Security

Your data is isolated by company

Every table in our database has row-level security (RLS) turned on. Each query is checked against the company of the signed-in user. Another CallScope account can't read your data, even by guessing an ID. Uploaded files (audio, video, photos, drawings) sit in private storage that only your company can read.

Inside your company, roles (owner, admin, member) control who can manage billing, team members, and settings.

Encryption

• In transit: all traffic between your browser or phone and CallScope uses HTTPS (TLS).
• At rest: the database and file storage are encrypted with AES-256 by our infrastructure provider, Supabase.
• Connected-app tokens (Jobber, QuickBooks) are stored server-side and never sent to your browser.

AI and your data

We use each AI provider's paid, commercial API. Under those terms, providers may not use your data to train or improve their models. CallScope doesn't train models on your data either. What you teach CallScope (pricing, terminology, rules) is used only for your own company's estimates.

Providers may keep requests for a limited time to detect abuse, then delete them. The full list of service providers is in our Privacy Policy.

Sign-in and access

• No passwords to steal: sign in with an email magic link, Google, or a one-time code by text.
• Payments run through Stripe (and Apple or Google for in-app purchases). Card numbers never reach our servers.
• Webhooks from Stripe and other services are verified by signature before we act on them.
• Secret keys stay on our servers. Our internal admin tools are restricted to an allowlist.

Deleting your data

You can delete your account in the mobile app under Settings, or by emailing admin@bluecollartechie.com. Your company's data is deleted within 30 days, except where the law requires us to keep it. We never sell your data.

Compliance

CallScope runs on infrastructure from providers that hold SOC 2 Type II reports, including Supabase, Render, Stripe, Anthropic, OpenAI, and Google. CallScope itself is not SOC 2 certified yet. If your company needs a security questionnaire filled out, email us and we'll work through it with you.

Report a security issue

If you think you've found a vulnerability, email admin@bluecollartechie.com with the details. We will acknowledge it quickly and keep you updated while we fix it. Please don't access other customers' data or disrupt the service while testing.