Who we are
CTnode. provides the public website and receptionist service described here. Privacy questions and requests can be sent to hello@ctnode.com.
Information we handle
Depending on how the service is configured, we may handle:
- business owner and authorised staff account details;
- caller names, phone numbers, site addresses and booking preferences;
- service or job details, urgency, messages and follow-up notes;
- call transcripts, summaries and recordings where recording is enabled;
- booking, calendar, notification, dashboard, support and security records.
Why we handle it
We use this information to provide and secure the agreed receptionist service: answering calls, collecting job details, taking messages, making supported bookings, handling approved changes, escalating calls, sending transactional updates, displaying authorised dashboard records and troubleshooting incidents.
Call notice and AI disclosure
The configured opening identifies the receptionist as AI and states when a call is recorded and transcribed. The client business must not ask us to hide the AI identity or remove an agreed recording and transcription notice.
Service providers
We use specialist providers to operate the service, including telephony, voice AI, hosting, database, private file storage, email, SMS and calendar providers. Current providers include Twilio, ElevenLabs, Vercel, Neon, Resend and Google. Relevant call content and service metadata may be processed through these providers only as needed to provide, secure, support and troubleshoot the service. Some processing may occur outside Australia.
Retention
Retention depends on the service configuration and agreement with the client business. In the current controlled-beta posture we automatically delete stored call audio after up to 30 days and call transcripts after around 90 days. Other records that can contain customer details — such as bookings, customer contact details, call summaries and message logs — do not currently have a fixed automatic deletion schedule. Their retention and deletion are handled under the client agreement and any applicable legal, billing or security obligations. Privacy requests can be sent to the contact below; we verify identity and coordinate with the relevant client business before acting.
Security and access
Controls include authenticated provider webhooks, server-side tenant binding, business-scoped dashboard access, multi-factor authentication, private storage where enabled, access controls, secret scanning and incident-response procedures. No internet service can promise absolute security.
Access, correction and complaints
To ask about personal information, request access or correction, or raise a privacy concern, email hello@ctnode.com. We may need to verify identity and coordinate with the relevant client business before acting on caller data.
Changes
We may update this notice as the product, providers or legal requirements change. The current version and update date will remain available on this page.