Security, privacy and where your data lives
MAVRK answers your phone and holds your customers’ details, so you should be able to check exactly how that works. This page states what is true today — not what we intend to build.
Your data stays in Australia
Your records — call transcripts, bookings, customer details and uploaded files — are stored in AWS data centres in Sydney (ap-southeast-2) and stay there. One exception, stated plainly because it matters: while a call is happening, the audio and transcription run on our voice providers in the United States. Nothing about that call is stored outside Australia once it ends.
Your workspace is isolated
Every business gets its own tenant. Records are scoped to your tenant on every read and write, so one business can never see another’s customers, calls or files.
Encrypted in transit
Traffic to MAVRK, and between MAVRK and the services it calls, runs over TLS. Credentials for connected accounts are held in AWS Secrets Manager, never in application code.
Australian Privacy Act 1988
We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs 1–13). Our Privacy Policy sets out access, correction and complaint rights, including escalation to the OAIC.
You can delete it
You can reset your workspace or delete your account entirely, which removes your tenant data. Call recordings are retained for 30 days by default unless you ask for longer.
If the AI can’t answer, your phone rings
If anything goes wrong on our side mid-call, the call is transferred to your own mobile rather than hung up. An outage costs you a normal phone call, not the customer. You keep your existing number the whole time and can switch forwarding off with one code.
You own your content
Your app content, prompts, business files and customer records are yours. We host and operate the infrastructure; we do not sell your data or use your customers’ personal information to train models for other businesses.
Call recording and consent
Your AI receptionist transcribes calls so you get a summary and the customer’s details. Recording and monitoring laws in Australia differ by state and territory, and the obligation to comply sits with your business as the operator of the line.
- Tell callers at the start of the call that it is being recorded or transcribed — you can put this straight into your greeting.
- Some states require the consent of every party, not just one, so a disclosure at the start is the safe default.
- Recordings are retained for 30 days by default; ask us if you need a different period.
- You can turn transcription off for a number if you would rather not keep them at all.
This is general information, not legal advice. If you operate in a regulated field — health, legal or financial services — check your own obligations before going live.
Who else touches your data
MAVRK runs on these providers. We list them so you can assess them yourself rather than take our word for it.
| Provider | What it does |
|---|---|
| Amazon Web Services | Hosting, storage and databases (Sydney) |
| Twilio | Phone numbers, calls and SMS |
| OpenAI | Conversation and speech-to-speech voice (United States, during the call) |
| ElevenLabs | Text-to-speech voices (United States, during the call) |
| Deepgram | Speech transcription (United States, during the call) |
| Stripe | Subscription billing and customer deposits |
| Meta (WhatsApp, Messenger, Instagram) | Messaging channels, where you connect them |
What we don’t claim
MAVRK is an early-stage Australian company. We do not hold SOC 2, ISO 27001 or HIPAA certification, and we will not imply otherwise. If your procurement process requires a certification we don’t have, tell us and we’ll say so plainly rather than waste your time.