 380-8324Book