Privacy Policy

This Privacy Policy explains how Audilyx (“we”, “us”) collects, uses, and protects personal data when you use the Service. We act as a data processor for the call recordings and related data your organization uploads (“Customer Data”), and as a data controller for your account information.

1. Data we process

• Account data: name, work email, organization, role.
• Customer Data: call recordings you upload, generated transcripts, AI scores, QA notes, coaching tasks, and agent roster details you enter.
• Usage data: logs and metrics needed to operate and secure the Service.

Call recordings and transcripts may contain personal data of your customers and agents, and — depending on your business — sensitive data (e.g. health information). You are responsible for the lawful basis and consent for processing this data.

2. How we use it

We use Customer Data only to provide the Service to your organization: transcription, diarization, scoring, analytics, and coaching. We do not sell your data or use your Customer Data to train third-party foundation models.

3. Sub-processors

We rely on trusted third parties to deliver the Service, including cloud hosting and database (Supabase), speech-to-text providers (e.g. Sarvam AI, ElevenLabs, Deepgram), and AI scoring (Anthropic). These process data on our instructions under their own security and privacy commitments.

4. Storage & security

Data is stored in access-controlled cloud infrastructure. Call recordings are kept in private storage and served only via short-lived signed links to authorized users in your organization. Access is enforced by row-level security scoped to your organization.

5. Data retention & deletion

We retain Customer Data for as long as your organization’s account is active, or as configured by your retention settings. You may delete individual calls (which removes the recording, transcript, and scores) at any time from the dashboard. On account closure, you may request full export or deletion of your organization’s data, which we will action within a reasonable period.

6. Your rights

Depending on applicable law (India DPDP Act, GDPR), data principals may have rights to access, correct, or delete their personal data. As we act as a processor for Customer Data, such requests should be directed to the organization that uploaded the data; we will assist that organization in responding.

7. International transfers

Data may be processed in regions where we or our sub-processors operate. We take steps to ensure appropriate safeguards for such transfers.

8. Changes

We may update this Policy; material changes will be notified to organization administrators.

9. Contact

Privacy questions or data requests: hello@audilyx.com.