Privacy & launch status.
Practice calls are simulations. They contact nobody, record no audio, and use no paid credit. Live calling is a closed pilot for verified accounts and approved recipients.
What we store
Your account stores passkey public keys and sessions, plus any name or email you add. Passkeys stay on your device or in your password manager. Optional email codes support signup and recovery. Existing password hashes are retained until account deletion; password login is disabled. Approved call instructions, summaries and audit events follow your retention setting. Saved transcripts are optional. Choose 1, 7 or 30 days, export your workspace, or delete calls and your account. Daily cleanup may take up to 24 hours after expiry. Billing records and provider backups can have separate retention requirements.
Your information
Your private-information vault encrypts saved labels, values and suggestion categories on your device. A compatible passkey unlocks its encryption key; Bot Dial backs up ciphertext and encrypted keys. Your recovery key can unlock the same backup. On a new browser, email access alone cannot unlock it. Bot Dial does not receive your vault key or recovery key. Existing saved details remain under the old application encryption until you complete the passkey protection flow. Earlier database backups retain their original encryption until they expire. Saving a detail does not approve sharing it. Relevant saved details and likely missing information are suggested when you prepare a call. You can edit, leave out or skip each one.
After you unlock, this browser remembers access using a local, non-exportable encryption key. Reloading or switching apps does not lock it. Use Lock or sign out to forget this browser; locking also clears other open Bot Dial tabs. A new browser or cleared browser storage needs your passkey or recovery key. Your account must still be signed in. Adding or removing vault passkeys requires recent identity confirmation. Social Security numbers are masked and available only for you to read during takeover, never selected from storage for the assistant. Details selected for a call are decrypted on your device and sent to Bot Dial and its calling services for that request. Call instructions, transcripts, summaries, account and billing records are not protected by the vault key. Deleting a saved detail does not remove copies you already approved for earlier calls. Delete those calls separately. Details you type directly into the call plan may be spoken by the assistant; keep credentials and sensitive information out of it.
During a live call
The assistant identifies itself as AI. LiveKit carries call audio; Telnyx connects the phone line. AssemblyAI provides transcription. Standard calls use Google for conversation and Cartesia or Telnyx for speech. Gemini Live and GPT-Live handle voice directly through Google or OpenAI; GPT-Live also uses an OpenAI reasoning backend. Native model connections pass through Bot Dial’s Cloudflare Worker using a short-lived, call-specific authorization. Provider keys stay on the server. Cloudflare plans the task and prepares the summary. These services process the call even when you turn off transcript storage. We do not archive call recordings.
Sound and live captions have separate switches. Turning captions off stops their delivery to your browser; it does not turn off the assistant's speech recognition. Turning off saved transcripts prevents their storage in call history. To prepare your result, Bot Dial encrypts a temporary checkpoint of assistant and recipient speech on its backend. It is deleted after processing or within 24 hours. This checkpoint uses server encryption, separate from your passkey vault. Takeover pauses the assistant and enables your microphone only after you choose to speak. The human portion is not transcribed. Summaries can miss details or contain mistakes; review important commitments.
Voice requests
A voice request sends up to one minute of audio to Cloudflare Workers AI for transcription. OpenAI GPT-6 Luna reviews the text and prepares the call through Cloudflare AI Gateway, with payload logging and caching off and provider zero data retention enabled. You review the full instructions and choose which personal details may be shared before starting. The original request is not forwarded to the calling assistant. Bot Dial does not save the request audio or unconfirmed draft. Content-free request counters expire within 48 hours.
Your voice
Creating a voice sends your authorized sample to Telnyx. Telnyx stores the sample and voice until you delete them through Your voices or delete your account. Bot Dial stores the name, language, provider IDs and permission record. We do not store sample audio. Provider backups follow their own policy. Use only a voice you own or have permission to use.
Contacts and test recipients
Saved contacts are encrypted on your device with your passkey and backed up as ciphertext. Selecting a contact fills the number; it does not share personal details or approve a call. Some pilot accounts require recipient approval before a call. Accounts granted access to all eligible destinations skip that step; country and spending limits still apply. Individual approvals last 24 hours. Bot Dial stores approved numbers for dialing outside your encrypted vault. Consent audit records use keyed number tags and expire after 30 days. Expired approvals are removed daily. You can edit contacts and remove approvals in Settings → Contacts.
Your phone number
You can verify a number you control by text or phone call and choose it as caller ID for each call. Your number stays with its current carrier; return calls go to your regular phone. Bot Dial and Telnyx store the routing number and verification status. These operational records are separate from your passkey-encrypted vault. Verification codes are checked by Telnyx and are not saved by Bot Dial. Verification expires after 90 days. Agent use is off until you allow it for that number and grant the agent token permission. Remove a number in Settings; active calls must finish first. Provider removal can take longer if the carrier is unavailable. Verification request counters use a keyed number hash and expire after 30 days.
Account messages and alerts
Cloudflare sends verification, single-use sign-in links and optional call alerts to your account email. SMS alerts require a verified phone number and an active carrier messaging configuration. They remain unavailable until that setup is complete.
Push alerts are optional. Enabling them stores your browser's delivery address and encryption keys. Call alerts contain an event and call ID, with no phone number or conversation content. Disconnect browsers in Privacy & account. Signing out disconnects the current browser; deleting your account removes subscriptions. Unused subscriptions expire after 90 days.
Payments and agent access
Stripe handles Checkout, subscriptions and MPP card payments. Bot Dial stores payment references and a usage ledger, not card details. Test balances and subscriptions are separate from production billing. An agent token grants only the permissions and spending limits you select. Listening access never grants a microphone.
Where processing happens
Cloudflare hosts the app. Its database is in the EU, but audio, speech, model processing, provider logs and backups are not guaranteed to stay there. We have not opened region-restricted or healthcare calling. International countries remain gated until their destination pricing, calling policies and provider requirements are reviewed.
Fonts and branding are served locally. We use essential authentication cookies and no advertising trackers.
Back to Bot Dial