Privacy Policy
Last Updated: December 12, 2025
Dialsheet.io ("we," "our," or "us") respects your privacy. This policy explains how we handle your data and the data of your contacts.
1. Data Processing vs. Data Controller
Dialsheet.io acts as a Data Processor providing software tools. You, the user, are the Data Controller of the lead lists and contact information you upload. You are responsible for the legal basis of processing this data.
2. Information We Collect
- Account Information: Name, business email, company name.
- Telephony Credentials: Encrypted storage of your Twilio SID and Auth Token.
- Uploaded Data: CSV/Spreadsheet data you import for workflow management.
- Usage Metadata: Call logs, duration, timestamps, disposition statuses, and user notes.
- Call Recordings & Transcripts: Calls placed through the platform are recorded by default (you can disable this). Recording files are stored in your own Twilio account. If AI call features are enabled for your workspace, recordings are transcribed and analyzed to produce transcripts, call summaries, script-compliance scores, and coaching notes, which are stored in your workspace and visible to you and, on team accounts, your team administrators.
3. What We Do NOT Do With Call Content
- We do not listen to, review, sell, or use your call audio or transcripts for our own purposes, and we do not use them to train AI models. Transcription and analysis run solely to provide features inside your own workspace.
- Your responsibility: You are responsible for complying with call-recording consent laws in the jurisdictions you call (e.g., two-party-consent US states, and UK/EU rules). Disable recording if you do not have the required consent.
4. How We Use Your Information
- To provide the dialing workflow service.
- To authenticate your connection to third-party carriers.
- To detect fraud, spam, and abuse of our platform (e.g., monitoring Aggregate call stats).
- To comply with legal obligations.
5. Third-Party Processors
We share data with the following sub-processors to deliver the service:
- Twilio Inc.: For telephony signaling, media carriage, and recording storage.
- OpenAI, L.L.C.: For call transcription and AI analysis (transcripts, summaries, compliance scoring), only when AI call features are enabled. Data sent via API is not used to train OpenAI models.
- [Cloud Provider, e.g., AWS/Vercel]: For hosting infrastructure.
- [Supabase/Database Provider]: For secure database hosting.
6. Data Retention
- Active Accounts: Lead data is retained as long as your account is active to facilitate your workflow.
- Deleted Accounts: Upon account termination, contact data is permanently deleted from our live systems within 30 days. Metadata (logs) may be retained for up to 1 year for audit and legal compliance purposes.
7. Security
We use commercial-grade encryption (TLS/SSL) for data in transit and encryption-at-rest for sensitive credentials. However, no specific security guarantee is implied against sophisticated state-level actors.
8. Your Rights
You may export your data ("The Dialsheet") at any time via the dashboard. You may request permanent deletion of your account and data by contacting privacy@dialsheet.io.