Privacy Policy

Last updated: 2026-10-09

This policy describes what data Word Is Bond stores when you use the service and who processes it on our behalf.

1. What we store

• Account data: your name, email, organization, plan, and Stripe customer reference.
• Test targets: the phone numbers, SIP URIs, or WebSocket endpoints you register and verify for testing.
• Call artifacts: transcripts, derived scores and metrics. By default, audio is processed in transit and is not retained by Word Is Bond. Optional recording writes audio to storage you control; we keep a pointer to it.

2. Retention

Word Is Bond does not retain call recordings; optional recordings in your own storage follow your storage policy. Call-log and test-run transcript columns are scheduled for erasure after 365 days. Scores and scorecards remain for the life of the account. Transcription cache entries expire after 24 hours. Billing records may be retained for applicable accounting requirements. Tenant-specific retention windows are not available.

3. Sub-processors

The database runs on self-hosted PostgreSQL. Scoring may route transcript text to the model providers listed below. These application integrations process data to provide and operate the service; request current provider details before onboarding:

• Telnyx — PSTN/SIP telephony
• Deepgram — speech-to-text
• Anthropic — language model (synthetic caller, live translation, backup scoring)
• xAI — language model (backup scoring and synthetic caller, used only when the services above are unavailable)
• Groq — language model (last-resort backup, used only when every other model is unavailable)
• ElevenLabs — text-to-speech
• Resend — transactional email
• Stripe — payments
• Cloudflare — compute, storage & CDN
• PostHog — product analytics
• Sentry — error monitoring

4. Your rights

Contact security@wordis-bond.com about an export or erasure request. The current API export covers part of the account record; the current account-deletion API does not complete billing and storage cleanup. Please do not rely on an API response as proof of complete erasure.

5. Security

Application connections use encrypted transport. We restrict access to provider credentials and verify signed provider webhooks where those integrations use them.

6. Contact

Questions about this policy or your data: security@wordis-bond.com.