Security & Data Handling
Last updated: October 5, 2026
This page describes our approach in plain language. It is a summary, not a certification.
1. What we do
- Encryption in transit. This website and the connections used to run the Service use HTTPS/TLS where supported by the provider.
- Least-privilege access. Only people who need customer data to deliver or support the Service can access it.
- Retention limits. Call recordings and transcripts are deleted after 90 days unless you ask otherwise in writing.
- Vetted providers. We use established infrastructure, telephony and AI providers and share only the data needed to provide the Service.
- Answers from your information. The AI is configured to answer from the knowledge base you approve and to take a message or hand off when it does not know.
2. Health information (HIPAA)
Auranex is built to handle scheduling and basic enquiries. We do not claim HIPAA compliance, and we are not a business associate unless we have signed a written Business Associate Agreement with you. If you are a covered entity (for example a dental practice or medical spa) and need a BAA, tell us before onboarding so we can confirm in writing what is and is not possible. Do not configure the AI to collect diagnoses, treatment history or insurance details unless we have agreed that in writing.
3. Payment data
The AI does not take card numbers over calls. Subscription payments are handled by a third-party payment processor, and we do not store full card numbers.
4. Reporting a security issue
If you believe you have found a vulnerability or a data issue, email kkgmedia1@gmail.com with details. We will acknowledge it and look into it promptly.
5. No guarantee
No online service can promise perfect security. We will notify affected customers of a confirmed breach affecting their data as required by law.