Security

Your data

In transit

Everything between your devices and Rill travels over HTTPS (TLS).

At rest

What you write and record (captures, conversations, facts, call transcripts and text threads) is encrypted in the database with AES-256-GCM. The key is held in server secrets, never in the database, and keys are versioned so they can be rotated.

Not end-to-end

Rill is not end-to-end encrypted by default: the server decrypts your content to run AI on it. Vault notes (paid plans, web and iPhone) are encrypted on your device with a key from your passphrase before upload; the server cannot read them. The Vault privacy level only turns AI answers and agents off: it is not end-to-end encrypted.

Saved website logins

A saved login is sealed (AES-256-GCM) under a key of your own, which is itself sealed by a separate vault key; it is bound to the exact website it was saved for and decrypted only at the moment of filling it there. The assistant never sees the username or the password. Rill keeps a login only for a site whose terms allow an AI assistant to sign in, and none reviewed so far do.

How Rill reaches your accounts

Rill uses, in order: an official connection you approve on the app's own page (Rill never sees that password; disconnect anytime); then its own phone line or email to contact a business, logging into nothing of yours; and last, only where a site's terms allow it, a saved login you chose, with your approval each time. No site reviewed so far allows it, so today Rill signs in to no website as you.

Text messages

Texts with Rill are stored encrypted and deleted after 30 days.

Phone calls

Calls run through the voice provider Retell. Rill copies the transcript and summary into its own encrypted storage when a call ends; Retell keeps its copy for 1 day, and recording links are signed and expire.

Who else sees data

To answer you, the text a request needs goes to AI model providers (Anthropic, OpenAI; web searches go to Google). Texts and calls pass through the providers that deliver them (Twilio, Sendblue, WhatsApp, Retell). Data is stored with Supabase and served from Fly.io. Rill does not sell your data, and does not train models on it.

Websites, and their terms

When Rill does something on a website for you, it follows that site’s own terms for AI assistants, and checks them before every step. A person reads each booking site’s live terms and records what they allow; a site whose terms change is paused until someone reads them again. A site not yet reviewed is only read: the page you point Rill to, and nothing more.

Where a site does not allow an assistant, Rill tells you, and offers to call the business for you (the call always waits for your OK) or gives you the business’s own booking link.

• OpenTableRill does not automate here · read 2026-10-08

  OpenTable's terms do not allow AI assistants to use the site, even to search it, unless OpenTable authorizes it.

  “generative AI or other AI technology ... to access, copy, search, or monitor any portion of the Services”

• ResyRill does not automate here · read 2026-10-08

  Resy's terms forbid automated software on its pages and letting anyone else use your account, unless Resy authorizes it.

  “use manual or automated software, devices, or other processes to “crawl” or “spider” any page of the websites”

• TockRill does not automate here · read 2026-10-08

  Tock's terms forbid any automated system on the site, including one you authorize.

  “The use by you, or anyone authorized by you, of machines, computers, scripts or any automated system on the Site is strictly prohibited”

• SevenRoomsRill does not automate here · read 2026-10-08

  SevenRooms' terms forbid automated access to the service, other than search engines indexing it.

  “Use any robot, spider, scraper, or other automated means to access or scrape the Service”

• YelpRill does not automate here · read 2026-10-08

  Yelp's terms forbid automated access except as its robots.txt permits, and its robots.txt keeps AI assistants off everything but its articles.

  “Use any robot, spider, Service search/retrieval application, or other automated device, process or means to access, retrieve, copy, scrape, or index any portion of the Service”

• VagaroRill does not automate here · read 2026-10-08

  Vagaro's terms forbid software that interacts with its services without Vagaro's written consent, and sharing your login.

  “Develop or use any applications or software that interact with our Services without our prior written consent”

• BooksyRill does not automate here · read 2026-10-08

  Booksy's terms forbid automated tools collecting data from it, and sharing your login. Booking there needs an account.

  “to use automated tools (such as bots, crawlers, or scrapers) to collect data from the Booksy for Customers App”

• Square AppointmentsRill does not automate here · read 2026-10-08

  Square's terms forbid automated access to its booking pages unless you have a written agreement with Square.

  “access or monitor any material or information on any Square system using any manual process or robot, spider, scraper, or other automated means”

• MindbodyRill does not automate here · read 2026-10-08

  Mindbody's terms forbid automated access to its systems and sharing your account.

  “access or monitor any material or information on any Mindbody system using any manual process or robot, spider, scraper, or other automated means”

• FreshaRill does not automate here · read 2026-10-08

  Fresha's terms forbid automated programs and bots, and letting anyone else use your account.

  “launch an automated program or script, including, but not limited to, web spiders, web crawlers, web robots, web ants, web indexers, bots”

• CalendlyRill does not automate here · read 2026-10-08

  Calendly's terms allow access only through its publicly supported interfaces, and do not say an assistant driving its booking page is one. Unclear, so Rill does not.

  “Accessing or searching any part of the Services by any means other than our publicly supported interfaces”

• Acuity SchedulingRill does not automate here · read 2026-10-08

  Squarespace's terms for Acuity allow access, search and new accounts only through its publicly supported interfaces. Unclear for an assistant, so Rill does not.

  “Don't access, search or create accounts for the Services by any means other than our publicly supported interfaces”

• StyleSeatRill does not automate here · read 2026-10-08

  StyleSeat's terms forbid accessing it by automated means without its permission, and anyone else using your account.

  “otherwise access the Services, using automated means (such as harvesting bots, robots, spiders, or scrapers) without our permission”

• ZocdocRill does not automate here · read 2026-10-08

  Zocdoc's rules forbid booking appointments or creating accounts by automated means, and its live terms page blocks automated readers.

  “create user accounts, book appointments or submit Posted Information by automated means”

More

What happens to your captures at each privacy level is in the Privacy Policy. What Rill may do without asking, and how to stop it, is in What Rill can do on its own. Questions: support@hellorill.com.