Wysper

Call Recording Policy

Effective Date: June 3, 2026

Wysper processes inbound sales calls to provide real-time coaching and post-call analysis. This policy explains how call recording and transcription work, how consent is handled, and how recordings are stored and retained.

1. How Recording Works

When a call comes in to a Wysper-connected phone number, the audio is streamed to our transcription service (Deepgram) for real-time speech-to-text conversion. The transcript is then analyzed by our AI engine (Anthropic Claude) to generate coaching prompts for the salesperson.

Audio from both the salesperson and the caller is captured as two separate channels, merged, encrypted, and stored for post-call analysis.

2. Consent Enforcement

Wysper enforces recording consent as a technical control, not a policy. Each shop is configured with one of two consent modes:

One-Party Consent Mode

For jurisdictions where only one party to the call needs to consent to recording (the salesperson's use of Wysper constitutes that consent). Recording begins immediately when the call connects. The majority of U.S. states operate under one-party consent laws.

Two-Party Consent Mode

For jurisdictions requiring all parties to consent before recording, Wysper plays an automated disclosure when the call connects. The caller must press 1 to consent. If the caller does not consent:

  • No audio is recorded
  • No media stream is opened
  • The call still connects to the salesperson normally
  • Real-time coaching is not available for that call

This consent gate is enforced in code — the media stream physically cannot start without confirmed consent in two-party mode. There is no override, and the behavior cannot be changed by end users.

Two-Party Consent States

The following U.S. states generally require all-party consent for recording phone calls. This list is provided for reference and is not legal advice — consult counsel for your specific jurisdiction:

  • California
  • Connecticut
  • Florida
  • Illinois
  • Maryland
  • Massachusetts
  • Montana
  • New Hampshire
  • Pennsylvania
  • Washington

3. What Is Recorded

  • Audio: Both sides of the conversation, captured as separate channels and merged into a single encrypted file
  • Transcript: AI-generated text from the audio, encrypted at rest
  • Entities: Names, business details, sign specifications, and other data points extracted by AI from the transcript
  • Coaching Data: Prompts shown to the salesperson, scoring, and post-call analysis

4. How Recordings Are Stored

  • All recordings are encrypted using AES-256-GCM before storage
  • Each shop has a unique encryption key — recordings from one shop cannot be decrypted with another shop's key
  • Recordings are stored in encrypted form on S3-compatible storage
  • Audio buffers are zeroed in memory after encryption and upload
  • Playback requires authenticated access and decrypts on demand — no cached plaintext copies exist

5. Retention and Deletion

  • Default retention period: 90 days from the date of the call (configurable per shop)
  • Recordings are automatically deleted after the retention period by a nightly job
  • Shop owners may also request immediate deletion of specific recordings by contacting support
  • Account deletion triggers deletion of all associated recordings within 30 days

6. Access Controls

  • Only authenticated users within the same shop can access recordings
  • Recording playback is logged in the audit trail (who accessed what, when)
  • There is no cross-shop access — tenant isolation is enforced at the database level
  • Wysper staff do not access customer recordings except when required for technical support with explicit shop owner authorization

7. Shop Owner Responsibilities

As a shop owner using Wysper, you are responsible for:

  • Selecting the correct consent mode for your jurisdiction
  • Ensuring your staff understand that calls are being recorded and coached
  • Complying with all applicable federal, state, and local recording laws
  • Customizing the consent disclosure message if required by your jurisdiction
  • Responding to customer requests regarding their recorded calls

8. Contact

For questions about this Recording Policy, contact:

Nuralyn Foundation for Ethical and Constitutional AI Governance
Email: privacy@wysper.cc