Telephonist privacy

Updated 10 November 2026

This page explains how business details and private preview calls are shared with the Telephonist team. It supplements the Benaiah privacy notice, which explains the controller, legal bases, retention, your rights and how to contact us.

Business details

Business details and call synopses are shared with the Telephonist team.

When you enter a business website or complete the manual essentials form, we send the Telephonist team an email report containing the submitted business information. This can include your business name, website, services and published contact details.

Preview call reports

After a browser demo, an inbound demo call or a callback from your Telephonist, we use the conversation transcript to prepare a synopsis and email it to the Telephonist team. Reports can include what was discussed, requested follow-up, product feedback and call information such as its direction, duration and outcome.

The team uses these reports to operate and support the service, investigate issues and review the preview experience. A private preview is personalised to your business; it does not mean the conversation is visible only to you.

Phone interviews are recorded after a brief spoken notice, without a recording keypad choice. Browser interviews retain an unticked recording option. A written recap does not require audio recording. Voice and telephone providers process the audio needed to deliver the conversation. Avoid sharing sensitive customer details, passwords or payment-card information during a preview.

Setting up by telephone

You can call our public interview number to create a telephonist or resume a saved setup. We verify your email before revealing saved details. Your caller number alone does not grant access. Verified setup details and confirmed business information are saved for up to 30 days so you can return. Completed setups receive a private review link by email. A scheduled callback requires a separately verified mobile number and your confirmation.

The setup conversation uses live audio processing but is not recorded. If you continue into an interview on the same call, the telephonist gives its recording notice before recording starts. The interview recording and recap follow the delivery and retention arrangements below. Returning to a saved interview does not reset its shared interview allowance.

Public research during a demo

If you request public research or a calculation, Telephonist can send the necessary task details to OpenAI web search or an isolated OpenAI-hosted workspace. Do not include passwords, personal customer information or other sensitive details. This connection does not give the agent access to your accounts or permission to send emails, make bookings or make purchases. On activated business phone lines, public web search is off unless the business turns it on (healthcare providers cannot), and research tasks are never available.

We retain cloud-task details and checked results for up to 24 hours. We request deletion of the OpenAI session after completion or cancellation and retry if cleanup is pending. OpenAI’s Agents API currently processes and stores session data in the United States and is not eligible for Zero Data Retention. See OpenAI’s data controls for its retention policies.

Questions and requests

Read the full Benaiah privacy notice for the wider service’s privacy information. For questions about your business details or call reports, or to request access, correction or deletion, email privacy@telephonist.ai.

Interview recordings and audio emails

For phone interviews and browser interviews you choose to record, we email a playable audio attachment to your verified interview email and a separate copy to the Telephonist team through Resend. Phone audio is an MP3; browser audio is WebM, M4A or Ogg depending on your browser. The written synopsis is sent separately so it need not wait for audio processing. Browser recording captures your microphone and the telephonist’s playback; keep the page open after ending the interview while the audio uploads. No audio attachment is created for browser interviews where recording is not selected.

We use phone interview recordings to provide your replay and for internal staff training, quality monitoring, troubleshooting and service improvement. We rely on our legitimate interests in providing an accurate interview replay and evaluating the service. Internal training means human review of the service; we do not use these recordings to train or fine-tune AI models. Your selected live voice delivers the spoken notice. Recording starts after we check the generated notice audio and the phone provider confirms playback. Only the telephonist’s opening audio is held briefly in memory for this check; caller audio is not copied into it. You can end a phone interview before recording begins, use an unrecorded browser interview, or contact hello@telephonist.ai about an objection, access or deletion request. Requests are assessed under applicable data-protection rights.

We temporarily store consented browser audio privately and phone audio with authenticated Twilio access. We delete hosted interview audio after both email copies are accepted, or request deletion within 24 hours, retrying provider failures. Email delivery references are kept for up to 30 days. Emailed copies remain in recipients’ mailboxes until they delete them. Only share recordings where appropriate and avoid recording sensitive information.

Your connected teammates

If you enable human transfers during a phone interview, we store the teammates you add, their roles, verified mobile numbers and available hours with your private setup for up to 24 hours. Each number must be verified and the teammate must agree to receive calls. Before connecting a caller, we ring the selected teammate, play a brief introduction and require them to press 1. The caller is connected only after acceptance. Transfer legs are not recorded. Your phone provider processes the numbers, call routing and introduction needed to complete the call.

