What we hold,
and what we never open.

For every call arriving at your environment: the caller’s number, the number of yours they dialled, the time, whether a person answered, and how long they spoke.

We do not keep, and cannot produce, what was said.

Where a name is publicly associated with a number in the carrier caller-ID databases we may look it up once and keep the answer, so your team sees a name rather than ten digits.

Once per number, never per call. Where the databases hold no name — which is most mobile numbers — we record that there is none and never ask again.

Lives on your own environment and is played from your own handsets. Command shows you that messages are waiting; it does not open them, and neither do we.

When Rescue returns a call we write a receipt at the moment of the decision: the inbound call that authorised it, the gap between their call and ours, the policy in force, and the exact words spoken. Kept so “why did you ring me” always has an answer.

Rescue only ever returns a call the person themselves placed to that business, within hours of it. It is not a dialler and works from no list — see Trust & Calling Practices.

Checked before any call is placed. If it cannot be read, no call is placed at all. A stop applies everywhere — somebody telling us to stop is not telling one shop.

Command authenticates against your JOVE identity. Sip2Me stores no password of its own, so there is no password of yours here to be stolen.

We record who signed in and what they changed — switching Rescue on, editing what is said, adding a number to the stop list. Decisions that affect other people should carry a name.

If you ask Sip2Me to telephone you, we take the number you type, confirm it belongs to you by text, and ring it once. It is not added to any marketing list.

A telephone call cannot happen without a carrier. Placing and receiving calls necessarily discloses the numbers involved to the networks that carry them, as it does for every telephone in the world.

To turn a number into a name we send that number to a caller-ID database provider. The number and nothing else — not who they called, not when, not why.

There is no arrangement to share call records with advertisers, data brokers or analytics platforms, and we are not looking for one.

We will disclose records if a court validly requires it. If we are permitted to tell you that this has happened, we will.

While you are a customer, because they are your business records. On request we will export them to you and delete our copy.

At least two years. They are the evidence a call was permitted; destroying them early removes the protection they exist to provide, for you and for the person called.

Indefinitely, and deliberately. It is the one record we will not delete on request, because deleting it would mean forgetting that somebody asked never to be called.