Data compliance

Last updated: September 30, 2026

Sales calls carry sensitive stuff. Client names, policy details, candidate info, deal terms. If you sell insurance or run a recruiting desk, that is not optional to get right. This page is how Tajirun treats that data so you are not guessing.

Your data stays yours

Call transcripts, recordings you upload, scorecards, coaching notes, and anything derived from them belong to you (the Customer). We process that data to run the product for your team. We do not sell it. We do not license it. We do not use it to train models we make available to other customers or the public.

What we process

Depending on how you use Tajirun, that can include transcripts, audio or video files you upload, call metadata, scores, coaching notes, and account information for your users. Transcripts often contain personal information about your prospects and clients. We treat that content as sensitive by default.

Consent and recording laws

If you record calls before sending them to Tajirun, you are responsible for getting lawful consent from everyone on the call. That includes one-party and two-party consent rules in US states, Canadian federal and provincial requirements, and any industry rules that apply to your business. Tajirun is not a party to your calls. We process what you submit under your instructions.

PIPEDA and Canadian privacy

For Canadian customers and Canadian client data, we design our handling around PIPEDA (the Personal Information Protection and Electronic Documents Act) and applicable provincial privacy laws. In plain terms:

• We collect and use personal information only for purposes related to providing Tajirun to you.
• We limit access to people and systems that need it to deliver the service.
• We take reasonable safeguards to protect personal information against loss, theft, and unauthorized access.
• You remain responsible for telling your clients and prospects how you use call recordings and transcripts, and for having a lawful basis to share that data with us as your service provider.

Individuals with privacy questions about a specific call should go to the business that made the call first. We will support Customers with access, correction, and deletion requests that apply to data we hold.

Other privacy regimes

Where GDPR, CCPA/CPRA, or similar laws apply, we honor applicable rights we can reasonably fulfill as a processor or service provider. That includes access, correction, deletion, and restriction requests made through your Customer account or sent to us in writing. Details live in our Privacy Policy.

Security

We encrypt data in transit and at rest, restrict internal access on a need-to-know basis, and use infrastructure and AI vendors under contracts that limit them to providing the service. No system is perfect. We still treat call content like it would hurt if it leaked, because it would.

Subprocessors

We use vetted vendors for hosting, storage, transcription or model inference, analytics, and payments. Those vendors process data only to deliver Tajirun. They are not allowed to use your call content to train general-purpose models for other customers.

Retention and deletion

We keep call data while your account is active, or for the retention window you configure where available. When you delete a call or close your account, we remove it from active systems and clear it from backups on our normal backup cycle. Write us if you need a specific deletion confirmed.

Questions

Privacy, compliance, or deletion requests: contact@tajirun.com.