Privacy 857-3-CALL-CG

Where your words go

Last updated 31 October 2026

Every place your words go, in order.

When you talk to CG, your words pass through other companies' systems. This page names them, says what each one sees, and says how long we keep what we keep. The numbers below are the ones our software uses.

The path of a call

Five hops, in order. Texts and WhatsApp chats take the same road with typed words: your carrier or WhatsApp, our messaging provider (Twilio or Meta), then the AI model and back.

  1. 1

    Your carrier

    Class: phone company. Sees: the numbers, the time and the length of every call, and carries the audio. It keeps its own call records, which we do not control.

  2. 2

    Our phone provider

    Class: telephony provider (Twilio, Plivo). Sees: the numbers, the time, the length, and the audio as it passes through to our server. Our software does not ask either one to record a call; the recordings we keep are made on our own server. Calls from the website demo run through our own LiveKit server instead.

  3. 3

    Speech to text

    Class: speech-to-text vendor (Deepgram by default; AWS Transcribe is the other). Sees: your live audio, and sends back the words.

  4. 4

    The AI model

    Class: language-model vendors (DeepSeek first; Google's Gemini on Vertex AI when DeepSeek does not answer; Amazon Bedrock last). DeepSeek is a company in China; our privacy policy says so too. Sees: the words of your conversation, what CG has remembered about you, and what its tools return, such as a calendar entry or a web page. This is the hop that sees the most.

  5. 5

    Back to you

    Class: text-to-speech vendor (Deepgram's voice on your own calls with CG; Amazon Polly on the calls CG makes for you and the message taker), then the phone provider and your carrier again. Sees: the words of CG's reply, which it turns into a voice.

Documents you ask CG to review, and questions you ask it to put to other AIs, go straight to the AI companies you choose (Anthropic, OpenAI, Google, xAI, DeepSeek), each through its own interface and under its own terms: they say they do not train on it, and some may hold it briefly. Nothing is sent until you have said yes once to sharing with them. You can withdraw that yes at any time by saying "stop sharing".

What we keep, and for how long

WhatHow longNote
Call recordings (the audio) 60 days Only calls from the account holder who has proven who they are are kept as audio. Every call is announced as recorded. You can ask CG to delete a recording sooner.
A link to hear a recording 24 hours A signed link CG sends you stops working after this.
Call transcripts and chat history 90 days Every call keeps its transcript, whether or not the audio is kept. Older lines are deleted every night.
The same, after you leave 30 days Once an account has deleted everything or cancelled, whatever remains goes within this time.
Notes and what CG remembers about you Until you delete them The profile and notes that let CG know you stay until you tell CG to forget something or to delete everything. No automatic expiry.
Documents you send for review 30 days Lab reports, statements and similar files. Stored encrypted when a key is configured.
Screenshots of pages CG visited for you 30 days Taken when CG works a web page for you.
Demo calls from our website 30 days The transcript and the visitor's address. The demo greeting says so.
Backups of our database 30 days A nightly copy goes to private cloud storage with server-side encryption, and the storage deletes each copy after this time. A record you delete can therefore sit in a backup for up to this long.
Payment records and stop lists Kept What we need to show a charge, and the lists that stop us texting or calling a number that told us to stop. Those lists hold only the number. Card details are held by our payment processor, not by us.

What we never do

  • We do not show ads, and we do not build an advertising profile of you.
  • We do not sell your words, your numbers or your contacts.
  • We do not train or fine-tune any model on your words.
  • We do not look at your calls in secret. When our staff open a call transcript or recording in the admin panel, the view is written to an access log.
  • We do not text or call a number that told us to stop.

Your controls

  • Forget that. Say or text "forget" and a name or a thing. CG removes it from your notes, stored facts, chat history and call transcripts, and tells you what it removed.
  • Delete everything. Ask CG to delete everything it knows about you and confirm. Notes, facts, chat history, call transcripts, recordings, uploaded documents, reviews and screenshots go. Reminders, contacts and the account itself stay until you cancel.
  • FORGET ME. If you are not a customer, and CG holds your words because you called or texted someone who uses it, text FORGET ME to 857-3-CALL-CG. We reply with a one-time code; text it back and we remove what we hold about your number, except the stop list that keeps us from contacting you again and the counters that limit how often a number can reach us (a number and a time). The code proves the request came from that phone.
  • STOP. Text STOP and we stop texting you, from every part of the service.
  • Stop sharing. Say "stop sharing" and CG no longer sends your documents to outside AI companies.

What we cannot promise

Our own deletion is something we do in code, and the table above is what the code does. What happens at the companies in the path is different. A vendor's promise not to keep or train on your words is a contract term, not something we can see or switch off. Your carrier keeps its own call records, and it is not our vendor. Each model and speech vendor has a zero-data-retention or no-training setting, and each has to be confirmed account by account; some are on by default and some have to be asked for. Where we ask for it in our requests, as with documents sent to the AI companies you choose, the request is only as good as the vendor honouring it. Everything else in the AI hop currently relies on the account-level setting, and we have not yet confirmed every one. The table below is the list we are working through. A row that says not yet has not been confirmed with that vendor. We list them anyway.

VendorWhat it seesSetting to confirmConfirmed on
DeepSeekModel requests: chat and voice thinking first, notes upkeep when Google does not answer, one seat of the AI councilAPI terms: no training on API traffic; data may be held briefly; the company is in Chinanot yet
Google (Gemini on Vertex AI)The same requests when DeepSeek does not answer; notes upkeep and web look-ups first; one seat of the AI councilVertex AI terms: no training on customer data; the project's data-use settingsnot yet
Amazon BedrockConversation text sent to the Nova modelsNo prompt or response storage; no use for model improvementnot yet
AWS Transcribe and PollyAudio of the caller (Transcribe, when used); text of CG's reply (Polly)The account-level opt-out from content use for service improvementnot yet
DeepgramLive audio of the callerOpt-out from model improvement and data retention on the accountnot yet
Anthropic, OpenAI, xAIOnly documents and questions you ask to be put to them, each through its own interfaceEach vendor's API terms: no training on API traffic; retention as each vendor states (no zero-retention flag on a direct call)not yet
Twilio and PlivoNumbers, times, lengths, audio in transit, text messagesProvider-side call recording off; message-body logging as short as allowednot yet
Meta (WhatsApp)WhatsApp messages between you and CGBusiness account data settingsnot yet
TypeSafeThe words of a message-taker call, to judge whether it is urgentNo training; retention to confirmnot yet
Google PlacesThe business names and numbers you ask CG aboutGoogle Maps Platform termsnot yet
FinnhubStock tickers onlyFree-tier terms; no personal data is sentnot yet
ComposioYour Gmail or Calendar, only when you connect itData handling and retention under its termsnot yet