SECURITY

Your calls stay yours

Sales calls are full of homeowners' names, numbers and addresses. Here's exactly where that data goes, how it's protected, and how to get rid of it.

AES-256-GCM

for transcripts and lead details

Private storage

signed links that expire in 1 hour

No AI training

on your calls, by us or our providers

Where your recordings are stored

Call recordings are stored on Cloudinary as private assets. They have no public link, so they can't be opened by guessing or sharing a URL.
Every time a recording is played in your dashboard or sent for transcription, Dialy issues a signed link that expires after one hour.
The copy of the file that reaches our server during upload is deleted as soon as it has been passed on to storage.
Your account, transcripts and analysis live in a managed PostgreSQL database. Our application servers run in Frankfurt, Germany.

In transit: all traffic to Dialy is forced over HTTPS, and our servers only talk to the database over an encrypted TLS connection.
At rest: call transcripts and the lead details pulled from them (owner name, phone number, email, property address, asking price and the rest of the lead sheet) are encrypted with AES-256-GCM before they are written to the database.
That means a copy of the database on its own shows only scrambled text for those fields. They can only be read with a separate key that is never stored in the database.
Passwords are never stored. We keep only a bcrypt hash, which can't be turned back into the password.

Only people signed in to your account. Nobody on another Dialy account can see your calls.
Isolation is enforced in the database itself, not just in the app. Every request states which account it is acting for, and row-level security rules stop the database from returning rows that belong to any other account.
Dialy's admin panel is protected by a password and a second-factor code from an authenticator app. It shows account and billing details (email, credit balance, orders), not your recordings, transcripts or analysis.
Deleting your account requires you to re-enter your password, so a session left open on a shared computer isn't enough to wipe it.

Your calls, transcripts and analysis are kept for as long as your account exists, so your history is there when you come back to it.
Deleting a call from your History page removes that call, its transcript and its analysis from your account.
Deleting your account from Settings removes every call, transcript and analysis, destroys the recordings in storage, and erases your name, password hash, device and sign-up details.
The only thing kept after deletion is the record of payments you made, which we're required to hold for tax purposes. It no longer carries your name or email. For anything else you want removed, email support@dialy.site and we'll handle it within 7 days.

Dialy does not train, fine-tune or improve any model on your recordings, transcripts or results.
The two AI providers that process your calls, AssemblyAI (transcription) and Cohere (analysis), are both configured on our accounts so that customer data is excluded from their model training.
Your data is processed for one purpose only: producing the transcripts, scores, coaching notes and lead details you asked for.

We follow the principles of Egypt's Personal Data Protection Law (Law No. 151 of 2020): data is collected for a stated purpose, used only for that purpose, protected with technical safeguards, and deleted when you ask.
Some of the services that store or process your data run outside Egypt, in the EU and the US. They are listed below.
Dialy doesn't hold a formal security certification such as SOC 2 or ISO 27001 yet. If your company needs a security questionnaire filled in, email us and we'll answer it in writing.

Each one only receives what it needs for its job.

Cloudinary

Stores call recordings (private, signed access)

AssemblyAI

Transcribes recordings (excluded from model training)

Cohere

Analyses transcripts (excluded from model training)

Supabase

PostgreSQL database for accounts, transcripts and results

Fly.io

Runs the Dialy servers (Frankfurt, Germany)

We'd rather answer it before you upload your first call than have you wonder about it afterwards.