If a teammate cannot take the call, the caller can agree to save a message or callback request in your connected team inbox. This may include their name, preferred contact details and request. Messages and transfer outcomes are kept for up to 24 hours and removed on the next daily cleanup; access is through the same private setup. This does not send an email or text, guarantee a callback or activate a business phone line. Remove or disable a teammate to prevent new transfers. An already connected call may continue until someone ends it.

Your connected business mailbox

If you choose to connect a Google or Microsoft mailbox, we request sending permission and basic account identity, not permission to read your inbox. The connection is separate from Telephonist’s operator-reporting email service. During this limited test, a caller can ask the telephonist to prepare an email; the connected mailbox owner must review the recipient and message and choose Send before it is submitted to the provider.

We process the mailbox address and encrypted access credentials to maintain an interview connection for up to 30 days. For a permanent customer account, the connection remains until disconnected or access is revoked. Disconnecting removes our stored access credentials; you can also revoke the app in your Google or Microsoft account settings. Draft recipients, subjects, messages and send status are retained for up to seven days, with expired records removed on the next daily cleanup. Sent emails remain in your mailbox under your provider’s retention settings. The voice provider processes the conversation details needed to prepare the draft; mailbox credentials are never shared with the voice agent or cloud workspace.

Your connected booking calendar

Calendar access is optional and requires separate Google or Microsoft consent. We use the list of calendars to let you choose a booking calendar, read event times to check availability, and create or change appointments in that selected calendar. Other event titles and attendee details are not passed to the voice agent. You choose appointment length, hours and whether real actions are enabled. Changes through Telephonist require the caller’s private booking reference and are limited to appointments created through Telephonist. Calendar access does not grant inbox access. Calendar access alone does not send booking emails or texts. Optional booking texts on activated business lines are described below.

For interviews, account identity and encrypted access credentials are retained for up to 30 days. For permanent customer accounts they remain until disconnected or access is revoked. Booking references, provider event identifiers and action results are retained for up to 120 days; expired records are removed on daily cleanup. Uncertain action records are retained for investigation to prevent duplicate changes. Disconnecting removes our stored credentials; appointments already created remain in your calendar. You can also revoke access in your provider’s account settings. Calendar credentials are never sent to the voice agent or cloud workspace.

Voice setup on the homepage

If you choose voice setup, your microphone audio is streamed to OpenAI to hold the conversation. Your spoken business name and location may be used for a public web search to find your website. We ask you to confirm the proposed business before preparing your interview. We do not record the audio of this setup conversation. We use its conversation text to email a written synopsis to the Telephonist team, including if you stop before creating an interview, so we can review enquiries and improve setup. Verification codes are removed from reporting text. Pending summaries and their conversation text are retained for up to 24 hours, then deleted after the email provider accepts the report; delivery references remain for up to 30 days. A setup-only summary is not sent to you as an interview recap. Temporary setup identifiers and usage records expire within 24 hours. Business details you confirm then follow the private interview retention described above. During voice setup we collect your name, email address and chosen telephonist name, read them back for confirmation and send a verification code to that email. You can read the code aloud to verify it. If you choose a phone interview, we also collect your UK mobile number, read it back, and send an SMS verification code with your permission. You can read that code aloud too. We only request a callback after you confirm the verified number and the time; you can choose a browser interview without providing a number. Verified phone details follow your private interview’s retention. Founder testing uses a separate email-verified, revocable browser session lasting up to 30 days. Pending verification and the private handover expire after 10 minutes; verified details carry into your interview under the retention period described below. Temporary browser copies expire after 15 minutes. You can start or stop voice setup using either the orb or the composer button.

Your interview details and recap

Before an interview, we ask for your name, your email address and a name for your AI telephonist. We verify the email using a short-lived code, or, when you set up by email using the same address, through your reply to our private email thread. A different recap address still requires its own code. Your supplied names personalise the interview; they are not proof of anyone’s legal identity. Your email is used for verification and a separate interview recap, not automatic marketing enrolment. The Telephonist team continues to receive its own synopsis.

The recap contains a brief summary, rather than a full transcript. It goes only to the address verified for that interview. Email delivery uses our email provider, Resend. Details follow the private setup’s retention period; if you save your setup, they follow its disclosed saved-setup period. Verification codes expire after 10 minutes. Pending recap emails expire within 23 hours; delivery references are retained for up to 30 days. Creating an interview does not create an account or activate a business phone line.

Activated business phone lines

For an activated business line, we keep the business profile, job description, chosen voice, account email and connected teammates to operate the service. We verify account ownership using the checkout email. Each business manages its own settings, callers and integration permissions. We do not reuse a private interview number as a customer's permanent number.

