What Ansa stores
About your business: the setup you enter (hours, services and prices, FAQ, service area, documents you upload), your account details, and your billing status. Card details are held by Stripe; Ansa keeps only a reference.
About each call:the time, duration and outcome, the caller's phone number and the name and address they gave, the transcript, and the AI disclosure that was spoken.
Your connections: the sign-in tokens or API keys for your calendar or CRM. They are checked with the vendor when you save them, stored encrypted, and never included in a data export.
For calls to your business, you control your callers' data and Ansa processes it on your behalf. Once a booking is written to your CRM or calendar, that copy is governed by your own account with that vendor.
No call recordings
Ansa does not record calls and stores no audio. The live audio is streamed to Ansa's AI provider, OpenAI, so Sarah can hear and answer. Ansa keeps a text transcript instead. OpenAI may keep audio-derived content for up to 30 days for abuse monitoring, as its own terms allow.
Where it lives
Ansa's database is hosted in a US East region, and the voice service runs in Ashburn, Virginia. Some providers, including OpenAI, may process data outside a particular US region under their own terms, so Ansa does not promise US-only processing. If you need that, email us before you sign up.
Every outside company that handles your data is listed on the sub-processors page, including the phone carrier, OpenAI, the hosting providers, Stripe and the email provider. You can get an email when that list changes: there is a switch for it on your Billing page.
How it is protected
Per the privacy policy: data is encrypted in transit (TLS 1.2 or newer) and at rest through the infrastructure providers. Every record is scoped to your account at the database level, so one business can't read another's data. CRM credentials are kept in encrypted secret storage, and access to systems is logged.
No model training
Ansa does not train, fine-tune or build AI models on your data or your callers' data. OpenAI does not train on it either, under its API terms. Ansa staff may review transcripts within their 30-day window to find calls Sarah handled badly and fix her instructions. That is people reading calls, not model training.
How long it is kept
Transcripts and caller phone numbers: cleared 30 days after each call, even while your account is active. The call itself (time, outcome, duration) stays in your log.
Your account data: kept while you are a customer. After you cancel, you have 30 days to export it, then it is deleted.
Kept longer by design: billing records, audit logs and the record of which AI disclosure was spoken on each call. Backups expire on their own schedule, typically 30 to 90 days.
Copies and deletion
On a computer, the Calls page has an Export button for a quick spreadsheet. For a full copy of your data, or to have your account and its data deleted, email hello@tryansa.ai from your sign-in address. There is no self-serve delete button. Data already sent to your CRM or calendar stays there; delete it in that system.
Certifications and limits
Ansa has not completed a SOC 2 Type II audit; it is working toward readiness. Ansa is not set up for health information: it is not HIPAA compliant unless a separate Business Associate Agreement is signed. The service aims for 99% monthly availability, which is a target, not a guaranteed service level.