Trust & data
The same rules as the rest of Phone Call Desk
Dial an Order runs on Phone Call Desk's UK service: the same assistant, the same London hosting, and the same rules about what is recorded and what is never seen. This page is the paperwork for the ordering part of it.
Where your callers' data goes
One UK service, one cell
Calls are handled on our servers in London. Dial an Order is a capability on a Phone Call Desk workspace, not a separate service, so it keeps the same hosting, the same companies, and the same rules as the rest of the platform.
Your data
London (Fly.io lhr)
- Application, database and queue in one region
- Volumes encrypted at rest; TLS everywhere
- No card data touches our systems
Sub-processors
Every company that touches a call or a payment
The same companies Phone Call Desk lists on its own trust page, plus Stripe Connect, through which you are your own customer's merchant. Last reviewed 27 September 2026.
| Company | Purpose | Personal data processed | Region |
|---|---|---|---|
| Twilio Inc. | Carries the call, and any recording | Caller and callee numbers, live call audio, call metadata, recordings if enabled; the texted payment link and order confirmations | Ireland (IE1) voice region |
| Deepgram Inc. | Turns the caller's speech into text | Live call audio and the resulting transcript | Hosted API (US); model-improvement opt-out sent on every session |
| OpenAI, L.L.C. | Decides what the assistant says, and writes the call summary | Transcript turns, your menu and settings, tool arguments (items, addresses, order details) | EU data-residency project |
| ElevenLabs Inc. | Speaks the assistant's replies | The text the assistant speaks, which can repeat what a caller said | US by default; EU residency available on enterprise terms |
| Stripe | Takes the payment on the call, into your own account (Stripe Connect), and our own subscription billing | The payment amount and what it is for; your customer's card details are entered on Stripe's own page and never reach us or the assistant | Stripe's platform; your account pays out in pounds; no card data touches our systems |
| Resend | Sends the order's email and dashboard sign-in emails | Email contents and the recipient address | EU region |
| Fly.io, Inc. | Hosting: application runtime, database and worker storage | Everything above, at rest and in transit | London (lhr) only; volumes encrypted at rest |
| Upstash, Inc. | Managed Redis backing the job queue | Job identifiers for post-call processing, retention and erasure requests | London (lhr), no replicas |
Controls you hold
Payment, retention, erasure, disclosure
Never hears a card number
The caller pays on their own phone, on Stripe's own page, into your account. We see whether it was paid, not the card.
Retention you choose
Transcripts and recordings kept for as long as you set, then erased on a schedule.
Orders are your financial records
An order keeps its lines and totals like any receipt. The caller's name and address are erased with the rest of their data; the number is masked, not the money.
A customer, deleted outright
Ask us to forget a caller and their record — name, number, last address — is removed, not merely anonymised.
Recording disclosure
If you record calls, callers hear your disclosure before anything is recorded, as on every Phone Call Desk number.
Encrypted, and never on a call it doesn't need
TLS everywhere; the assistant reaches only the tools a workspace has actually turned on.
Get a quote against your own call volume.
Tell us roughly how many phone orders you take a week, and we'll quote against it — not a price list.