What happens to a call I answer for you
Lorela answers the calls you can't get to, records them, and transcribes them. Here's a straight answer on where that call goes, who can get to it, and how long we keep it.
Updated November 1, 2026
This is the human version. You'll find the legal wording in our privacy policy, and this page doesn't cut anything from it - it just puts it the way we'd tell you over the phone.
The three questions we hear most
Does this assistant record my calls? Who can listen to them? And is it learning something from them?
The answers, in order: yes; only you and a small circle of people on our team; and yes, they help improve Lorela unless you turn that off. On top of that, once a week we check quality on pseudonymized transcripts of some calls. The rest of this page spells out those three sentences.
Where your call goes
The most common worry isn't about us - it's about how many hands the whole thing passes through. So here's the entire route, step by step, including the country where each step happens. An overview of every supplier that touches it, by role and country, is further down this page.
| What happens | Who handles it | Where |
|---|---|---|
| Someone dials your number. Your phone rings first, and you pick up just like you always have. | Your carrier | USA |
| You don't answer, you're on another call, or you're out of range. Your carrier forwards the call to the Lorela number. | Your carrier | USA |
| The call arrives on our phone line. | Phone infrastructure | EU |
| The assistant answers and talks with the caller. This is where the audio recording and the transcript are made. | Voice technology | USA |
| The transcript is turned into a summary - what the caller wanted and when to get back to them. | Language model | USA |
| The transcript, the summary, and the caller's name and number are saved in our database. | Our database | Frankfurt |
| The summary reaches you by email or as a notification on your phone. | Delivery services | Outside the EU |
| Once a week, a language model reviews pseudonymized transcripts of some calls as a quality check. | Language model | USA |
Swipe the table sideways to see more columns.
The most important sentence on this page
Your account, your contacts, and your call transcripts sit in one database in Frankfurt, with no replica anywhere else; the website and the app run there too. The exception is copies of transcripts for the weekly quality check, which are kept separately on the operator's encrypted computer - in their original form usually for 14 days, pseudonymized for 8 weeks.
The call itself does leave Europe, though: the model that talks with your caller runs in the USA, and that's where the audio recording is made too. We put this up top on purpose, because it's easy to leave out. Anyone who claims their voice assistant runs entirely in Europe should be able to tell you exactly where the model that does the talking runs.
For transfers outside Europe, we have Standard Contractual Clauses approved by the European Commission in place. We're working on keeping the whole call in Europe - when that happens, we'll update this page before we update our ads.
What we don't do with your calls
We don't sell them
To no one, ever, under any circumstances. Recordings, transcripts, and contacts are not a side income for us, and they never will be.
We don't turn your callers' numbers into a marketing database
The number of someone who calls you doesn't set anything in motion on our end. We won't call it, we won't send it an offer, and we won't add it to any list. We use it only to tell you who called and, during the quality check, to hide it in the transcript.
We don't recognize people by their voice
Lorela recognizes a caller by the phone number in your contacts, not by their voice. We don't do any voice biometrics, and we don't try to read mood or emotion from a voice.
We don't borrow other companies' badges
Our suppliers have certifications, but they're theirs, not ours. Passing them off as your own is common in this industry, and it's misleading.
Who can get to your calls
You, in your account. A recording never sits at a public address that could be sent to someone - it always goes through our server, and only to your signed-in account. All twelve ways to get to the content of a call require signing in; we checked them one by one.
Besides you, only a limited circle of people on our team, and only when it's needed to run the service or when you write to us. If you tell us a summary didn't arrive, we have to look at that specific call - otherwise we couldn't help you. For the weekly quality check, we also read pseudonymized transcripts of some calls, meaning transcripts where names, contacts, and sensitive numbers are replaced with tags or random digits.
No one else. No outside operator, no temp at a call center. That's the difference from answering services staffed by people, where a stranger picks up your call and the company covers it with a confidentiality agreement - with us, that person simply doesn't exist.
How long we keep it
The largest fine the EU data protection authority that oversees us has ever issued on this subject wasn't for recording calls. It was for a company that kept its recordings for ten years. That's why the time limits here are specific.
| What | How long | What happens next |
|---|---|---|
| Call transcript and summary | 1 year from the call | They disappear on their own, with nothing for you to do. A year, because that's how long it usually takes to settle what was agreed. |
| Transcripts for the weekly quality check | 8 weeks (anchor set until its quarterly refresh) | We usually keep them in their original form for just 14 days, and pseudonymized, along with their reviews, for 8 weeks; after that, the weekly cleanup deletes them. We refresh the anchor set of about 20 pseudonymized calls every quarter. |
| Audio recording | Held by our voice provider | It never sits on our servers. You play it through us, from their storage. We don't have a contractual time limit for how long they keep it yet - see "What we don't know for sure yet." |
| A call you delete | 30 days in the trash | It leaves the trash and is no longer available to you either. On our side, it runs out the same one-year period as any other call, then it's deleted. |
| Contact list | As long as you have an account | When you close your account, we delete it right away and for good. You won't get it back even if you restore the account. |
| Account history | 1 year from the last entry | It's an operations log - which messages we sent you and when, and what happened with your subscription. |
| Sign-in link | 15 minutes | After that, it no longer works. A code sent by text or email is valid for 10 minutes. |
Swipe the table sideways to see more columns.
