PIPEDA-aligned handling
We collect the minimum needed to answer, book, and dispatch. Call recordings and transcripts belong to you. We don't sell them, and we don't use them to train foundation models.
Security & compliance
Your calls are customer data. We treat them that way.
Right On Call is a boutique receptionist, not a consumer app that trains on whatever you type. Recordings exist so we can dispatch, book, and debug, not so we can sell a dataset.
Callers are told
Ontario is one-party consent for most business calls. We still put a short recording disclosure on the line, and if a caller asks whether it is a person, the agent says it is an AI assistant.
Guardrails where they matter
Availability and booking rules are enforced in code: the receptionist can only offer a time the calendar returned. Diagnosis and repair pricing are hard rules in its instructions. Gas, smoke, or spark reports take a bounded safety script and a human callback.
You can turn it off
A dashboard kill switch stops the included Twilio number from answering. Tokens for third-party tools are encrypted at rest. Database access is row-level restricted per client. Sign-in is by Google account on an allowlist, and repeated failed sign-ins are rate-limited.
Who else touches a call
Voice AI cannot live entirely inside one Canadian closet. Telephony, speech, and models run with named vendors. We keep that list short, and we do not claim a data-residency story we cannot keep.
| Vendor | Role | Region |
|---|---|---|
| Twilio | Telephony and SMS | US / CA numbers |
| Vapi | Live voice pipeline | US |
| Anthropic | Conversation and summaries | US |
| Supabase | Call log and dashboard data | configurable |
| Render | Application hosting | US / EU |
Vapi runs speech-to-text and the voice through its own vendors. Tools you connect yourself, like Cal.com, Calendly, Jobber, or Zoho, get the booking details under your own account with them. The full vendor list is available on request.
What the default product is, and is not
- Baseline handling is PIPEDA-aligned: minimum collection, customer-owned recordings, deletion on request. We do not sell call data or use it to train foundation models.
- We are not SOC 2 certified on the default stack. If procurement needs that, it is a scoped build with real audit cost. Say so up front and we will price it.
- HIPAA is a US law and does not apply to an Ontario-only service. Regulated Ontario health practices are usually covered by PHIPA, which puts the duties on the practice. There is no PHIPA certificate for vendors, and we do not claim compliance for anyone. For those practices we offer a privacy build: limited collection, a written agreement, our secondary uses switched off, and a vendor list for their own counsel to review. It is separately priced and not included in the $199 CADplan. Studios and spas without regulated staff use the standard setup.
- Foundation-model vendors process audio to produce the conversation. We do not then reuse that audio to train those models.
- Recordings are deleted about 14 days after the call on the standard plan. Transcripts and call records are kept 12 months, then anonymised: names, numbers, emails, and addresses are replaced, and the identified record is deleted. What is left stays with your account and is not shared with other clients. Ask for an earlier delete at any time.
For the longer, plain-language version of this page, read PIPEDA, Recordings, and US Subprocessors.