Callers are told they are speaking to an AI telephonist and that a written summary is shared with the business. Captured conversation text and call summaries are available privately to the account owner for up to 30 days. We email a synopsis to that business's verified account email through Resend. Call-routing and usage records are retained for up to 120 days; billing records follow the Benaiah privacy notice. The Telephonist team may access necessary information to support the service, investigate failures and prevent abuse. Automated transcripts and summaries can be incomplete or inaccurate.

Permanent-account teammates remain connected until removed or disabled. Each must consent and verify their number. A transferred caller is connected only after the teammate presses 1. Messages and callback requests in the permanent account remain for up to 30 days; transfer status records remain for up to 24 hours. Saving a callback request does not guarantee a callback time.

Setting up by email

Email hello@telephonist.ai to ask questions or prepare a private interview. Cloudflare receives and forwards incoming mail to the Telephonist team, OpenAI processes conversation text and approved document content, and Resend sends replies from our official address. We keep temporary email setup threads, attachments and processing records for up to 24 hours. Attachments are only read into business knowledge after you confirm. Supported formats are PDF, plain text, CSV, PNG, JPEG and WebP, up to six files and 4.5 MB total. Original files are deleted from temporary processing storage after extraction; confirmed business notes follow saved-setup retention. Copies in email inboxes remain subject to the mailbox owner’s retention.

We verify the recap email before preparing an interview. A callback additionally requires verification of the UK mobile number by SMS and confirmation of its number and time. An email address alone does not authorise access to an existing customer account, payment, phone routing, or calendar and mailbox connections. These use the existing owner verification flows. Email setup does not enrol you in marketing. Reply STOP to end setup replies and cancel a pending setup callback, or contact support@telephonist.ai.

Setting up by text

You can text our public UK onboarding number to describe your business, choose a telephonist and arrange a private interview. We process your messages, mobile number, business details, chosen names, verified email and delivery status using Twilio and OpenAI. Text setup progress and message processing records are retained for up to 24 hours so you can pause and continue. Verification codes expire after 10 minutes. Completed saved setups and emailed review links follow the saved-setup retention above. For a callback to the number you are texting from, we verify the incoming message with Twilio instead of sending a code back into the same conversation. A different callback number requires an SMS verification code. Email verification and your confirmation of the callback number and time are still required; texting us alone does not authorise a call. Reply STOP to stop texts and cancel a callback that has not started; START resumes texts. These service messages do not enrol you in marketing. Your mobile network may charge for messages you send.

Booking texts

When a business enables booking texts, callers can choose to receive a confirmation and one reminder 24 hours before an appointment. We send texts through Twilio only after a confirmed calendar action, subject to the business's message allowance. Bookings less than 24 hours ahead receive a confirmation only. We check for changes and cancellation before sending reminders. Delivery can fail, so a confirmed appointment does not guarantee a delivered text.

We process the recipient mobile number, appointment time, business name, booking reference and message delivery status. Reply STOP to stop booking messages from that business; reply START to resume. These are service messages, not marketing subscriptions. Delivery records and opt-out preferences are kept to operate the service and honour opt-outs. Contact us to request access or deletion.

Text conversations and connected tools

If a business turns on text replies, its Telephonist answers texts sent to the business’s Telephonist number. We use the customer’s mobile number and messages to reply, keep the conversation for 30 days and email it to the business. Replies come from an AI assistant and say so at the start of each conversation. Customers can reply STOP at any time, and we never use these texts for marketing.

A business can also connect Slack, HubSpot or a webhook of its choice. After each call we send that tool the call summary, the call’s time and length and the caller’s last four digits. HubSpot, and a webhook if the business chooses, also receive the caller’s full number so the business can follow up. The business chooses these tools and is responsible for its lawful basis and for telling its callers. Each tool keeps its copy under its own terms. Connection details are encrypted, and we delete them when the business disconnects.

Optional business call recordings

Audio recording is off by default. If an activated business enables it, the selected live telephonist voice gives a brief recording notice within its opening greeting, saying the call is recorded so the business has an accurate record, without a recording keypad choice. Recording begins after the notice and a beep. Recording stops before a transfer to a human; the human leg is not recorded and recording does not restart if the call returns to the AI.

