01. Who controls the data
When a business uses Zebmic to record and analyse calls, that business (the “Customer”) decides which calls are recorded and why. For call data, the Customer is the data controller and we act as a processor on its instructions.
For account and website data, such as the details you enter when you sign up or contact us, we decide how that data is used and act as the controller.
02. What we collect
Call data
- Audio and video recordings of calls connected by the Customer.
- Transcripts, translations, speaker labels and timestamps generated from those recordings.
- Analysis outputs: scorecards, deal moments, talk metrics, clips, summaries and notes.
- Call metadata such as participants, phone numbers or meeting IDs, duration and source tool.
- Consent records, such as whether a recording notice played and whether a participant confirmed.
Account data
- Name, work email, company, role, team size, tools used and languages, as entered on sign up.
- Login activity, workspace settings and integration settings.
- Billing details handled by our payment provider. We do not store full card numbers.
Website data
Basic technical information such as IP address, browser type and pages visited, used to keep the site secure and working.
03. How we use it
- To record, transcribe, translate, score and analyse calls for the Customer that owns them.
- To write summaries, next steps and other fields to the Customer's connected CRM, as configured by the Customer.
- To create and manage accounts, send login details and respond to support requests.
- To keep the service secure, prevent abuse and meet legal obligations.
We do not sell personal data. We do not use one Customer's call data to train or improve AI models used for any other Customer.
04. Recording notice and consent
Customers must inform everyone on a call that it is recorded and analysed, as required by applicable law. Zebmic provides a recording notice and optional consent prompts to support this, and does not process calls where the configured notice was not given.
Customers must also inform their own team members that their calls are analysed for coaching and quality.
06. How long we keep it
Call recordings, transcripts and analysis are kept for the retention period the Customer's admin sets, then permanently deleted. Clips follow the retention of the call they came from unless an admin marks a library for longer retention.
When a Customer closes its workspace, call data is deleted within 30 days, after an export window. Account data is kept as long as needed for billing, tax and legal records.
07. How we protect it
- Encryption of data in transit and at rest.
- Role-based access, so reps see their own calls and managers see their team.
- Redaction options for card numbers, OTPs and other sensitive numbers.
- Access to production systems limited to staff who need it, with activity logged.
08. Your rights
Depending on where you are, you may have the right to access, correct, delete or export your personal data, or to object to or restrict certain processing, including under India's Digital Personal Data Protection Act, 2023.
If you were on a call recorded by one of our Customers, please contact that business first, as it controls the recording. We will help the Customer respond. For account data, contact us through the Talk to us page.
09. Changes to this policy
If we make a material change, we will tell Customers by email or in the product before it takes effect.