Privacy
Last updated: August 30, 2026
Suzy answers your phone when you cannot, writes down who called and what it was about, and passes it to you. A stranger picking up your private line is a lot to ask, so this page says plainly what is kept, what Suzy is told about you, who else sees any of it, and for how long.
This covers the Suzy phone assistant. Suzy is operated by esek.io, which also runs a business messaging platform with its own privacy policy. If you are here because you called someone who uses Suzy, section 7 is for you.
1. What we collect from you
Setting Suzy up asks for three things, and those three are what we store:
- Your name. It is what Suzy calls you when she passes a message on, and it is what your account is named. Callers are never told it.
- Your language. The language Suzy speaks with you and with whoever calls.
- Which assistant you picked from the ones Suzy offered.
When you add a login so the setup stays yours, we store the phone number or email address you signed in with, and a one-way hash of a password if you set one. If you connect your own phone number, we store that number and the fact that calls to it are forwarded to us.
We also record how the app itself is used: which screen was opened, which action was taken, which errors were shown. Screens are recorded as route patterns, so nothing that appears inside a page address is collected. This is stored in our own database and is not sent to an outside analytics company.
2. What we collect about people who call you
For every call Suzy answers on your behalf:
- The caller's number, as the telephone network delivers it. We also use it to create or match a contact in your own list, so the next call from that person joins the same thread.
- A transcript of what was said, produced by speech to text.
- The message and a short summary: what the caller asked us to pass on, and a few lines describing the call.
- Call details: when it started and ended, how long it ran, which number was dialled, and whether it was answered.
We do not record or keep the audio. The sound of the call travels between the phone network and the AI provider that hears and speaks. It does not pass through our servers and no recording of it is made. Only the written transcript, the summary and the message survive the call.
Calls Suzy answers end automatically after five minutes.
3. What Suzy is told about you, and what she is not
Discretion here is not a promise about intentions, it is how the assistant is built. Every line below is a rule the assistant runs under on every call:
- She introduces neither of you. The greeting is an AI phone assistant and nothing more: not her name, not yours, not whose line it is. If a caller asks outright who they are speaking to, she gives her own name and says she is your secretary, and stops there. That is the only thing about you she is ever allowed to say. Someone who dialled your number already knows whose it is, and a flat refusal to answer a direct question reads as evasion rather than discretion.
- She can do exactly one thing: take a message. Booking, buying, paying, transferring the call and promising a callback are not available to her, so she cannot act for you even if a caller insists.
- Beyond that one answer, she must not confirm or deny anything about you. Not your whereabouts, your schedule, your relationships, your account details or whether someone has called before. Asked for information about you, she says she cannot share personal information and offers to take a message.
- She never mentions that she recognises a caller. Where an earlier call from the same person exists, a short summary of it is used to understand the new one, and never read back.
- She says she is an AI phone assistant at the start of every call.
None of your catalog, hours, prices or notes reach her, because a private account has none of those things.
4. What is sent to the AI provider
Suzy is able to hold a conversation because a third-party AI service listens and speaks during the call. The provider today is OpenAI. While a call is in progress we send:
- the audio of the call, live, so the assistant can understand the caller and answer, with the transcript coming back to us as text;
- the caller's phone number, which a telephone call carries to the provider as part of connecting it, and which we cannot separate from the call;
- a short summary of that caller's most recent earlier call to you, where one exists, so they are not made to repeat themselves.
The provider processes this for us under their API data processing terms. As of the date at the top of this page, data sent through those APIs is not used to train their models, and is kept only as long as needed to provide the service and to check for abuse. If we change or add a provider, we will update this page and ask you to agree again in the app before anything is routed to it.
You are asked to agree to this in the app before Suzy answers anything. Without that agreement she does not answer at all.
5. Who else handles this
We do not sell personal data. Besides the AI provider above, it reaches:
- DIDWW, our telephony provider, which sets up the call and carries the audio, and so handles the caller's number and what is said while the call is live.
- Meta (WhatsApp), when a call or a message arrives over WhatsApp rather than the ordinary phone network.
- Google Cloud, which hosts our servers and databases in the United States and Europe.
Your data may therefore be processed outside the country you live in. We rely on Standard Contractual Clauses and processor agreements to protect it in transit.
6. How long we keep it
- Calls: the transcript, summary, message, caller number and call details are records of your own account. We do not delete them on a schedule. They are kept for as long as your account exists and are permanently removed when you delete it.
- Your account: kept while it is active, and permanently removed within 30 days of deletion, along with everything attached to it.
- App usage records: kept while they are useful for improving the product. They hold no call content.
Removing a caller from your contact list does not by itself erase the calls already logged against them. Deleting your account does.
7. If you called someone who uses Suzy
You spoke to an AI assistant taking a message for a private person. Your number, what you said, and the message you left are that person's record of your call, the same way a note on paper would be.
You can ask them to delete it, or write to us at privacy@esek.io and we will remove it. You can also ask us what we hold about you. We answer within 30 days.
8. Your rights
Depending on where you live, you may have the right to see, correct, delete or take a copy of your personal data, and to object to or limit some of the ways it is used. Write to privacy@esek.io, or see the Data Deletion page for how to ask for deletion. We answer within 30 days.
9. Children
Suzy is not meant for anyone under 16, and we do not knowingly collect their personal data. If we learn that we have, we delete it promptly.
10. Cookies and local storage
The web app uses only the session cookie that keeps you signed in. This page sets nothing beyond your language choice, which is stored in your own browser.
11. Security
Everything travels over TLS. Passwords are hashed. Database access is limited to authenticated services inside our private network, and access tokens are stored encrypted.
12. Changes
We may update this page. If a change is material we will tell you by email, and where it changes what is sent to the AI provider we will ask you to agree again in the app.
13. Contact
Questions about any of this: privacy@esek.io.