Does anything learn from your calls?
Yes, and we'd rather tell you ourselves than wait for you to ask. Recordings and transcripts help Lorela get better at understanding names, addresses, and the way people really talk on the phone. It's the difference between an assistant that writes down "Shivon" and one that writes down "Siobhan."
In your account settings, there's a switch called "Help improve Lorela." It's on by default. If you turn it off, your calls won't be used for anything like this, and you lose nothing - Lorela works for you exactly the same.
Selling is a different matter from improving, and it's out of the question either way.
Separately, once a week we check Lorela's quality on some calls. First, we automatically pseudonymize the transcript - names, addresses, contacts, and sensitive numbers are replaced with tags or random digits - and only then does a language model review it as an independent judge. What's rated is how Lorela did, not you or the caller, and the result is just aggregate numbers for us. The "Help improve Lorela" switch doesn't turn this check off; if you'd rather not be part of it, email us and we'll take your account out of it.
What the person who calls you will hear
Our research into discussions among business owners and callers was clear on this: people don't mind AI; they mind AI that pretends to be human. Anyone who spends fifteen seconds not knowing what they're talking to, then figures it out, feels tricked - while being upfront about it actually means fewer hang-ups.
The first sentence of every call
Hello, this is Lorela, John Smith's virtual assistant. How can I help you?
She says she's an assistant on every call, and that can't be turned off. If a caller asks whether they're talking to a machine or what happens to the call, she says it plainly: the call is transcribed so she can pass the message on to you. On Czech accounts, Lorela can also call back someone who couldn't reach you and find out what they needed. US accounts don't have that, so Lorela doesn't call the people who called you; if that changes, this page will say so first.
Under the EU AI Act, we're the provider, not you. So the duty to tell callers they're talking to a machine falls on us, and every call meets it. You don't have to keep track of anything for this.
Lorela doesn't make deals, either. She doesn't promise dates or prices, and she doesn't give advice - she just finds out what it's about and passes it on to you. A business can be held to what its bot promised a customer; that's why Lorela makes no promises.
Are you allowed to have your calls recorded?
That depends on the law that applies to you and your callers, so we won't give you a blanket yes. Here's what we can tell you for certain.
Lorela takes part in the call herself: she answers it as the party being called, on your behalf, and in her very first sentence she says she's an assistant.
It also helps to know how this differs from a call center. The European rules that limit call recording are aimed at companies that record calls to monitor and train their agents - there, the recording is a by-product. With Lorela, the recording is the reason the call happens at all: she's a smart answering machine that passes a message on to you.
What we ask of you: include a sentence in your own information for customers saying that an assistant answers the calls you miss and that the call is transcribed. Email us and we'll send you a ready-made text you can simply paste in.
When Lorela gets it wrong
She will. Sometimes she mishears a name; sometimes one street sounds like another. The more interesting question is what happens next - and the answer is that you find out right away, not two days later from an annoyed customer.
After every call, a summary reaches you, and it always includes the caller's number and the time of the call, even if the conversation went nowhere. Even if the caller hangs up after three words, you know who to call back - just like with an ordinary missed call.
For every call, the app has the full transcript and the recording. If something in the summary doesn't add up, you can hear what was actually said in ten seconds. You don't have to trust the summary; you can check it.
And when Lorela isn't sure, she asks again rather than guess. She never puts anything in the summary that wasn't said on the call.
When you leave
You can close your account in the app or on the website, and it happens right away. Lorela stops answering your calls, and we delete your contact list immediately and for good.
For 24 hours, the account can be restored - if you sign in with the same number within that time, you get your profile back, but without your contact list. After that, you can't sign in to it anymore; the exception is the personal link in the message (text or email) you get after the account is deleted: it restores the account as long as the link is valid (400 days from when the message was sent).
Transcripts and summaries run out their one-year period from the call, even after the account is closed. A record that the account existed also remains - name, contact details, plan, and the dates it was opened and closed - for accounting.
Want it gone sooner? Email hello@lorela.ai from the address your account is registered with, and we'll handle it by hand within 30 days.
