Security

Your phone line is your business. We treat it that way.

Here's exactly how cheaply protects your calls, customers, and account — plainly stated, including the things we don't claim yet.

Encrypted in transit

Every connection to cheaply — the site, the dashboard, the APIs — runs over HTTPS/TLS. Calls and texts travel on the carrier and telephony networks that already move your phone traffic today.

One business, one boundary

Your customers, calls, and jobs are scoped to your business account. Every dashboard request and API route re-checks that the signed-in user owns the business it's asking about — the checks that stop one tenant from ever seeing another's data.

We never hold your card

Billing runs on Stripe. Your payment details live in Stripe's PCI-DSS-compliant vault — cheaply's own database stores no card numbers, ever.

Signed webhooks only

The events that drive your front desk — call updates, texts — are cryptographically verified (HMAC signatures) before we act on them, so forged events get dropped at the door.

Real authentication

Dashboard sign-in uses salted password hashing and secure session cookies, with rate limits on login, signup, and password-reset endpoints to blunt brute-force attempts.

Error monitoring, minus your data

We track application errors (Sentry) so we can fix problems fast — configured around diagnosing failures, not harvesting customer content.

Small, boring attack surface

cheaply is deliberately self-contained: no third-party plugin marketplace, no OAuth sprawl, no browser extensions. Fewer moving parts means fewer places for something to go wrong.

Tell us if you find something

Found a vulnerability? Email support@cheaply.ai and a human will read it. We take reports seriously and respond quickly.

Who else touches the data

The short sub-processor list.

Running an AI front desk takes a few best-in-class providers, each doing one job: voice AI to answer the calls, telephony to carry calls and texts, Stripe for payments, cloud hosting for the app, and error monitoring to keep it reliable. Each sees only what its job requires — and none of them get to sell it.

Security FAQ

Fair questions.

Who can hear my call recordings?
You and the people you've given dashboard access to your business. Recordings exist so you can review what was said on your own calls — they're scoped to your account like everything else.
Are you SOC 2 certified?
Not yet — that's an honest no. cheaply is a young product, and we'd rather tell you exactly what we do (encryption in transit, tenant isolation, signed webhooks, Stripe-held payments) than wave a badge we haven't earned. Certification is on the roadmap as we grow.
Where does my data live?
In cheaply's application database, scoped to your business, on managed cloud infrastructure. Payment details are the exception — they live only in Stripe's vault.
Can I get my data out?
Yes. Your customers, jobs, and call history are yours — contact us and we'll export them for you. If you cancel, forwarding is undone in two minutes and your number keeps working exactly as before.
Does the AI train on my calls?
No. Your calls are used to run your front desk — answering, booking, and logging for your account — not as training material we harvest across customers.

Your phone, answered — starting tonight.

Never lose another call to a ringing phone. Live in a day, no contracts.

Get startedSee it book a job
Live in a day · No contracts · Keep your number