Security & Compliance·Updated Feb 6, 2026
Data Processing & Privacy
Detailed information about how KendoAI processes and protects your data.
Data We Collect
Account Information - Email, name, profile photo, and organization details for account management.
Call Data - Audio recordings, transcriptions, and AI-generated analysis of sales calls you upload or integrate.
Training Data - Roleplay session recordings and performance scores from AI training sessions.
Usage Analytics - Feature usage, session duration, and interaction patterns to improve our product.
Technical Data - IP addresses, browser type, and device information for security and troubleshooting.
How We Use Your Data
Service Delivery - Process calls, generate transcriptions, provide AI analysis and coaching
Product Improvement - Aggregate, anonymized analytics to improve features (never individual call content)
Security - Detect and prevent fraud, abuse, and security threats
Support - Respond to your requests and troubleshoot issues
Communication - Send product updates, tips, and important notices (with opt-out options)
Data Retention
Active Data - Retained while your account is active and for 30 days after deletion request
Call Recordings - Configurable retention periods from 30 days to indefinite, controlled by workspace admins
Transcriptions - Retained for the same period as associated recordings
Analytics Data - Aggregated metrics retained for performance tracking; raw data follows retention policy
Logs - Security and audit logs retained for 12 months for compliance and forensics
Your Data Rights
- You have full control over your data:
- 1. Access - Export all your data at any time from Settings > Data Management
- 2. Correction - Update or correct any personal information in your profile
- 3. Deletion - Request complete deletion of your account and associated data
- 4. Portability - Download your data in standard formats (JSON, CSV)
- 5. Objection - Opt out of non-essential data processing
Subprocessors
We use carefully vetted subprocessors to deliver our services:
Amazon Web Services - Cloud infrastructure and data storage (US regions)
OpenAI / Anthropic - AI processing for analysis and training (no data retention)
Stripe - Payment processing (PCI DSS Level 1 certified)
A complete list of subprocessors is available upon request, and we notify customers of changes.
Data Processing Agreement
Enterprise customers can request a Data Processing Agreement (DPA) that includes:
- Standard Contractual Clauses for international data transfers
- GDPR-compliant data processing terms
- Subprocessor notification procedures
- Security commitments and audit rights
Contact sales@kendo.ai to request a DPA.