Privacy Policy

This Privacy Policy explains how Tenre AI ("Tenre," "we," "us," or "our") collects, uses, stores, and shares information in connection with the call auditing and quality assurance platform we provide (the "Service"). It applies to the businesses that hold accounts with us ("Customers"), the individual users those businesses authorize ("Users"), and visitors to our sign-in and public pages.

The Service is a business tool, provided to organizations by invitation. We are not a consumer product, and we do not offer public self-registration. If you are an individual whose voice appears in a call recording processed by the Service, the business that recorded and submitted that call — not Tenre — decided to collect it; Section 4 explains what that means for you.

By using the Service, you agree to the practices described in this Policy. If you do not agree, do not use the Service.

1. Information We Collect

Account information. When an organization claims an account or a User joins one, we collect the User’s email address, a password (stored only as a salted cryptographic hash — we never store or see the plain password), the User’s role within the organization, and the organization’s name and settings.

Call Data. Customers upload audio recordings of telephone calls to the Service. From those recordings the Service generates transcripts, quality scores, flagged findings, and related analyses (together, "Call Data"). Call Data can include the voices, names, and personal details of the people on the call — whatever the Customer’s recording captured. We process Call Data solely to provide the Service to the Customer that submitted it.

Scorecards and configuration. The call scripts, scoring rubrics, checklists, and rules a Customer creates to define how its calls are graded.

Billing information. Paying Customers link a bank account for ACH payment through Stripe, our payment processor. Bank account details are collected and held by Stripe — Tenre never sees or stores your bank account or routing numbers. We store only Stripe’s reference tokens, your billing plan, invoices, and payment status.

Usage and log information. We record operational data such as sign-ins, minutes of audio processed, batches uploaded, feature usage, notification history, and access logs (including a log entry every time a parent organization or platform administrator views an organization’s call content). We use standard web infrastructure that records IP addresses and browser information in server logs.

Communications. Emails we exchange with you, including verification, password reset, billing, and notification emails.

We collect only what the Service needs. We do not buy data about you, we do not track you across other websites, and we do not use advertising cookies. The Service uses a single session cookie strictly to keep you signed in.

2. How We Use Information

We use the information we collect to:

(a) provide the Service — including transcribing recordings, analyzing transcripts against the Customer’s scorecards, and producing scores and reports;

(b) operate accounts — authentication, role-based access, invitations, and organization management;

(c) bill for the Service — metering usage, generating invoices, and collecting payment through Stripe;

(d) send Service communications — verification, password reset, billing notices, and the notifications a User has enabled;

(e) keep the Service secure — detecting abuse, enforcing suspension and access rules, and maintaining audit logs;

(f) improve the Service — using aggregated, de-identified operational metrics (never the content of your calls).

We do not use your call recordings, transcripts, or scorecards to train artificial intelligence models, and we do not permit our AI providers to do so. Call Data is processed to serve your account, and for no other purpose.

We do not sell personal information, and we do not share it for cross-context behavioral advertising.

3. AI Processing

The Service uses third-party artificial intelligence models to transcribe audio and analyze transcripts. Recordings and transcripts are sent to our AI provider (currently OpenAI) under commercial terms that prohibit the provider from using your data to train its models. AI outputs — transcripts, scores, findings — are probabilistic and may contain errors; they are delivered to the Customer for human review, and our Terms of Service govern how they may be used.

4. Call Recordings and the People In Them

Tenre does not record calls. The Customer records its calls, decides what to upload, and is responsible under our Terms of Service for having obtained every consent and provided every notice that call-recording laws require.

For the content of call recordings, Tenre acts as a service provider (a "processor") on the Customer’s instructions. If you are a person whose voice or information appears in a recording and you want it accessed, corrected, or deleted, please contact the business that recorded the call — they control that data, and we will support their requests. If you contact us directly, we will refer your request to the relevant Customer where we can identify them.

