dialsheet.io

Privacy Policy

Last Updated: October 6, 2026

DialSheet (dialsheet.io) is operated by 2587689 Alberta Ltd., a corporation incorporated in Alberta, Canada ("we," "our," or "us"). We respect your privacy. This policy explains how we handle your data and the data of your contacts.

1. Data Processor vs. Data Controller

DialSheet acts as a Data Processor (or "service provider") providing software tools. You, the user, are the Data Controller of the lead lists and contact information you upload. You are responsible for having a lawful basis to process that data and for any notices or consents owed to your contacts.

2. Information We Collect

  • Account Information: Name, business email, company name, and the mobile number you give us at signup.
  • Telephony Credentials: Encrypted storage of your Twilio SID and Auth Token.
  • Uploaded Data: CSV/Spreadsheet data you import for workflow management.
  • Usage Metadata: Call logs, duration, timestamps, disposition statuses, and user notes.
  • Call Recordings & Transcripts: Calls placed through the platform are recorded by default. You can turn recording off for your account under Settings → Privacy; on a team, the admin sets it for everyone. Recording files are stored in your own Twilio account. On Pro, recordings are transcribed and analyzed to produce transcripts, call summaries, script-compliance scores, and coaching notes, which are stored in your workspace and visible to you and, on team accounts, your team administrators. The same Settings → Privacy page turns that analysis off while keeping the recordings.

3. What We Do NOT Do With Call Content

  • We do not listen to, review, sell, or use your call audio or transcripts for our own purposes, and we do not use them to train AI models. Transcription and analysis run solely to provide features inside your own workspace.
  • Your responsibility: You are responsible for complying with call-recording consent laws in the jurisdictions you call (e.g., two-party-consent US states, s. 184 of the Canadian Criminal Code, and UK/EU rules). Turn recording off under Settings → Privacy if you do not have the required consent.

4. How We Use Your Information

  • To provide the dialing workflow service.
  • To authenticate your connection to third-party carriers.
  • To detect fraud, spam, and abuse of our platform (e.g., monitoring aggregate call stats).
  • To communicate with you about your account and the Service.
  • To comply with legal obligations.

We do not sell your personal information or your contacts' personal information.

5. Texts and Calls From Us

Signup asks for your mobile number. Under it is an optional box, unticked until you tick it: “Text me if I get stuck setting up DialSheet”. Leave it unticked and we do not text you. If you tick it:

  • Texts come from an automated assistant that says so in its first message. They are about your own account and its setup. The assistant answers when you reply, and a person at DialSheet may take over the thread. It does not send third-party marketing.
  • In your first few days, the first text comes about 15 minutes after you tick the box if your account still has no phone line, or an hour after your line goes live if nothing has been dialed on it. Texts we start go out in daytime hours where you are. If you do not reply, you get one follow-up a day later. If you reply and then go quiet, you get at most two check-ins each time. Message frequency varies. Message and data rates may apply.
  • Reply STOP to any text and we stop texting you. Reply HELP for help, or email abhi@paperkites.co. The full program terms are in Section 4.4 of the Terms and on our texting page.
  • No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text-messaging opt-in data and consent are not shared with any third party. We do not sell your number.
  • To send and answer the texts, Twilio carries them and OpenRouter passes the conversation to the AI model that writes the replies. Both are sub-processors listed in Section 6.

Separately, a person from DialSheet may call the number you gave us about your setup, or when you ask for a call.

6. Third-Party Sub-Processors

We share data with the following sub-processors to deliver the service:

  • Twilio Inc.: For telephony signaling, media carriage, and recording storage. If you use a DialSheet-Managed Line, your calls are carried through a Twilio sub-account that we control rather than your own Twilio account, so call records and recordings for that line are held in our carrier account and retained per Section 7. We review call-detail records (numbers dialled, timing, durations, outcomes — never call audio) on Managed Lines to detect misuse.
  • Groq LLC: Transcribes call recordings, only when AI call features are enabled. Groq's terms do not allow it to train models on the audio or the transcripts.
  • OpenRouter, Inc.: Passes support-chat and text-message conversations to the AI model that writes the replies (currently Google's Gemini). When AI call features are enabled, it also transcribes call recordings when Groq is at capacity or unavailable (the audio is processed by DeepInfra, which does not train on it), and passes call transcripts to the AI models that write call summaries, script-compliance scores, and coaching notes.
  • OpenAI, L.L.C.: The backup for call transcription and AI analysis, only when AI call features are enabled. Data sent via API is not used to train OpenAI models.
  • Vercel Inc.: For hosting infrastructure and page analytics.
  • Supabase Inc.: For secure database hosting (SOC 2 Type II compliant).
  • Stripe, Inc.: For payments. Your card number never touches our servers.
  • Google LLC: For sign-in, if you sign in with Google. We receive your name and email address from Google.

We will update this list if our sub-processors change.

7. Data Retention

  • Active Accounts: Lead data is retained as long as your account is active to facilitate your workflow.
  • Deleted Accounts: Upon account termination, contact data is permanently deleted from our live systems within 30 days. Metadata (logs) may be retained for up to 1 year for audit and legal compliance purposes.

8. Security

We use commercial-grade encryption (TLS/SSL) for data in transit, AES-256 encryption at rest for sensitive credentials, and row-level security to isolate workspace data. No method of transmission or storage is completely secure, and no absolute guarantee is implied.

9. Cookies

We use essential cookies for authentication and session management, and basic analytics to understand aggregate product usage. We do not use advertising cookies.

10. Your Rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal information under laws such as PIPEDA (Canada), Alberta's Personal Information Protection Act, GDPR/UK GDPR, or the CCPA. You may export your data at any time via the dashboard. You can permanently delete your account and its data yourself from Settings → Profile → Delete account, or ask us to by emailing abhi@paperkites.co. We respond to verified requests within the timelines required by applicable law.

11. International Transfers

Our sub-processors store and process data in the United States and other jurisdictions. By using the Service, you acknowledge that data may be transferred outside your jurisdiction, subject to appropriate safeguards.

12. Contact & Changes

Questions about this policy: abhi@paperkites.co. We may update this policy from time to time; material changes will be announced by email or in-app notice.