DialSwarm / Terms / Privacy / Compliance / Voice consent
Privacy Policy
This policy explains what DialSwarm ("we") collects, why, who sees it, how long we keep it, and what choices you have. It covers our website, the workspace, the homepage demo, the public API and integrations. It is a plain language draft and is not legal advice.
Two kinds of people, two roles
Our customers (businesses that use DialSwarm to make calls) give us information about themselves and about the people they want to call. For the account itself, we decide how the data is used. For the lists, phone numbers, consent records and call content that customers put into DialSwarm, the customer is the one who decides why and how it is used, and we process it for them as a service provider (processor). People who receive a call should contact the company that called them to use their rights, and may also contact us at [email protected]; we will help and pass requests on.
What we store
- Account data: email, name, a salted hash of your password (never the password), plan, role, settings, the time you accepted our terms and compliance confirmations, and your login sessions.
- Your business setup: company name and details, products and pitches, agent settings, phone numbers, Do Not Call lists.
- Lead data your account holds: names, phone numbers, company, job title, notes, and the consent record for each lead (where and when the person agreed to be called, and to which business), plus the confirmation you ticked when you imported them.
- Call records: the transcript of each call, an automatic summary and outcome, the numbers involved, times, duration, and the compliance record for the call (which checks ran and what they found). We do not record or keep call audio unless the customer turns on call recordings in their settings. When they do, the agent's opening line says the call may be recorded, and the recording is stored on our own servers (not with the telephone carrier), kept as long as the call record, and deleted with it. Audio streams live to our voice AI provider so the agent can talk and so a transcript can be written. We ask our voice AI provider not to store it.
- AI reception messages: if a customer switches on AI reception, calls to their line are answered by an AI assistant that takes a message. We store the caller's number, the message, a transcript and a short summary for that customer, and the audio only if they turned recordings on.
- Integration data: if you connect a CRM, an access token (encrypted at rest) and the contact fields you chose to sync, and the outcomes we write back.
- Technical data: server logs with IP address and requests, kept briefly to run and secure the service, and, for the homepage demo, a random visitor id and a keyed hash of the network address to count free tries.
How we use it
To run the Service for you: sign you in, place the calls you ask for, apply the safeguards (consent, Do Not Call, calling hours, caller ID), write transcripts and summaries, measure usage and billing, sync with the tools you connect, answer support requests, keep the Service secure, prevent abuse and fraud, and meet legal obligations. We do not sell personal information. We do not use call content to train AI models of our own, and we do not share it for advertising.
Homepage demo
The demo on our homepage can place one call to a phone number you enter, after you tick the consent box.
- We never store that number. It is used for that one call only and is not written to our database or to disk.
- We do not call it again, text it, add it to a list, or share it with anyone.
- The demo transcript and the call audio are held in memory for up to 15 minutes so you can read and replay them on the page, then discarded. Only the browser that placed the call gets the replay link. Demo calls are not stored as call records.
- Our telephone provider sees the number to connect the call, as any phone carrier would.
- AI reception demo: we keep only what you type or upload for the demo (your name, company, what the business does and any reference info), for up to 24 hours, so the assistant can greet you and answer questions. Calls to the demo line are not recorded or stored.
- The browser demo sends your microphone audio to our voice AI provider for the length of the conversation. We do not store it.
Demo calls may use an AI voice and may be recorded or transcribed for quality. US numbers only. Not a condition of purchase.
Who we share it with
We share data only with service providers that help us run the Service, under contracts that limit what they can do with it:
- Twilio, our telephone carrier (phone numbers, call connection details);
- OpenAI, our voice AI and summary provider (live call audio, transcripts for summaries);
- ElevenLabs, only to make and use a voice copy the customer asked for, or a custom voice an account chose;
- Cloudflare, which protects and delivers our website and routes traffic to our servers;
- Hostinger, which hosts our servers;
- the CRMs and tools you choose to connect, which receive only what you set up to send.
We may also disclose information when the law requires it, to respond to valid legal process or a regulator, to protect rights, safety and the Service, or in a business transfer (with the same protections). We do not sell personal information and do not share it for cross-context behavioral advertising.
How long we keep it
- Account data and settings: while your account is open. On request we delete it within 30 days, unless we must keep a record (see the next item).
- Leads, call transcripts, summaries and compliance records: while your account is open and for up to four years after the call or account closure. They may be needed to answer a legal claim about a call, and the main telemarketing law has a four year limit. A customer can export them at any time and ask us for earlier deletion, except where we must keep a record.
- Do Not Call entries: kept for as long as needed to honor the request, which is usually indefinitely.
- Login sessions: up to 30 days. Server logs: kept briefly, about 30 days. Backups: deleted after 35 days.
- Demo phone numbers: never stored.
Cookies and similar technology
We set two first-party cookies. (1) A login cookie (ds3) that keeps you signed in after you log in or sign up. It is HttpOnly and lasts up to 30 days. (2) A demo cookie (ds_tries) that holds a random id and nothing else, so we can count the five free tries of the homepage demo. It lasts up to a year. To stop clearing cookies from resetting the count, we also keep a keyed hash of your network address (not the address itself) for up to 30 days. The workspace also keeps a couple of interface preferences (for example whether the live console is collapsed) in your browser's local storage. We use no analytics, advertising or tracking cookies or pixels, so we do not show a cookie banner. Fonts are served from our own site, not a third party.
Do Not Sell or Share My Personal Information
We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We have not done so in the past 12 months. To confirm your preference or ask a question, email [email protected] with the subject "Do Not Sell or Share". Because we do not sell or share, there is nothing further to opt out of; we will record your request anyway and respond within 15 days. We treat browser opt-out signals such as Global Privacy Control as an opt-out request too.
Your rights
Depending on where you live you may have the right to: know what we hold about you and get a copy; correct it; delete it; limit use of sensitive information; object to or restrict processing; move your data; withdraw consent; and not be treated worse for using these rights. This includes rights under the California Consumer Privacy Act (as amended by the CPRA) and the EU and UK GDPR.
- How to ask: email [email protected] with the subject "Privacy request", say which right you want to use, and give the email address or phone number involved. We may ask a few questions to confirm it is you. An authorized agent may ask on your behalf with your written permission.
- When we answer: within 45 days (California) or one month (GDPR), extendable once where the law allows.
- If you were called by an AI agent run by one of our customers: tell the agent on the call and it will end the call and add your number to that customer's Do Not Call list. You can also email us your number and the company that called, and we will act on it.
- Complaints: you may complain to your data protection authority or, in California, the Attorney General.
For GDPR, our legal bases are performing our contract with customers, our legitimate interests in running and securing the Service, legal obligation, and consent where we ask for it. Data is processed in the United States. Where the law requires, transfers rely on standard contractual clauses or an equivalent mechanism with our providers.
Security
We use encryption in transit, encrypt integration tokens at rest, hash passwords, limit staff access, and log changes to sensitive settings. No service is perfectly secure. If a breach affects your data we will tell you as the law requires.
Children
The Service is for businesses and is not directed to anyone under 18. We do not knowingly collect data from children.
Changes and contact
We will post changes here and tell account holders about material changes. Questions: [email protected]. See also our Terms and Compliance page.