---
id: legal-privacy-policy
title: Privacy Policy
slug: /legal/privacy-policy
description: Where to find the Chatley Privacy Policy, and what it says about call recordings, retention, and AI model training.
---

The Privacy Policy is published and maintained on the main site:

**→ [chatley.ai/privacy-policy](https://chatley.ai/privacy-policy)** · last updated 15 April 2026

:::note[One source of truth]
The policy is not reproduced here. A second copy of a legal document is a second
copy to keep in sync, and the one that drifts is the one someone relies on.
:::

## What it covers, in brief

The Services are operated by **Chatley AI, Inc., a Delaware corporation**.

**Voice and audio data.** Calls between your AI agents and end users are
recorded, transcribed, and processed. The policy places the consent obligation
on you: by using the voice features you represent and warrant that you have
obtained the necessary consents. See [Call recording & consent](./call-recording.md).

**Retention.** Account data is kept for the life of the account plus a
reasonable period for backups and legal holds; billing records for as long as
tax and accounting rules require; security logs as needed to protect the
platform.

**AI model training.** Anonymised and aggregated usage data is used to improve
product analytics and performance. The policy states that Chatley does not sell
personal information, and that core infrastructure providers are contractually
prohibited from using customer data to train their foundational models for
Enterprise configurations.

**Your rights.** Access, correction, deletion, portability and objection where
applicable law provides, with specific CCPA/CPRA and GDPR provisions. Requests
go to **security@chatley.ai**.

:::warning[Two gaps worth closing]
- **No stated retention period for call recordings and transcripts.** These are
  the most sensitive data in the product and the retention section does not name
  a period for them. Customers in regulated industries will ask, and a data
  subject deletion request is hard to answer without one.
- **The model-training commitment is conditional.** It is scoped to "where
  contractually prohibited" and "for Enterprise configurations", which leaves
  the position on non-Enterprise accounts unstated. An unconditional sentence
  either way would be stronger than an ambiguous one.
:::