Security & data handling

Audio recordings

We do not retain audio recordings of your calls. Audio streams through our speech-to-text provider (AssemblyAI) in real time for transcription only. Their streaming API does not archive audio by default. We do not send audio to any other third party.

Transcripts

Transcripts (text) are retained in our database so you can review past calls and so the coaching engine can improve future ones. You can delete any call — transcript included — from your account at any time. Full account deletion removes all of your transcripts.

Where data lives

Our servers are hosted in Germany (Hetzner, EU jurisdiction). EU-resident customers' data stays in the EU. US-resident customers' data also lives in the EU today; a US region is on the v2 roadmap for customers with data-residency requirements.

Third parties we use

• • Stripe — payment processing. They see your card, we never do.
• • AssemblyAI — real-time speech-to-text. Streams audio, does not archive.
• • Sentry — error monitoring. No call content, no PII in logs.

Compliance roadmap

SOC 2 Type II and a standard DPA template are on the v2 roadmap for team customers. If your procurement requires either today, join the teams waitlist and we'll get in touch as each item ships.

Questions?

Security questions go to security@dealparley.ai. We respond within one business day.