Privacy Policy

Comsend is a sovereign communications service: your calls, messages and files are carried and stored on infrastructure we own and operate in Australia. No third-party cloud, advertising network or analytics service receives your content. This policy says plainly what we collect, where it lives, who can see it, and how the paid tiers (Pro and Enterprise) change what is recorded.

This policy covers the Comsend app. Our separate Comsend Secret messenger has its own policy at /secret-privacy.

How Comsend is built

Comsend runs as two separated systems that never mix:

• a consumer edge that holds your account, your messages for delivery, and your phone number — it holds no legal or matter information; and
• a secure legal vault, off the public internet, that holds legal records. Recorded legal correspondence flows one-way into the vault, only with your consent.

This separation is deliberate: the edge cannot see legal matters, and the vault cannot be reached from the public internet.

What we collect

• Account — your name, email address and mobile number, used to verify you and operate your account. A profile photo, only if you choose to add one.
• Lawyer verification — if you register as a lawyer, we confirm your identity against a public professional register (name, firm, business address and contact details that are already public) and by sending a one-time code to the phone number and email already on file for you. We never accept a number you simply type in for this purpose.
• Calls — call records (who called whom, when, how long) needed to run the service. Calls are encrypted in transit. Whether call audio is recorded depends on your plan and your consent — see “Call recording and consent” below.
• Messages and attachments — stored on our Australian servers so your conversations work across sessions. Attachments are held in the vault and shared only by the tokenised link created when you send them.
• Signal bridge — if you choose to link a Signal account: message metadata and content, captured on your device after Signal has decrypted it for you, and filed to the vault. See “Signal bridge and backup”.
• Business telephone data — for practices: voicemail audio and transcripts (delivered to your email), auto-attendant and IVR selections, call queues and transfer records — the ordinary data a business phone system produces.
• Billing — when paid plans apply: your name, contact details, plan, and transaction records. We do not see or store full card numbers; payment details are handled by our payment provider.

What we deliberately do not collect

• Your address book stays on your device. Adding contacts uses the system contact picker: you choose each contact shared with the app, and your contact list is stored locally on your phone — it is never uploaded to us.
• No advertising identifiers, no tracking pixels, no third-party analytics, no location collection.
• We do not monitor members. That is a design decision, not a promise of convenience.

Camera and microphone

The microphone is used only while you are on a call, and the camera only when you place a video call or choose to attach a photo. Both are controlled by system permissions you can revoke at any time in Android settings.

Call recording and consent

Call recording depends on your plan:

• Free (Comsend Basic): call audio is not recorded. Only call metadata (numbers, time, duration) is kept.
• Pro and Enterprise: automatic call recording and post-call transcription are features of these plans. Recording is participant-aware: everyone on the call is notified, and where the law requires it we obtain express, e-signed consent before recording begins. Enterprise adds jurisdiction-aware recording warnings, toggled per jurisdiction.

Consent is yours to give or refuse. If you decline or withdraw consent, you can still call and message normally — the correspondence is simply not recorded. Recordings of legal correspondence are stored in the secure legal vault as part of the lawyer's file. Legal professional privilege in that record belongs to you and your lawyer, not to Comsend; we act only as custodian.

Transcription

Post-call transcripts are generated by private AI running on our own Australian infrastructure — your audio and transcripts are never sent to a third-party cloud service. The audio is the original record; the transcript is a searchable index, stored under the same access controls as the rest of the file.

Signal bridge and backup

Linking Signal is optional. If you link an account:

• messages remain end-to-end encrypted between you and the other party; Comsend captures the message on your device after Signal has decrypted it for you, hashes it, and files it to the vault;
• a history import can decrypt your own Signal Desktop database to bring in conversations from before Comsend was installed; and
• filed messages are backed up into the vault and retained under the record-keeping rules below, so they survive device loss.

We do not stand in the middle of the Signal conversation, and we do not weaken its encryption.

Where your data lives and who can access it

All service data is stored on servers owned and operated by us in Australia, under Australian jurisdiction. Messages and files are readable by White Rabbit Australia as the service custodian — we act as custodian, not as a harvester: content is accessed only to operate the service, to meet professional record-keeping obligations for legal-practice members, or where the law requires it. We sell nothing about you to anyone.

External calls and SMS

When you call or message a normal phone number, that call or SMS necessarily travels the public telephone network, which no provider can encrypt. Messages between Comsend members stay entirely on our infrastructure.

Retention and deletion

Account data, messages and attachments are retained while your account is active. Recordings and transcripts of legal correspondence are retained in the vault for as long as the law and the lawyer's professional obligations require, subject to your right to withdraw consent to future recording.

To delete your account and its data, use the account deletion page at comsend.com.au/delete.html or email us at the address below; we will action it promptly, subject to any legal record-keeping obligations that apply to legal-practice communications.

Your rights

You may ask us to access or correct your personal information; we respond within 30 days and may ask you to verify your identity. You may also complain if you believe we have mishandled your information — contact us and we will acknowledge within 7 days. If you are not satisfied, you may complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

Children

Comsend is intended for adults and is not directed at people under 16. We do not knowingly collect their information.

Changes

If this policy changes we will update this page and the date above. Material changes will be surfaced in the app, and where a change affects call recording we will ask for your consent again.

Contact

White Rabbit Australia — privacy@white-rabbit.com.au
Phone: 07 4020 8246 · Cairns, Queensland, Australia
For anything this page doesn't answer, ask. Straight questions get straight answers.