DATA & SECURITY

Where data is stored, which providers process it, and how to delete it

This page states only the verified technical facts of how AiWebLifting stores, processes, retains, and deletes data today.

1. Where data is stored

Application servers (Google Cloud Run) and the primary database (Google Cloud Firestore) run on Google Cloud infrastructure in region us-central1 (United States). Transfers for European Economic Area and UK customers are governed by the Google Cloud Data Processing Addendum (DPA) and EU Standard Contractual Clauses (SCCs). All traffic is encrypted in transit via HTTPS/TLS and encrypted at rest by Google Cloud.

2. Infrastructure & AI providers that process data

Google Cloud & Google Gemini API

Application hosting (Cloud Run), tenant knowledge & conversation storage (Firestore), and paid Gemini API endpoints for text, voice, and search embeddings.

Stripe

Subscription checkout, payment processing, and customer billing portal. Full payment card numbers never touch AiWebLifting servers.

Resend

Transactional email delivery (lead notifications to the website owner, demo links, and usage threshold alerts).

Twilio

Voice telephony and SMS routing only where phone call or SMS workflows are enabled.

3. How long conversation transcripts are kept (90 days)

Conversation transcripts are retained for 90 days (configured in code via TRANSCRIPT_RETENTION_DAYS = 90) before expiry. Public website pages and PDFs indexed for your AI Receptionist remain in your isolated tenant workspace while your demo or subscription is active.

4. How to delete data

  • Website owners can sign in to their dashboard (/dashboard) to review and delete captured leads, transcripts, or custom memory notes.
  • To permanently delete an entire workspace, demo index, or specific conversation before the 90-day retention window ends, email contact@aiweblifting.com.
AI RECEPTIONIST