5. How Information Is Shared

We share information only as needed to run the Service:

Service providers. We use a small set of infrastructure providers to operate the Service: Google Cloud / Firebase (database and file storage), Vercel (application hosting), OpenAI (transcription and analysis), Stripe (payments and bank verification), and Resend (transactional email). Each receives only what its function requires and is bound by its own contractual and security obligations.

Within your organization’s structure. If your organization was created beneath a parent organization (a "sub-organization"), the parent can view your organization’s usage, scores, and aggregate metrics, and — unless your organization turns this off in its settings — your call recordings and transcripts. Every such access is logged, and the setting is disclosed during account setup. Tenre’s own platform administrators can access account data for support, billing, and abuse investigation; that access is logged as well.

Legal requirements. We may disclose information if required by law, subpoena, or court order, or where necessary to protect the rights, safety, or property of Tenre, our Customers, or others. Where lawful, we will notify the affected Customer before disclosing its data.

Business transfers. If Tenre is involved in a merger, acquisition, or sale of assets, information may transfer as part of that transaction; this Policy will continue to apply until a successor policy takes effect and notice is given.

We never share your data with advertisers or data brokers.

6. Data Retention

Audio recordings are kept on a rolling window the Customer controls: by default we retain audio for the organization’s 6 most recent upload batches (configurable from 1 to 52), after which older audio files are automatically and permanently deleted. This limits how long raw voice recordings exist on our systems.

Transcripts, scores, and reports are retained while the account is active so the Customer keeps its quality history. Customers can delete individual calls or batches at any time from within the Service, which permanently removes the associated recordings and transcripts.

Account and billing records are retained while the account is active and afterward as needed to satisfy tax, accounting, and legal obligations.

When a Customer’s account terminates, we delete or de-identify the Customer’s Call Data within a commercially reasonable period, except where law requires longer retention.

7. Security

We protect information with measures appropriate to its sensitivity: encryption in transit (TLS) and at rest, passwords stored only as salted hashes, role-based access controls enforced on the server for every request, organization-level data isolation, single-use invitation and claim codes, and audit logging of cross-organization access. Payment credentials are handled entirely by Stripe and never touch our systems.

No system is perfectly secure. If we learn of a breach affecting your personal information, we will notify affected Customers and authorities as applicable law requires.

8. Your Rights and Choices

Depending on where you live, you may have rights over your personal information — including the right to access, correct, delete, or receive a copy of it, and the right not to be discriminated against for exercising those rights.

Users can update their account details and notification preferences in the Service, and can ask us to delete their user account by contacting us.

Customers control their organization’s data directly: deleting calls and batches, configuring audio retention, and managing sub-organization access from within the Service.

Individuals recorded on calls should direct requests to the business that recorded the call, as described in Section 4.

To exercise a right with us directly, email us at the address in Section 12. We will verify your request and respond within the time applicable law requires. We do not sell personal information, so there is nothing to opt out of selling.

9. Children

The Service is a business tool and is not directed to children. We do not knowingly collect personal information from anyone under 16 as a User. If you believe a child has created a User account, contact us and we will delete it.

10. International Users

The Service is operated from the United States, and information is processed and stored on servers in the United States. If you access the Service from outside the United States, you understand that your information will be transferred to and processed in the United States, where privacy laws may differ from those of your jurisdiction. Customers subject to laws requiring specific transfer safeguards (such as the GDPR) should contact us to put appropriate data processing terms in place before submitting personal data from those jurisdictions.

11. Changes to This Policy

We may update this Policy as the Service evolves. If we make material changes, we will notify Customers through the Service or by email before the changes take effect, and we will update the "Last Updated" date above. Continued use of the Service after changes take effect constitutes acceptance of the updated Policy.

12. Contact Us

Questions, requests, or concerns about this Policy or your information can be sent to:

Tenre AI — support@tenre.ai

We will respond as promptly as we can, and in any event within the time required by applicable law.