Last updated: 22/09/2026
forwarded, hours, language and the content of the "profile"
(instructions for handling calls).
Anele, and the call transcript. From the free plan's voicemail, also a
recording that is deleted as soon as it is transcribed (1.4).
does not store card numbers.
website usage logs needed for operation and security.
For someone who only visits the website, no IP address is stored. We
store a fingerprint — a sha256 of the IP, the browser and a salt that
never leaves the server — used to count how many distinct people came
without knowing who they are. The fingerprint cannot be reversed to the IP,
and no tracking cookies are used. If you submit a form — contact or
sign-up — your IP address is stored along with what you wrote, to tell
a real message from a bot and to respond to abuse.
Only to provide the service: answering, taking messages, booking
appointments, transferring calls, sending the Customer their messages and
summaries, sending the caller the confirmation they requested (see 2.4),
billing, and protecting the service against abuse. **We do not use call
content for advertising or to train third-party models.**
Only with the providers needed to operate (sub-processors), each under its
own confidentiality commitments and obliged to notify us of a breach. You
are about to forward your business phone to us and have the right to know
exactly who sees what:
| Who | What they see, exactly | Where |
|---|---|---|
| Telnyx | telephony and messaging: the audio in transit and the numbers. Not stored | USA |
| ElevenLabs | voice and conversational AI: everything that is said. It hears the live call, transcribes it, and keeps its own history. It also transcribes voicemail recordings, which we send it as a file once the message has been recorded | USA |
| Google (Gemini) | the language model that understands the call and drafts the message: gemini-2.5-flash. It receives what is said, through ElevenLabs, which is what invokes it | USA |
| Google Calendar | name, phone and reason for an appointment — only if you share your calendar | USA |
| Resend | transactional email: your address and the content of the notices we send you | USA |
| Telegram | optional notifications, only if the Customer sets them up | international |
| Stripe | payments, once paid plans open. We do not store cards | USA |
| Vultr | the server: everything stored | Miami |
| Hetzner | the backups, encrypted | Europe |
Each publishes its own policy:
[Telnyx](https://telnyx.com/privacy-policy) ·
[ElevenLabs](https://elevenlabs.io/privacy-policy) ·
[Google](https://policies.google.com/privacy) ·
[Resend](https://resend.com/legal/privacy-policy) ·
[Telegram](https://telegram.org/privacy) ·
[Stripe](https://stripe.com/privacy) ·
[Vultr](https://www.vultr.com/legal/privacy/) ·
[Hetzner](https://www.hetzner.com/legal/privacy-policy).
Two things we would rather tell you than have you find out:
Google**: the model that understands what you say is gemini-2.5-flash.
They are the two most sensitive providers, and they go together because
the call passes through both. Without them there is no Anele.
and are stored encrypted.
We do not sell or rent personal data to anyone. We may disclose data
where required by law.
On text-messaging (SMS) consent:
We will not share your opt-in to an SMS campaign with any third party
for purposes unrelated to providing you with the services of that
campaign. We may share your Personal Data, including your SMS opt-in or
consent status, with third parties that help us provide our messaging
services, including but not limited to platform providers, phone
companies, and any other vendors who assist us in the delivery of text
messages.
All of the above categories exclude text messaging originator opt-in
data and consent; this information will not be shared with any third
parties.
for or verbally agrees** to receive a confirmation by text message (for
example, confirmation of their message or appointment), we send that
message to the number they called from. These are service messages, one
per call or appointment; they are not advertising. Message and data rates
may apply.
enables them.
reply HELP for help, or write to info@clouvexpbx.com.
third parties or affiliates for marketing or promotional purposes.** They
are shared only with the providers that deliver the message (2.3).
Messages, transcripts and call records are kept for 90 days and then
automatically deleted. Deletion is daily and automatic, at 04:17: it
does not depend on anyone remembering.
Two periods are counted differently, and it is worth knowing:
not after it was booked. An appointment made in May for September is a
live commitment: deleting it 90 days after booking would leave you an
event in your calendar without knowing who is going to walk through your
door.
What an IP is for is resolved in days; the message is needed to help you.
The call record without its content — date, duration, outcome — is
retained, so we can answer "how many calls did they handle in March?"
without keeping anything that was said.
Account data is kept while the account is active and for 12 months
after cancellation (for accounting obligations and to handle claims),
unless the Customer requests earlier deletion. Your profile and
configuration are deleted 90 days after you leave, and we offer you a
copy first: that margin exists so you can come back without reconfiguring
anything, which is what actually happens when someone leaves and thinks
better of it.
We apply reasonable measures: encryption in transit, signed and expiring
links for audio, credentials do not live in the code repository, server
access is by key and not by password, files containing people's phone
numbers have restricted permissions, and time-based deletion is automatic.
Backups are encrypted and leave the server daily.
No system is infallible; if an incident affecting personal data occurs, we
will notify affected Customers without undue delay.
The Customer may request access, correction, export or deletion of
their data by writing to info@clouvexpbx.com; we respond within a
reasonable time and verify identity. They may also end the service at any
time: turn off the forwarding and the service stops receiving calls
immediately.
A person who called a business served by Anele does not know us and has
agreed to nothing with us. They have the same right: **if they ask for
their data to be deleted, it is deleted.** By writing to
info@clouvexpbx.com from or quoting the number they called from; we search
by that number, delete their message and anything from that call, and
confirm it. No reason is asked for.
Who is responsible for what: the business is the controller of its
callers' data — they are its customers, it receives them on its phone and
decides what to do with them — and CLOUVEX is the processor that
handles them on the business's behalf, only to answer those calls.
Residents of Florida and of other states with privacy laws have the rights
those laws grant them.
The service is directed to businesses, not to minors. **CLOUVEX does not
ask anyone's age and does not knowingly deal with minors**, and does not
knowingly collect data from children under 13; if a Customer notices that a
child left a message, they may request its deletion.
If your business serves minors — a pediatric clinic, a school — the
recording notice and the 90 days apply the same, and **you are responsible
for your customers' consent**, as with any other data you already collect
from them today.
We may update this Policy with notice on the website or by email. Contact:
info@clouvexpbx.com · CLOUVEX LLC, Miami, Florida.
---