Legal
Security
Where your calls live, who can reach them, and what gets written down when we do.
Pending review
This document is published while it goes through legal review. It describes what Callfoyer does today and we hold ourselves to it, but the wording may change.
1. Storage and encryption
Recordings, transcripts and your agent profile are encrypted at rest and in transit. Call audio is held by our telephony provider and reachable only with our account credentials; transcripts and your profile sit in a managed database encrypted on disk. Access is scoped to your organisation; there is no shared bucket a mistake could expose.
2. Support access is time-boxed and recorded
Callfoyer staff cannot browse your calls. Opening an account creates a session that expires on its own, recorded against the staff member's name. Being straight about the limit: we do not ask your permission before opening it. The record exists either way, and you can ask for it.
Impersonation stops at the door
When a staff member is acting on your behalf, that session cannot reach staff tooling. The privilege only ever points one way.
3. What the agent will not do
- It never invents a price, a date or an answer you have not given it.
- There is no built-in rulebook per profession: it declines whatever your profile does not cover, and you write the explicit refusals your trade needs in plain English.
- Every action it takes on a call is logged with its result, so a wrong answer is traceable to the rule that produced it.
4. How long we keep it
We keep recordings and transcripts for as long as your account is open. There is no automatic expiry yet and no per-plan retention window — we would rather tell you that than publish a schedule we do not enforce.
Ask us to delete one call, a run of them, or the whole account, and we will do it and confirm when it is done. That request goes to a person rather than a button in the app for now. Billing records are kept for as long as tax law requires; nothing else survives a deletion.