Twilio stores the recording with authenticated access. The account owner can play or delete it through their private Telephonist account. They can also enable recording emails for future recorded calls, or request an email copy of an existing authorised recording. MP3 attachments go only to that business’s verified account email through Resend, separately from the written summary. Emailed copies remain in the recipient’s mailbox and are not removed when a hosted recording is deleted. We request provider deletion after 30 days and retry failures. A deletion request may take time to complete. Each business is responsible for its lawful basis, caller notices and handling recording objections or alternative contact arrangements. The business controls its recordings; this setting does not authorise Telephonist to reuse customer-business audio for AI model training. Do not share payment-card details, passwords or other sensitive information during a call.

Who processes data and where

We use these providers to run Telephonist. Each is bound by a data processing contract. We never use calls or messages to train AI models, and OpenAI does not train its models on data sent through its API.

Businesses that use Telephonist are covered by our data processing terms below, which list these sub-processors, their safeguards and how we tell you about changes.

Ask our Telephonist

Questions you type into Ask our Telephonist are sent to Anthropic, whose AI answers them, and to our team as a WhatsApp notification with your approximate location (city or country), so we can see what people ask. We keep answers to first questions for up to 7 days so the same question is answered quickly next time. We don’t link questions to who you are. Please don’t include personal details.

Business contacts we email

We sometimes email businesses we think Telephonist could help. We use the business name, website and contact email that the business publishes on its own website, together with public Companies House records. We rely on our legitimate interest in telling relevant businesses about our services. We send no more than three emails and stop as soon as you reply. To stop all contact, reply “no thanks” or email support@telephonist.ai: we’ll add your address to a do-not-contact list, which we keep only to make sure we never email you again. We delete details of businesses that haven’t replied after 12 months.

Introductions

If you introduce a business, we save your name and email, the business name and website, your confirmation to save, and an introduction reference. A business confirmation records its representative’s name, email and submission time. Our team uses these details to verify attribution, check payment and retention eligibility, resolve conflicts and administer rewards. Submitting a business does not authorise marketing contact. Introduction records and reward evidence are available only to authorised operators, with billing evidence retained as needed for programme administration, accounting and disputes. Do not submit bank or card details in the form or by voice. Contact hello@telephonist.ai to correct your details or ask about deletion, subject to records we must retain.

Our commitment to customers

Published 2 November 2026

Benaiah AI Ltd runs Telephonist. Whether you hire a Telephonist, call one or receive a call from one, this is what we promise.

Feedback and complaints

To give feedback or make a complaint, email support@telephonist.ai. Tell us what happened and when, and for a call, its reference or the number involved. We review every complaint, and where we’ve got something wrong, we put it right.

Accessibility

Read our accessibility statement for how we make the website and our phone service accessible, and how to tell us about a problem.

Data processing terms for businesses

Effective 17 October 2026

These terms apply when a business uses Telephonist to answer, make or follow up its calls and texts. They form part of the Benaiah AI terms and meet Article 28 of the UK GDPR. If they conflict with the main terms on personal data, these terms win.

1. Who does what

You are the business that uses Telephonist. You are the controller of the personal data of your callers, customers and team that Telephonist handles for you.

We are Benaiah AI Ltd, registered in England and Wales (company number 17403584), 167–169 Great Portland Street, 5th Floor, London W1W 5PF, trading as Telephonist. We process that data as your processor.

We are a controller, not your processor, for your account and billing details, for proving our own calls (Telephonist ID and call checks), for security and fraud prevention, and for meeting our legal duties. The rest of this privacy notice covers that processing.

2. What we process for you

Purpose and nature. Answering and making calls in your business's name; transcribing them; writing call summaries; booking, changing and cancelling appointments in a calendar you connect; replying to texts sent to your number, if you turn that on; searching the public web for a fact a caller asks about, if you turn that on; passing calls and messages to your team; recording calls, if you turn that on; and sending summaries, recordings and messages to you and the tools you connect.

People. Your callers and customers, the people your Telephonist calls for you, and your owners and team members.

Data. Names, phone numbers and email addresses; call audio, recordings, transcripts and summaries; text messages; appointment details; the reason for a call and anything a caller chooses to say.

Special category data. Callers may mention their health or other sensitive matters. Telephonist is not a clinical or emergency service. Don't instruct it to collect special category data unless you have a lawful basis and a condition for doing so.

Duration. While you use Telephonist, and then until deletion under section 9.

3. Your instructions

We process your personal data only on your documented instructions. Those are these terms, the main terms, your Telephonist's settings and job description, and anything else you ask in writing. The only exception is where UK law requires otherwise; we'll tell you first unless the law forbids it.

