How we handle your data
A factual summary for security and compliance review.
Data Residency
All session data — voice recordings, transcripts, and performance scores — is stored in MongoDB Atlas, hosted in the Mumbai, India region (ap-south-1). Data does not leave this region at rest.
Retention & Deletion
Voice data captured by ElevenLabs during practice sessions is automatically and permanently deleted 90 days after the session, via a daily automated purge job we run ourselves — stricter than ElevenLabs’ own default 180-day inactivity retention window. Account information is retained only for as long as your account remains active.
Consent
Every voice session is preceded by a consent screen, compliant with India’s Digital Personal Data Protection Act (DPDP), 2023. No recording begins until consent is given for that session.
Sub-processors
These are the only third parties with any access to your data, each limited to the specific purpose below.
Security Practices
- ✓Role-based access control — reps see only their own data; managers see only their own organization
- ✓CORS locked to an explicit origin allowlist, not left wide open
- ✓X-Frame-Options: DENY enforced site-wide to prevent clickjacking
- ✓Session scores are independently re-derived from the transcript server-side, never trusted from the client alone
Data Deletion Requests
To request deletion of your personal data — including voice recordings, transcripts, and performance scores — contact privacy@repready.site. See our Privacy Policy for the full disclosure.