Privacy Policy
Last updated 2 September 2026
DeskAli is operated by BRAZAUSTRA PTY LTD (ABN 45 647 949 488), trading as DeskAli, of Queensland, Australia. This policy explains what we collect, why, who it goes to, how long we keep it, and how to have it deleted. We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.
The part most people need to read. DeskAli answers your business phone for you. That means it records and transcribes calls from members of the public — people who have not signed up to anything. Those recordings and transcripts contain their names, phone numbers and often their home addresses. You are responsible for telling callers their call may be recorded. In most Australian states, recording a call without letting the other person know is against the law.
1. Who the information is about
Two different groups, treated differently:
- Customers — the business owner who signs up and uses the app.
- Callers — members of the public who ring a customer's number and are answered by Ali. They never sign up and never see this app.
2. What we collect
| Information | Why we have it |
|---|---|
| Name, email address, phone number | To create and secure your account, and to contact you about it. |
| Business name, ABN, trading address, industry | To set Ali up for your business and to meet telecommunications requirements for the number. |
| Call audio recordings and transcripts | So you can check what Ali said and what the caller wanted. Contains the caller's voice and whatever they said. |
| Caller name, phone number, pickup and drop-off addresses | To create the booking Ali took on your behalf. |
| Precise device location (staff app only, optional) | To dispatch the nearest technician, calculate travel time and kilometres, and suggest clock on or clock off at a job site. On iOS, updates occur only while DeskAli is open and can be disabled. Recent detail is thinned after 7 days and removed after 90 days. |
| Push notification token (app only, optional) | To alert you when a booking comes in. Identifies the handset, not you. |
| Voice recordings you make to train Ali | Your own voice, teaching Ali your prices and service area. |
| Payment details | Handled by Stripe for website purchases or Apple for in-app purchases. We never see or store your full card number. |
| Supplier invoices, receipts and purchase documents you choose to scan | To extract supplier, tax, totals and line items for your review, job costing and stock records. Originals remain private to your business. |
We do not track you across other apps or websites, we do not sell personal information to anyone, and we do not use your data or your callers' data to advertise to anybody.
3. Who it goes to
Running an AI receptionist means a call passes through several specialist services. Each one receives only what it needs to do its part:
| Service | What it receives |
|---|---|
| Google Firebase (Google LLC) | Accounts, bookings, call records and recordings. This is where your data is stored. |
| Deepgram | Call audio, to turn speech into text. |
| Anthropic | The text of a conversation so Ali can decide what to say, and purchase invoices or receipts you explicitly submit for document extraction. Financial document output always requires your review before it becomes an approved record. |
| Cartesia | The text Ali is about to say, to turn it into speech. |
| LiveKit | Carries the live audio of the call. |
| The telephone carrier providing your DeskAli number | Call routing metadata, as any phone call requires. |
| Stripe / Apple | Your billing details for purchases made through that provider. We never receive your full card number. |
| Xero (only if you connect it) | The customers, invoices and payments you choose to sync, and your Xero chart of accounts and tax rates so entries land in the right place. Nothing is sent until you click Connect in DeskAli and approve the connection inside Xero. |
Accounting software you connect. If you connect Xero, DeskAli uses the access Xero grants only to keep your customers, invoices and payments in step between the two systems. We do not read anything beyond the scopes you approve, we do not pass Xero data to any other third party, and we never use Xero data to train, fine-tune or improve any AI model — ours or anyone else's. You can disconnect at any time from the Xero tab in DeskAli or from Xero's own connected apps page; disconnecting revokes DeskAli's access at Xero and removes the stored connection. Deleting your DeskAli account removes the connection and its tokens with everything else.
Some of these providers process data outside Australia, including in the United States. We use them under contracts that require them to protect the information and not to use it for their own purposes. We do not permit them to train their models on your calls.
4. How long we keep it
- Call recordings and transcripts — kept while your account is open, so you can go back to them. Deleted when your account is deleted.
- Bookings and call records — the same.
- Purchase invoices, receipts and extracted purchase records — kept with your business records while your account is open, unless legal financial-record retention applies after approval.
- Account and business details — kept while your account is open.
- Billing records — kept by Stripe or Apple and by us for seven years, as Australian tax law requires. This is the one category that survives account deletion, and it is financial, not conversational.
5. Deleting your account and your data
You can delete your account yourself, at any time, without asking us:
- In the app or on the web dashboard: account menu (top right) → Delete my account.
That permanently removes your profile and settings, every call record, transcript and recording, every booking and appointment, everything you taught Ali, and your sign-in itself. If you signed in with Apple, DeskAli also requests revocation when the required Apple grant is available; Apple may retain records under its own legal obligations. It cannot be undone. Only the billing records described above remain.
You may also ask us to access or correct your information, or complain about how we have handled it, by emailing info@deskali.com. If you are not satisfied with our response you can contact the Office of the Australian Information Commissioner at oaic.gov.au.
6. If you are a caller, not a customer
If you rang a business and DeskAli answered, the business you called controls that recording — not us. We hold it on their behalf. Ask them to delete it, or email info@deskali.com and we will put you in touch with them and act on their instruction.
7. Security
Data is encrypted in transit and at rest. Access to accounts is controlled by per-account rules enforced on the server, so one customer's records cannot be reached from another customer's session. Recordings are served through short-lived signed links rather than public URLs. Staff access is limited to what support requires and is logged. Access tokens for connected services such as Xero are encrypted at rest with AES-256-GCM under a key that lives only in the server environment, are never written to logs, and are revoked at the provider when you disconnect.
Face ID sign-in. If you choose to enable Face ID in the iOS app, Apple performs the face comparison on your device. DeskAli never receives, records or stores your face image, Face ID template or other biometric data. iOS uses Face ID to unlock a random DeskAli sign-in credential held in that iPhone's Keychain. The server stores only a one-way digest of that credential. Changing the faces enrolled on the device invalidates the Keychain credential. Signing out keeps Face ID ready for your next sign-in. When Face ID is enabled, DeskAli also asks iOS to verify you when the app opens or returns from the background. Choosing Disable Face ID in DeskAli revokes the credential.
8. Children
DeskAli is a business tool and is not directed at anyone under 16. We do not knowingly collect information from children.
9. Changes
If we change this policy we will update the date at the top, and provide an account notice before anything material takes effect.