She has rules, and they are visible.
An employee you cannot audit is a liability. Piper's limits are configured by you, enforced in the conversation, and written down afterward.
Hard guardrails
Discount ceiling, catalog-only pricing, no promised date the calendar cannot hold, no legal or medical advice, always a human on request.
Audit trail
Every refusal, escalation and booking is logged with the rule that fired and the exact wording used. Exportable as a monthly evidence pack.
Data handling
No card numbers or government IDs captured. Contact details captured for scheduling and follow-up only. Call recordings retained 90 days by default.
Human control
Take over any conversation mid-sentence, give it back, or pause Piper entirely from the top bar. Nothing she says is unattributable.
The plain facts
Data residencyUS region, encrypted at rest and in transit
RetentionTranscripts 24 months, recordings 90 days, configurable
AccessRole-based workspace access, per-user activity log
Sub-processorsListed in the workspace under Settings → Security
TrainingYour conversations are not used to train shared models
DeletionContact-level delete on request, purged within 30 days
Phone, calendar, email, CRM, and billing connections depend on each business's setup. Example workspace data is labeled.