Chatley AI privacy & data

Chatley as Data Processor (or Service Provider): For all conversational content, voice audio recordings, call transcripts, SMS message bodies, customer contact phone numbers, and custom AI agent workflows configured and transmitted by our business customers, Chatley acts strictly as a Data Processor.

Account Registration Data: Name, work email address, telephone number, business name, and authentication credentials.

Billing address and payment transaction tokens.

Voice audio is processed strictly to provide acoustic speech-to-text transcription and conversational generation.

The app does not collect your location, contacts, photos, or microphone audio

A random device identifier created by the app, your device name, operating system, and app version

System & Web Logs: IP address, browser type, operating system, referring URLs, and security event logs.

Operating, hosting, and delivering our voice, web chat, and SMS agent platform.

Processing payments, subscription renewals, and administrative invoices.

Providing technical support, operational monitoring, and platform security.

Complying with regulatory obligations and legal requests.

Customer-configured (default 30 days; 0-day retention available for Enterprise)

Up to 90 days for troubleshooting and fraud prevention

These records are deleted automatically after 30 days.

Up to 7 years in accordance with statutory accounting requirements

Maximum 14 months (Google Consent Mode v2 enforced)

Chatley is headquartered in the United States and our primary production servers are located in U.S. data centers.

We provide a standardized Data Processing Addendum incorporating the European Commission's Standard Contractual Clauses (SCCs) and UK International Data Transfer Addendum to govern international transfers of customer data.

Every vendor listed below has been verified against our live production architecture.

Customers subject to GDPR, UK GDPR, or CPRA may request and sign our DPA by emailing security@chatley.ai .

If you are an end-user caller seeking deletion of conversation data handled by an AI agent operated by a Chatley business customer, please direct your request to the business that operates that agent (the Data Controller).

Right to Know / Access: Request disclosure of categories and specific pieces of personal information collected.

Right to Rectification: Request correction of inaccurate personal data.

Right to Deletion: Request erasure of your personal data, subject to lawful retention exceptions.

Right to Restrict or Object: Restrict or object to certain processing operations.

Right to Data Portability: Obtain your personal data in a structured, machine-readable format.

We do not sell personal data.