Privacy policy
Last updated: 16 October 2026
Callyst scores recorded sales and service calls against a scorecard and emails coaching notes to reps. This page explains what data we handle and why. Questions: support@callyst.com.
What we collect
- Account details: the names and email addresses of the people who use a workspace, and of the reps whose calls are scored.
- Calls: the audio files you upload or send us, with details such as the rep, the time and the file type. We also keep the transcript, the scores, the quotes used as evidence, and any flags.
- Free-check sign-ups from our website: name, work email, company, team size and phone system. To limit abuse we also store a scrambled form of the visitor's IP address that can't be turned back into the address. We do not store the address itself.
- Reports: summaries for a Blind Match or free check. They include quotes from calls and the QA grades your team gave.
- Emails we send: a log of the coaching and sign-in emails sent, so we can run the service and fix problems.
Why we use it
- To transcribe and score calls, raise flags, and email coaching notes.
- To sign people in and keep each workspace separate.
- To answer free-check requests and to run and secure the service.
We do not sell your data.
Who can see it
- People in your workspace can see its data. What each person sees depends on their role, for example workspace admins and reps.
- Our staff access customer data only when needed to run, secure or fix the service.
- The service providers listed below process data for us.
How long we keep it
- Recordings (audio): a daily job deletes each recording 30 days after it is scored, or 30 days after upload if it is never scored. A storage rule also deletes any recording older than 35 days as a backstop. So no recording is kept longer than 35 days.
- Transcripts, scores and flags: kept until the customer cancels.
- Reports: kept in storage until the customer cancels, then deleted with the workspace.
- After cancelling: all of the workspace's data is deleted within 30 days.
- Free-check sign-ups: if the work email is not confirmed within 7 days, the sign-up is deleted. Confirmed sign-ups are kept until you ask us to delete them. Email support@callyst.com.
Where your data is stored
Recordings, transcripts, scores and account data are stored on Cloudflare (Workers, R2 and D1). Transcription runs on Cloudflare Workers AI. Our database is in eastern North America; Cloudflare may process data elsewhere on its network. Our AI model provider and Resend are US-based.
What leaves Cloudflare
- The text of a transcript (not the audio) goes to an AI model provider. See “AI scoring” below.
- Coaching and sign-in emails are sent through Resend. Resend receives the recipient's email address and the content of the email.
- If your workspace uses Google sign-in, Google confirms the email address of the person signing in. We ask Google only for that verified email (not your contacts or other account data) and store nothing new from it. Google learns that you are signing in to Callyst.
- Our pages load fonts from Google Fonts, so Google can see that your browser requested them.
Service providers (subprocessors)
| Provider | What it does | Data it receives |
|---|---|---|
| Cloudflare | Hosting, storage, database, transcription | Recordings, transcripts, scores, account data |
| AI model provider | AI scoring of calls and drafting report text | Transcript text, your scorecard, and report summaries with call quotes and QA grades. Never audio. |
| Resend | Sending emails | Email addresses and email content |
| Google (sign-in) | Confirming a user's email, if your workspace uses Google sign-in | Your sign-in request; Google returns your verified email |
| Google (Fonts) | Serving website fonts | Your browser's request, as for any website |
AI scoring
Calls are scored by an AI model provider. We send it the transcript text and your scorecard, never the audio. For Blind Match and free-check reports we also send it the report summary, which includes call quotes and your QA grades. Under its terms, it does not train its models on data we send it. Scores and report text are generated by AI and can be wrong, so managers should review flags before acting on them.
No training on your data
- We do not use customer recordings, transcripts, scores or reports to train AI models.
- Under Cloudflare's terms, Cloudflare does not use Workers AI customer inputs to train its models.
Your data, your instructions
- The customer controls its call data. We process it on the customer's instructions.
- A data processing agreement (DPA) is available on request.
- We give notice before adding a subprocessor.
- We carry out deletion requests within 30 days.
Security
- Data is sent over encrypted connections (HTTPS).
- Each customer has a separate workspace, and access is controlled by sign-in and roles.
- Sign-in links are single-use and expire after 15 minutes.
No system is perfectly secure. If we learn of a breach affecting your data, we will tell you as the law requires.
Your rights
You can ask us for access to your data, a copy (export), correction or deletion. Email support@callyst.com. If we hold data about you because your employer is our customer, we may direct your request to your employer.
Recording consent
Our customers are responsible for having the right to record calls and upload them to Callyst. This includes telling callers and getting their consent where recording laws require it.
Cookies
We use only cookies needed to sign you in and keep you signed in. We use Cloudflare Web Analytics, which sets no cookies and does not track you across sites. We do not use advertising or analytics cookies or trackers.
Changes
We may update this policy. We will change the date at the top when we do, and tell customers about important changes.