Your data, isolated and yours

Every property's data is fully isolated. One property's conversations, transcripts, and analysis are never visible to another — that boundary is enforced on every request, not just in the interface.

Each property's data is partitioned separately and is never commingled with another's. As Quipira grows to more properties, every property's data stays in its own partition, with access scoped to that property alone.

We store your data in the region you choose. If your operation or guests require data to remain in a particular geography, we will provision your property's storage in that region.

You own your data and can ask us to delete it. On request, we will permanently remove your property's data from our systems — including backups and replicas — within a reasonable, agreed timeframe.

While your account is active, we retain conversations and their analysis so your team can review trends over time. You can request export or deletion at any point.

We keep enough redundancy and regular backups to recover your data and meet reliability and compliance needs. This protects your records against loss while keeping them within the same isolation and region guarantees described above.

Access is enforced per property on every request — there is no path for one customer to reach another's data.

Sensitive credentials and keys stay on our servers and are never shipped to the browser. Data is encrypted in transit between you, Quipira, and the services we rely on.

We rely on a small set of trusted providers to run Quipira. Each only processes the data needed to deliver its part of the service:

You can ask us what data we hold about your property, request a copy, correct it, or have it deleted. We will respond to any such request promptly and confirm once it's done.

Questions about privacy, data isolation, or a specific request? Email us and a person will reply.