We'll tell you if we think an instruction breaks data protection law. You're responsible for having a lawful basis, for giving your callers the information they need (including about recordings), and for handling objections to recording.

We never use your call audio, recordings, transcripts or messages to train AI models, and our AI provider, OpenAI, does not train its models on data sent through its API. We never sell your data or use it for advertising.

4. Confidentiality

Only people who need access to run, support or secure the service can see your data, and each is bound by confidentiality. When a call is passed to our human backup, they receive the live call and a short reason, never your account.

5. Security

We keep appropriate technical and organisational measures in place, including:

  • encryption in transit (HTTPS and secure WebSockets) for every connection between Telephonist, you and our sub-processors;
  • signature checks on every call and text event from our telephone provider, so forged events are refused;
  • each business's records kept separate by account and shown only to that business's signed-in owners;
  • secure account session cookies, with sign-in by verified email;
  • encryption of the credentials you give us for calendars, mailboxes and connected tools, and you only ever see a hint of them;
  • AI requests sent with provider storage switched off wherever the provider allows it;
  • recordings only after a spoken notice is confirmed, kept privately, with deletion requested from our provider after 30 days;
  • logs that hold event names and timings only, never call content, numbers or names;
  • no public web search on your customers' calls unless you turn it on, which healthcare providers cannot do, and never any research tools;
  • when web search is on, searches use a few general words, never a caller's name, number or personal details.

We review these measures as the service changes and may improve them, but never lower the overall level of protection.

6. Sub-processors

You give us general authorisation to use the sub-processors below. Each is bound by a written contract with data protection obligations at least as protective as these terms, and we remain responsible to you for their work.

Sub-processorWhat forDataLocationTransfer safeguard
Cloudflare, Inc.Hosting, storage of your account and call records, website, inbound emailAll service dataUnited States and Cloudflare's global networkUK Extension to the EU–US Data Privacy Framework; EU standard contractual clauses with the UK Addendum as a fallback
Twilio Inc.Phone numbers, calls, transfers to your team, optional recordings, textsPhone numbers, call audio in transit, recordings if on, text messagesUnited StatesUK Extension to the EU–US Data Privacy Framework; EU standard contractual clauses with the UK Addendum (Twilio data protection addendum) as a fallback
OpenAI OpCo, LLCThe live AI voice, transcripts, call summaries, text replies, checking the recording notice, and web search if you turn it onCall audio, transcripts, your business details and instructions, text messagesUnited StatesEU standard contractual clauses with the UK International Data Transfer Addendum (OpenAI data processing addendum)
ResendEmail delivery: call summaries, recordings if you choose, account emailsEmail addresses, summaries, recordings if onUnited StatesUK Extension to the EU–US Data Privacy Framework
Axiom, Inc.Service monitoringEvent names, timings and call identifiers onlyEuropean Union (Frankfurt); Axiom is a United States companyHosted in the EU, which the UK treats as adequate; Axiom data processing addendum
Neon, Inc.Short-term service event logEvent names, timings and call identifiers; for businesses trying Telephonist, also their name, website and published details and the summaries we email them after demo calls and set-up interviews; deleted after one dayUnited Kingdom (London), on Amazon Web ServicesNeon is a United States company: EU standard contractual clauses with the UK Addendum (Neon data processing addendum)

Tools you connect are yours, not our sub-processors. If you connect Google or Microsoft calendars or mail, Slack, HubSpot or a webhook, we send data there on your instruction. Those providers act for you under your own agreements with them.

Changes. We'll give you at least 30 days' notice of a new or replacement sub-processor by email to your account address and on this page. You can object on reasonable data protection grounds by emailing hello@telephonist.ai. We'll try to resolve it; if we can't, you can end the affected service without penalty before the change.

7. International transfers

To run Telephonist, your data is processed in the United States and other countries outside the UK by the sub-processors above. We transfer it only under a safeguard the UK GDPR recognises: the UK Extension to the EU–US Data Privacy Framework, the UK International Data Transfer Addendum to the EU standard contractual clauses, or binding corporate rules. We've assessed these transfers and keep that assessment up to date. You can ask us for a summary.

8. Helping you

  • People's rights. We'll help you answer requests to access, correct, delete or restrict data, and pass on any request we receive about your data without answering it ourselves unless you ask us to.
  • Breaches. We'll tell you without undue delay, and within 24 hours of becoming aware, of a personal data breach affecting your data, with what we know and what we're doing about it, and keep you updated.
  • Assessments. We'll give you the information you reasonably need for a data protection impact assessment or a consultation with the Information Commissioner.

