Security & Data Protection

Data Flow & Infrastructure Architecture

Depending on enabled functionality, business call information follows an orchestrated and protected path:

Nodzo utilizes trusted cloud providers such as Supabase, AssemblyAI, OpenAI, Google Gemini, and Firebase as part of this process.

Access Controls & Isolation

Nodzo is designed around organization-managed accounts. Authorized company administrators create and manage employee or agent accounts. Access to company call data is restricted strictly according to authenticated credentials and organizational permissions. Users are responsible for protecting their login credentials and should immediately report any suspected unauthorized access.

Data Transmission Encryption

Nodzo uses modern network security standards (TLS 1.3 encryption) where supported and appropriate to protect information transmitted between mobile devices, Nodzo infrastructure, and third-party service providers.

Transcripts and Analysis Retention

Call transcripts, AI-generated analysis, call metadata, phone/contact information, and related business records may remain stored until the relevant organization or account requests deletion via our Account & Data Deletion process.

Third-Party Processing

Nodzo uses specialized providers to operate portions of its infrastructure and AI pipeline. Depending on the feature being used, information may be processed using:

• Supabase (Data Storage)
• AssemblyAI (Speech Recognition)
• OpenAI (Analysis & Evaluation)
• Google Gemini (AI Models)
• Google Firebase / Crashlytics (Diagnostics)

We select service providers based on technical requirements and seek to limit information provided to what is reasonably necessary for the relevant processing. Business data is not sold to advertisers.

Android Device Permissions

Nodzo may require access to sensitive Android functionality to provide business call intelligence features. Depending on the device and enabled features, this may include access to call information, phone state, audio/media files, notifications, and background processing.

Nodzo provides disclosures and requests applicable permissions before accessing sensitive functionality where required. Users may revoke Android permissions through their device settings at any time, although doing so may prevent related Nodzo functionality from working.

Account Security Responsibilities

Users and client administrators are encouraged to adhere to key security hygiene principles:

• Keep account passwords confidential and avoid credentials sharing
• Use organization-approved, passcoded devices
• Keep operating systems and the Nodzo mobile application updated
• Immediately report suspected unauthorized access to support@nodzo.ai
• Sign out of devices no longer under organizational control