How we care for personal data.

What personal data Egret handles when your team records a conversation, where it is stored, how consent is asked for, and how each person's rights are handled in the United States, Mexico and Ecuador.

Principles

Processed where it happens. Audio and transcript are processed on your rep's phone. Your servers receive the results.
Just what helps improve. Egret records what the script asks to capture and how it was followed.
With the person's consent. Every recording starts with the country's notice and the consent its law requires.
Everything leaves a record. Every consent, request and change is recorded and can be shown.

The path of the data

Your rep picks the person and the country, reads the short notice and shows the link to the full notice.
The person agrees as the law requires: no objection, a spoken yes, or a signature on the screen. If they decline, the conversation goes on without recording, and the refusal is recorded.
When the conversation ends, the phone's speech model transcribes it and the phone's language model answers the script, quoting the words behind each yes. Phone numbers, emails, government IDs, addresses and account numbers are masked before anything leaves.
The answers, adherence, consent and the trace of the result reach your organization over HTTPS, signed with the phone's own key.
The phone deletes audio and transcript when your script says; by default, when processing ends.

Each script lists the countries where it is used. On publishing, Egret writes each country's notice with your company as the business responsible, the purposes you wrote and the data the script captures, stores it with its digital fingerprint and publishes it at its own link.

United States

A notice at collection, in English: categories, purposes, retention and rights.
A spoken yes before recording. One rule that also meets the states requiring every party to agree.
A signature when the script may include sensitive information, such as health.
Rights to know, access, correct, delete and take their data, to limit the use of sensitive information and to not be treated differently for using them. Answered within 45 days.
Egret does not sell personal information or share it for cross-context behavioral advertising.

Consent records

Every conversation leaves a record, including when the person says no: the country and law, the exact notice and its fingerprint, how consent was given and what the law required, the signature and name when signed, when, and which rep recorded it. Consent records are kept as proof; withdrawal marks them, deletion removes the signature and keeps the record that consent existed.

Rights

Every organization has a public form linked from each notice. The person picks the country of the conversation and sees the rights of its law and the deadline. Your privacy officer identifies the person, decides, and Egret carries it out: delivering the data, correcting the record, deleting conversations, recording the objection or the withdrawal, and drafting the reply.

Retention

On the phone: audio and transcript, 0 to 365 days as the script sets.
On the server: results for as long as the script sets; consents and the audit log, always.
Backups: one copy every night, encrypted with your organization's own key, in its own region, for 35 days.

Who is responsible

Your organization decides what the data is for and how long it is kept. Egret is your service provider: it processes the data only to provide the service and on your instructions. Egret relies on one subprocessor, Cloudflare, listed on the subprocessors page.

Health information

If your organization is subject to HIPAA, write to datospersonales@datil.com before processing protected health information, to agree on the terms that law requires.

Updated 2026-10-26.