What we keep, and what we don't
A plain list of what the switchboard holds about you, how long it keeps it, and what it's used for.
-
What a posting holds
A want or a have is a category, a rough area and a few details. Your name, contact details and anything richer stay with you until you choose to share them. Your address, phone number and email go straight from your browser to the other person's, scrambled so only their browser can read them.
-
Conversations are kept for 30 days
After an introduction, messages and photos pass through the switchboard, and software checks them as they go. Messages are kept encrypted for 30 days in case someone reports a problem, then deleted. A photo is deleted soon after it's collected, or after 14 days if nobody collects it. A person can read one only where there's a report, a safety flag from our automatic checks or a lawful request, and only when two of our three keyholders act together. It isn't end-to-end encrypted. The safety page has the detail.
-
Matching is done by software
Wants and haves are compared by software, and there's no screen where our staff can browse what people want. Price limits stay private: the other person never sees yours, and neither does their assistant.
-
Some things are never asked for
A posting has nowhere to put card numbers, government ID or your contacts. Things like health and relationships stay between you and your assistant.
-
Public numbers describe groups
Every count we publish covers at least ten wants and haves. How that works.
-
How we'll make money
We don't run ads or sell data. The only money we'll make is a small fee on payments through the switchboard, once those are switched on.
What your assistant does on its own
The switchboard is at its best when your assistant runs between the conversations you have with it, because it can then keep an eye on things while you get on with your day and tell you the moment something turns up. Where an assistant works that way, the switchboard sends you no email about any of it and lets your assistant bring you the news, and that is the experience the whole thing is built for. The one exception is a record of any deal you agree, which is emailed to both of you so you each hold the same evidence. Where yours only wakes when you speak to it, nothing is missed: the switchboard emails you whenever something needs you, and your assistant catches you up when you next ask.
An assistant that runs on its own is still never handed the decisions. Three of them come back to you every single time, on your own page, after you sign in and confirm with your PIN or a passkey: sharing your first name and suburb, accepting a figure someone has put on the table, and approving a payment through the switchboard, which isn't switched on during the beta. An assistant that asks the switchboard to do one of those on your behalf is refused and handed a single-use link to give you, and your press is the only thing that records the answer. The software is what holds this, so it holds whoever wrote the assistant: there is no route through the switchboard to any of the three that an assistant could take, however it asks, unless someone hands it their PIN or lets it press their page for them.
Figures are the part worth spelling out. Your assistant may never invent one. Everything you post starts on "Pass on", where it brings you what is on the table, tells you what it makes of it, and carries back the number you give it, and that number goes out when you press it through on a page that names the exact figure. You can switch a single want or have to "Auto-negotiate" and write down where to open, the limit you will not cross, and the smallest move to make; inside those numbers your assistant can put figures on the table without asking each time, and the switchboard refuses anything outside them and tells your assistant which edge it hit. That switch is made on your own page and applies only to the one thing you made it on.
What you wrote in that box stays between you, your assistant and the switchboard. The other side is never told any of it, and the price limit you set when you posted is never handed back to any assistant at all, your own included.
Numbers on this site
Every count on this site comes from real wants, haves and matches. It's an early beta and still very quiet, so most of those pages show nothing yet.
How public counts stay anonymous
Public counts are grouped by category and area. If a group has fewer than ten wants and haves, that row isn't shown at all. Everything that is shown is an exact count.
Match counts and time to match have a floor of their own. They only appear once a group has at least ten matches, so a small number can't point to one person.
The same rule covers the party line, the State of Wants, and the public API they read from.