Data handling

Service providers

• Cloudflare — Website hosting, security and spam protection on forms (Turnstile).
• Zoho Mail — Email.
• Twilio — Phone numbers and SMS.
• Retell AI — AI voice assistant, call recordings and transcripts.
• Cal.com — Booking audit calls.
• PostHog — Website analytics.
• Anthropic (Claude) — AI drafting of posts, replies and reports, which we check before anything is sent.
• Resend — Sending us an email about each website enquiry, with the details you entered.
• Upstash — Spam, booking and duplicate-call checks: short-lived counters kept up to 2 days, booking checks until a day after your call, phone-call event records up to 7 days.

These are our main providers. Some of them process data outside Australia, and where a provider processes data depends on its own settings.

Some delivery work may be carried out by specialist contractors under confidentiality terms. Before a contractor outside Australia can see client data, we sign written terms with them and add their country to this page. Hanuva remains responsible for all work and data handling.

How we protect data

• Access limited to people who need it.
• Encryption in transit; reputable providers with their own security certifications.
• Client data used only for that client's campaigns.
• Call recordings and transcripts are kept for 90 days, then deleted. Enquiry details are kept for 24 months after our last contact. Records of consents, opt-outs and approvals are kept for 6 years after the last message we sent.

Client responsibilities

Clients are responsible for having consent to contact their customers and for their own privacy policies. We help you collect and record consent correctly.

Data breaches

If we become aware of a data breach that could cause serious harm, we'll tell affected clients within 72 hours of becoming aware of it, and follow the Notifiable Data Breaches scheme where it applies. Report a concern to enquiries@hanuva.com.au.