Trust & security
Your customers' details, handled like they're yours.
Manyger holds your client list, your calls and your numbers. Here is exactly how that data is kept, who can reach it, and what we will never do with it. In plain language, with no asterisks.
What we hold
What we keep, and what we don't
We never store call audio
The AI listens in real time to answer the call, and keeps a written transcript and summary. The recording itself is never written down anywhere. That also means we hold no voiceprints and no biometric data of any kind. Not of you, and not of your callers.
We never train AI on your business
Your customer list, your revenue, your calls and your conversations are never used to train or fine-tune any AI model, ours or anyone else's. They are used to answer your phone and run your shop, plus internal quality checks on a sample of calls and anonymous benchmarks you can switch off.
We never see your card
Payments run through Stripe on the web and Android, and through Apple on iPhone. Your card number never touches our systems, so there is nothing of it for us to lose.
Your data stays yours
Export your customers, appointments, services, revenue and expenses from Settings whenever you want them, and delete your account there too. That erases your customers, appointments, calls, messages and financial records, and backup copies expire within 14 weeks. You are the owner of your customers' information; we hold it to do the job you hired us for.
Who can reach it
Access is closed by default, then opened a piece at a time
Every business is sealed off from every other
Our database refuses every read and every write unless a rule specifically allows it, and each rule is scoped to one business's own records. There is no query that returns another shop's customers, because there is no rule that would permit one.
Your team sees only their part
A manager runs the shop. A staff member sees the shop's schedule, never your revenue, your inbox, your reviews or your marketing. What a staff member sees about a customer is your setting, and it defaults to what their trade actually needs.
Connected tools are encrypted at rest
The keys to your Square, QuickBooks or Google account are encrypted with AES-256-GCM before they are stored, and decrypted only in the moment a sync runs.
Nothing calls in without proving it's real
Every incoming webhook (Twilio, Stripe, Apple, Meta, Google, LiveKit and the rest) is checked against a cryptographic signature or a secret token we issued, and refused if it doesn't match. A forged request never reaches your account.
Keeping it running
Built to survive a bad day
Recoverable to any minute in the last week
Point-in-time recovery means we can restore the database to any moment in the past seven days, to the minute. Daily backups are kept a week; weekly backups are kept 14 weeks. The database itself is protected against deletion.
Your phone line is watched around the clock
The app and the phone webhook are checked every five minutes from three parts of the country. If calls stop reaching the AI, we are paged. We don't wait for you to notice.
Audited, and fixed, not filed
We run structured security reviews of every route, webhook and database rule, and we fix what they find rather than filing it. The results shape the rules above.
Who else is involved
The companies in the path, and why
Running an AI receptionist means other companies touch parts of a call. Every one of them is named in our Privacy Policy, along with what they see: Twilio and LiveKit carry the call, Soniox turns speech into text, Cartesia speaks the replies, Google's Gemini reasons about them, Firebase stores your records, Stripe takes payment, and Brevo sends email. On iPhone, Apple takes payment under its own privacy policy. We add nobody quietly.
What we ask of you
Two things only you can do
Tell your callers
Our receptionist says it is a virtual assistant in its opening line. That is built in, and we insert it if your custom greeting leaves it out. Fifteen states require all parties to consent before a call is transcribed or monitored; telling your callers is your responsibility, and we give you a notice you can hand them.
Get permission before you text
Confirmations and reminders go to customers who gave you their number for that appointment. Promotional texts go only to people who said yes to them specifically. Both carry STOP, and only the customer can undo a STOP.
Questions we haven't answered?
Write to us. A person reads it.