Recordings and transcripts
| Item | Default | Where it is held | What happens at the end |
|---|---|---|---|
| Call recording (the audio) | 90 days from the call | At the voice provider, Retell, in the United States; we hold a link to it, not the file | The link is removed from our record and the call is deleted at Retell with its audio and Retell’s transcript (Retell’s delete-call API). Both stamped with the date. |
| Transcript (the text of the call) | 365 days from the call | Our database, US | The transcript and its timed segments are removed. The one-paragraph summary the dashboard shows in the call list stays with the call record. |
| The call record (who called, when, how long, outcome, the summary) | While the client is a client | Our database, US | It is the business’s record of the call; deleted with the client’s data on request or at departure. |
The purge runs every night at 03:15 UTC. A recording set to 90 days is therefore gone within a day of the period lapsing.
How a client changes it
In the dashboard: Settings, Call Recordings and Transcripts. Two figures, in days, between 7 and 3,650: how long recordings are kept and how long transcripts are kept. Blank means the default. The change is written to the audit log with who made it and applies from that night’s purge. A shorter period deletes sooner; nothing already deleted comes back. Recording itself can be switched off per agent, in which case there is nothing to keep.
Everything else
| Data | Kept | Why that long |
|---|---|---|
| Orders, bookings, messages, feedback, loyalty visits | While the client is a client | They are the business’s records of its own trade. |
| Customer contacts held for a business | While the client is a client, or until the business or the customer asks | The business’s customer list; the customer’s rights apply at any time. |
| Courier positions during a delivery | Purged on a rolling basis once the delivery is settled | Needed only to run and settle that delivery. |
| Courier and field-staff identity outcome, NIN and bank account (encrypted) | While they work with us plus seven years | Nigerian tax and payment records must be kept that long. |
| Sign-in records and the audit log | Kept | The record of who did what; it is the evidence behind every other line on these pages. |
| Billing records | Seven years after the invoice | Tax. |
How deletion works
- A scheduled purge (recordings, transcripts, courier positions) removes the item from the live database and, for recordings, deletes the call at Retell. A failed provider deletion is retried the next night until it succeeds; the record shows both dates.
- A request (from a business about its data, or from a person about theirs) is handled by a person within 30 days: the rows are deleted from the live database, and every supplier holding a copy is told. Where the law requires a record to be kept, we say which and for how long.
- Test and demonstration data is marked as such, excluded from every total, and deleted after use.
Deletion is not yet self-serve for a whole business; a business deletes individual customer records itself and asks us for the rest. That is stated on the Security page as an open item.
Backups
The database is backed up daily by Supabase and kept for seven days, with seven days of point-in-time recovery, in the same region as the database (AWS us-west-1, California). A deleted item therefore survives in backups for up to seven days after deletion, then is gone. Backups are restored only to recover from a failure, never to look something up, and after any restore every deletion since is re-applied from the audit log. A restore was rehearsed on 23 September 2026 into a scratch project; it took about three minutes.
When a client leaves
On the day a client’s account closes, its data is kept for 30 days so it can export it or change its mind, then deleted on its written instruction, and in any case within 90 days, by a person at Anty Virtual who confirms it in writing. Its NFC review cards keep resolving to a plain page for the life of the cards, because a printed card cannot be recalled. Write to privacy@antyvirtual.com for an export or a deletion; the confirmation names what was deleted and the date backups roll off.