Who touches your data
These are on the call's path. Without them, Lorela couldn't pick up the phone. Rows marked "not used for US accounts" never see data from a US account.
| What for | What we send | Where |
|---|---|---|
| Phone infrastructure and text messages for Czech accounts (not used for US accounts) | Phone numbers and text messages of Czech accounts only | Czech Republic |
| Sending texts under the Lorela name in the Czech Republic (not used for US accounts) | Phone numbers and texts of Czech accounts only | Czech Republic |
| Sending text messages and backup phone infrastructure | Phone numbers, text messages | USA |
| US and Polish phone numbers and their connection to voice processing | Phone numbers, call audio | EU |
| Voice processing of calls | Call audio, the caller's name and number, your name and business description | USA |
| Processing the text of calls and chats; for some calls, a weekly quality review of a pseudonymized transcript | Call transcript, your name, the caller's number, the content of your chat conversations; for the weekly quality review, only a pseudonymized transcript | USA |
| Database infrastructure | Everything we keep about you and your calls | Frankfurt |
| Hosting infrastructure | Everything that passes through the app | Frankfurt |
| Delivering email and receiving messages at hello@lorela.ai | Your email address, name, summary text, and the caller's number; the text of emails received and sent | USA |
| Delivering messages to Telegram for accounts that link it (not used for US accounts) | Summary text, the caller's number, and the audio file; nothing from US accounts | Outside the EU |
| Delivering notifications to iPhone and App Store subscriptions | Summary text and the caller's number in the notification, the purchase ID, and, for a refund request, information about the service's availability, whether it handled calls, and our position on the request | USA |
| Delivering notifications to Android and booking appointments | Summary text and the caller's number in the notification | USA |
Swipe the table sideways to see more columns.
And these are outside the call. Measurement code in your browser (pixels, retargeting, conversion code) doesn't load at all without your cookie consent - but we do send the data in rows marked "legitimate interest" even without consent; the explanation is below the table.
| What for | What we send | Where |
|---|---|---|
| Subscriptions purchased on Google Play | Purchase ID | Ireland |
| Transferring and recording requests for a phone demo from an ad form | Name, phone number, answer about how the service would be used, demo request, consent record, time, and form and ad IDs | Outside the EU |
| Card payments on the website | Email and billing details. Your card number never reaches us. | Ireland |
| Ad targeting and measurement (phone and email hash)legitimate interest | Hashed phone number and email address | USA |
| Measuring ad performance (IP and browser)only with consent | IP address, browser identifier | USA |
| Measuring ad performanceonly with consent | A record that a visit from an ad led to trying the service | USA |
| Measuring payments from ads (phone and email hash)legitimate interest | Hashed phone number and email address | USA |
| Measuring ad performance and retargeting for ads in the Czech Republiconly with consent | A record that a visit from an ad led to trying the service | Czech Republic |
| Measuring the performance of ads with a TikTok form (phone hash)legitimate interest | Hashed phone number and lead ID | Outside the EU |
| Receiving comments and publishing replies on social medialegitimate interest | The text of our reply (for a reply to a reply on Instagram, also the commenter's @username) and an instruction to delete our reply | USA |
| Drafting replies to comments and messages on social medialegitimate interest | The text of the comment or message, the profile name, the text of the post or ad, and the names and texts of other comments in the same thread | USA |
| Drafting replies to emails sent to hello@lorela.ai | Message text, subject, and the sender's name (not their address); for a verified customer, also their account details | USA |
| Adding to our knowledge base from new questions | The question with phone numbers and email addresses masked, without the sender's address, and our last 50 replies; for a verified customer, also their account details | USA |
| Copies of comments and automatic replies on social media for review by our teamlegitimate interest | Comment text, profile name, and the text of the published reply | Outside the EU |
| Copies of emails and draft replies for review by our team | Message text, subject, the sender's name and address, account details of a verified customer, and the draft reply | Outside the EU |
Swipe the table sideways to see more columns.
We send the data in rows marked "legitimate interest" under Article 6(1)(f) of the GDPR, whether or not you consent to cookies. To Meta, we send a hash - a scrambled fingerprint - of the phone number and email address of customers and prospects (from a demo call, a form, an inquiry, or a call to our sales line); we use it to target and measure ads among people who already are, or could become, customers. To Google, we send a hash of the phone number and email address when someone pays for a subscription, so we can measure which ads lead to a payment. To TikTok, we send a hash of the phone number only for people who came to us through a form in a TikTok ad, and only to measure how far they got after the form - not for targeting. You can object to this at any time: email hello@lorela.ai and we'll stop the transfer for your number or email address.
We don't name the specific companies behind these roles here, because that would double as a guide for competitors on how to rebuild Lorela. We'll send the named list on request to any customer and to anyone who asks - just write to us.
