Security & GDPR
Almon answers your business line, which means it touches your customers' information. So what it can reach is your decision, not ours. Below is what we do — and what we do not.
You grant the permissions
Everything Almon and the WhatsApp assistant can reach is switched on or off separately for each channel. A heading that is off is unreachable; if it comes up on a call, Almon says it does not know and leaves you a note.
- Products and prices — may it name a product and its price
- Stock — may it say how many are left
- Appointments — may it book and cancel
- Orders — may it take an order and report its status
- Customer details — may it use the caller's name and history
- Your own record types — may it read patient, case or vehicle records
Whether an outstanding balance is disclosed on a call is a separate setting and can be left off by default. Where an item is to be sold over WhatsApp only, the telephone channel is disabled for that item.
Who can see what
The panel has twenty-four separate permission areas. You can grant access in bulk with a role template and then narrow it one field at a time.
- Calls, customers, revenue and accounts, reports, team management, advertising and system settings are each granted separately
- Temporary access: a member of staff can be given access for a fixed date range only; it closes itself when the range ends
- Someone without the right permission cannot get the work done by asking Almon Assistant either — it does not look for another way round, it tells them to ask whoever holds the permission
Every change is logged
Every change made in the panel is written to the audit log.
- What changed
- Which record, which field, with its old and new value
- Who did it
- The user, with their name and role
- From where
- The IP address and the origin of the action
- When
- Date and time
Your contract approvals are kept the same way: which version of which text you approved, from which IP address, and when.
The rules around calling
Commercial calling in Turkey is regulated. The system keeps to those rules on your behalf.
- İYS consent — a calling campaign cannot be started against a list without consent registered in the Message Management System. The system refuses the list
- Do-not-call list — a number that asks not to be called is added and never called again
- Calling hours — a start and end time is set for each list
- Daily cap — the number of calls placed in a day can be limited
Where your data lives
To be plain about it: your data is not held in Turkey.
- Location
- Servers inside the European Union, in the Frankfurt (Germany) region
- What that means
- Under Turkish data protection law this is a transfer abroad, and it is stated plainly in our data protection notice
- Scope
- Customer records, call recordings and transcripts, and your panel data
- Access
- Only the users you authorise, and our own authorised staff where technically unavoidable
Recordings and retention
Recordings and transcripts are held in your panel and seen only by the people you authorise. Telling your customers that calls are recorded is a legal obligation; we set that into your call flow together.
If your question is not answered here, ask us — we will talk it through on a demo call.