9. Retention and deletion

While you use Telephonist, transcripts and summaries are kept for 30 days, call records for 120 days, and we request deletion of recordings from our telephone provider after 30 days, unless you delete them sooner. When you close your account, we'll delete your personal data, or return it first if you ask, within 30 days of your written request, unless the law requires us to keep it. Copies already emailed to you stay in your mailbox until you delete them.

10. Audits

We'll give you the information you reasonably need to show we meet these terms. If that isn't enough, you may audit us, or have an independent auditor bound by confidentiality do so, once a year with 30 days' notice, at your cost, in a way that doesn't expose other customers' data.

11. General

Liability under these terms is subject to the limits in the main terms. We may update these terms to reflect changes in the law or the service, with 30 days' notice of any material change. These terms are governed by the law of England and Wales, and the courts of England and Wales have jurisdiction.

Questions: hello@telephonist.ai.

Website analytics

With your permission, Benaiah AI Ltd uses Google Analytics to understand visits to Benaiah.ai and Telephonist.ai. Analytics is optional and is not loaded until you choose Accept analytics. Google receives page views, device and browser information, and an analytics cookie identifier. We remove URL query strings and fragments from page addresses sent by this integration and do not enable advertising signals or advertising personalisation.

Your choice is saved on this website for up to 180 days. You can decline or withdraw permission using Analytics settings on this privacy page. Withdrawing stops further collection by this integration and removes its Google Analytics cookies from this website. It does not erase data already collected. This choice does not change essential service functionality or the existing operational visit tracking.

Analytics cookies expire after 180 days, subject to renewal by subsequent permitted visits. Google processes data under its privacy policy. For privacy requests, contact ben@benaiah.ai.

Signed calls and World ID

Each call we place on someone’s behalf carries a signed statement and a short reference. It says that an AI placed the call for a Telephonist customer, whether the account is paid, whether a verified person backs it, and that Benaiah AI Ltd is accountable. It never contains your name, number, instructions or transcript. A business that enters the reference with the number we called at telephonist.ai/check can read the statement, report the call or ask us not to call again. Statements expire after 30 days.

If you verify with World ID, World App sends us a cryptographic proof that you are a unique person. We never receive your face, images, name or documents. We keep a keyed hash of the proof’s one-way identifier, so that one person backs one account and a ban applies to every account a person holds, plus the credential type, the time and, for a selfie check, the score World attaches. World processes the verification in World App under its own privacy notice. To remove your verification, contact support@telephonist.ai.

If you set front-desk rules for a business number at telephonist.ai/front-desk, Twilio Verify sends a one-time code to that number by text or call. We keep a hash of the number, its last three digits, the rule you chose and when, and use them only to decide whether to place AI calls to that number. To remove a rule, contact support@telephonist.ai.

We link the accounts, wallets and verifications that belong to the same customer into one internal record, so we can stand behind each call and act on misuse. Each call’s statement also records the customer’s level (account, paying customer or verified person) and what they approved: when, the purpose category, the limits and a fingerprint of the instructions, never the instructions themselves. Businesses never see who the customer is. We disclose it only to the police, courts, regulators or our payment processor where there is a lawful basis, or to the customer on request, and we log every such request. If misuse is confirmed we may withdraw a call’s statement and suspend every account the person holds.

Telephonist ID: passport and face check

Telephonist ID is our iPhone app for verifying who you are. It reads the chip in your passport: your name, date of birth, nationality, document number and expiry date, your photo, and the issuing country’s signature over them. It then checks that a live face is in front of the camera, in 3D, and compares it with the photo from the chip. The face check and the comparison happen on your iPhone. Your face, the camera images and your passport photo never leave it, and we never receive or keep them.

The app sends us the chip’s signed data without the photo, and the result of the face check: whether it passed, a similarity score and a fingerprint of the photo it compared. Apple confirms that the result came from our unmodified app. We check the issuing country’s signature and Apple’s confirmation. We then keep only keyed fingerprints of your name and date of birth, plus the issuing country and the time. We use them so that one passport identifies one person and so that a call can say the name you give matches your passport. We do not keep your name, date of birth, nationality, document number or any other passport data in readable form, and businesses never see any of it.

The face comparison uses biometric data, so the app runs it only with your explicit consent, which you give by starting the face check. You can stop at any time. We rely on your consent for the face check and on our legitimate interest in preventing fraud and standing behind every call for the rest. To remove your identification, contact support@telephonist.ai.