The recordings, transcripts, and summaries these suppliers work with stay yours. Neither we nor they claim any rights to them.
Certifications we don't have
We don't have ISO 27001 or SOC 2. We're a small Czech team, and an audit costing tens of thousands of dollars wouldn't tell you much more about our work than this page does. If you need one for your own audit, email us - we'll tell you straight whether we can meet your requirements, instead of stringing you along.
We don't have an independent third-party security audit either. When we do, we'll say so here, along with who did it.
What we have instead
- A database in Frankfurt in a single region, with no replica anywhere else, an encrypted connection, and a daily backup.
- Recordings that never sit at a public address and are never stored on our servers.
- A one-year limit, after which a call disappears on its own, without anyone having to ask.
- A named list of everyone your data passes through, including which country they're in.
- A switch that stops your calls from being used to improve Lorela.
- A public service status page showing reliability over the last 30 days - measured on real calls, not on whether our server responds.
What we don't know for sure yet
This section is here on purpose, and it won't be empty. If it ever disappeared, it would mean we'd stopped telling the truth, not that we'd become perfect.
How long our voice provider keeps recordings
Recordings don't sit with us. They do sit with our voice provider - and today we have no contractual time limit for when they delete them. We're working on it, and until then we're not giving a number here, because we'd have to make one up.
Training at our voice provider
We're still negotiating contract terms confirming that our suppliers' models don't learn from your calls. Until we have it in black and white, we don't claim it. For transcripts and summaries, we already have it documented.
The greeting doesn't announce recording
The assistant always introduces herself as an assistant, but she doesn't say on her own that the call is recorded - she explains what happens to the call when asked. We're weighing whether to add it to the greeting. European guidance on transparency (the WP260 guidelines) allows information given by phone to be layered, so not all of it has to come at the start of the call. In the US, the rules on recording calls differ from state to state, and we haven't finished checking what they mean for your calls.
Common questions
Who can listen to the recordings?
You, in your account, and a small circle of people at Lorela when we're solving a problem for you in support. No one else - we have no outside operators. A recording never has a public address that could be forwarded to someone.
Does some AI learn from my calls? Could it leak them to a competitor?
Your calls help improve Lorela, mainly at recognizing names and addresses, and you can turn that off in settings. The switch doesn't turn off the weekly quality check on pseudonymized transcripts of some calls, though - if you don't want it, email us. It can't leak them to anyone: the model doesn't remember word-for-word sentences from calls, and we don't sell your data to anyone. We're still negotiating contract terms confirming that our suppliers' models don't learn from them - see "What we don't know for sure yet."
Where are the recordings kept, and for how long? Can I have them deleted?
The transcript and summary are kept in a database in Frankfurt and disappear on their own a year after the call. We don't keep the audio recording ourselves; our voice provider holds it. You can delete a call in the app, and if you want everything gone sooner, email us and we'll take care of it within 30 days.
Do I have to tell callers the call is recorded? Is one sentence at the start enough?
Lorela tells every caller they're talking to an assistant, and that duty is ours, not yours. We recommend adding a sentence about the assistant to your own information for customers too - ask us for a ready-made text and we'll send it. European guidance on transparency (WP260) allows information given by phone to be layered, so not all of it has to come at the start of the call. For calls in the US, see "What we don't know for sure yet."
Could a data protection authority fine me over this?
We haven't found a single case of the EU data protection authority that oversees us fining anyone for recording calls the caller knew about. The only fine on this subject we did find was for a company that kept recordings for ten years. That's why calls with us disappear on their own after a year. For the US, see "What we don't know for sure yet."
Is recording a call a crime?
That's decided by the law that applies to you and your callers, so we won't answer it with a blanket no. What we can tell you is how Lorela takes part: she answers the call herself, as the party being called on your behalf. And who can get to a recording afterward matters just as much - that's why this page has a section on exactly that.
Will my regular customers notice that an assistant is answering?
Yes - she tells them herself, in the very first sentence. According to discussions among callers, that's how it should be: what makes people angry is AI pretending to be human, not AI. And after five in the afternoon, the comparison isn't the assistant versus you - it's the assistant versus voicemail.
What happens to my callers' data when I leave?
We delete your contact list immediately and for good when you close your account. Transcripts and summaries run out their one-year period from the call. We keep a record of the account for accounting. If you want everything gone right away, email us.
Didn't find your answer?
Email us at hello@lorela.ai. We answer questions about your data ourselves, not a form - and if we don't have an answer, we'll tell you. Our digital assistant can answer routine setup questions; anything about your data, we handle personally.
Service statusPrivacy PolicyData Processing AgreementTerms of Service