Legal
Privacy Policy
Last updated
What Telhey collects, why it is needed, who receives it, and your choices about personal information.
Who we are
Telhey is a browser calling service operated under the Telhey brand by a United States-based company. For questions about personal information or to exercise your rights, email contact@telhey.com.
This policy covers our website, accounts, calls, contacts, team workspaces, payments, and support communications. For account administration, billing, security, and operating our service, Telhey determines the purposes and means of processing. A business using a team workspace may separately determine how its contact lists and employees' information are used; its policies also matter. Contact your administrator or us for help identifying the appropriate party for a request.
The short version
- Telhey does not record or store call audio, offer transcription, or use call content to train AI.
- We keep call metadata needed to connect calls, show history, calculate charges, and prevent abuse.
- We use providers for hosting, calling, payments, email, optional Google account connection, and avatars.
- We do not sell personal information or share it for cross-context behavioral advertising. We do not use third-party advertising or audience analytics tools.
- You can edit or delete contacts you control and delete your account. Some payment, abuse-prevention, provider, and team records may remain, as explained below.
Information we process
Accounts and sign-in
We process your email address, name, profile image URL, account identifiers, verification status, login verification records, account creation and activity timestamps, and relevant trial eligibility. If you connect Google, we receive the account identifiers and profile information supplied for that connection. We do not receive your Google password.
We load Google Identity Services for signed-out visitors to offer One Tap sign-in. Loading this service sends Google technical request information, such as your IP address and browser information, even if you do not complete sign-in. You can dismiss the prompt and use email-code sign-in instead.
Calls and service usage
Call records can include calling and called numbers, destination country and network, initiation, answer and end times, duration, call status and failure reasons, applicable rates, charges, account or team identifiers, the initiating user's name and email, and provider call identifiers or technical events. These are call metadata, not recordings or transcripts.
With your browser's microphone permission, audio is transmitted in real time through our communication provider and relevant telephone networks to the other party. The other party and their network receive information needed to deliver the call, including the caller identity presented by the service. We cannot control whether a recipient independently records a call.
Contacts and teams
Contacts can contain names, phone numbers, company names, addresses, and notes you choose to add. We also process team names, membership, permissions, invitations, and shared workspace information. Contacts may describe people who never create a Telhey account. In that case, the information comes from the user or organization adding the contact, or from calls involving that number.
Purchases and billing
We process top-up amounts, bonus credit, wallet balances, transaction and Stripe identifiers, payment status, reversals, refunds, and dispute information. Card details entered in Stripe Checkout are handled by Stripe; our application does not store full payment card numbers or card security codes.
Technical information and correspondence
Hosting and communication systems process information such as IP addresses, browser and device information, request timestamps, diagnostic events, and security logs as needed to deliver and protect the service. If you email us, we receive your message, address, and any attachments. Please avoid sending unnecessary sensitive information or call contents.
Purposes and legal grounds
Where EEA or UK data protection law applies, the relevant grounds depend on the processing:
| Purpose | Information involved | Ground where applicable |
|---|---|---|
| Create accounts, connect requested calls, manage contacts and provide prepaid credit | Account, contact, call and payment data | Performing our contract with you; legitimate interests in providing an organization's requested service where you are its user |
| Secure the service, detect fraud and investigate abuse or disputes | Technical logs, call metadata, restrictions and relevant account/payment records | Legitimate interests in protecting users, recipients and the service; legal obligations where they apply |
| Meet applicable accounting, regulatory or lawful disclosure requirements | Relevant transaction, account and service records | Applicable legal obligations |
| Answer requests and administer team services | Contact details, correspondence and relevant workspace records | Contract performance or legitimate interests in assisting users and administrators |
| Optional processing that legally requires consent | Information identified when consent is requested | Consent, which can be withdrawn for future processing |
Our interests must be balanced against individuals' rights, with particular attention to children. Browser permission to use a microphone controls access to that device feature; it is not blanket consent to unrelated processing. We do not use acceptance of the Terms as blanket privacy consent.
You need to supply account, call-destination, and payment information necessary for the features you request. Without it, we may be unable to provide those features. Optional contact details and notes are your choice.
Who receives information
We disclose information necessary for these functions:
| Recipient | Function and relevant information |
|---|---|
| Cloudflare | Hosting, network delivery, security, application storage and database services; processes application data and relevant technical requests |
| Telnyx and interconnected carriers | Connect calls and calculate network usage; process voice in transit, phone numbers, call metadata and technical events |
| Stripe | Payment processing, fraud prevention, refunds and disputes; receives payment details and relevant transaction/customer information |
| Resend | Delivers verification, invitation and other service emails; receives recipient addresses and message content |
| Google, when you choose to connect it | Authentication and account linking; processes the authorization interaction and supplies selected account information |
| DiceBear | Supplies generated default avatars; the current avatar URL uses the account email as its seed, so loading that image can disclose the email and normal request information to the avatar provider |
| Your team and call recipients | Authorized team users receive information permitted by their role; recipients receive the call and presented caller identity |
Providers may have their own privacy responsibilities, including for payment, network security, legal compliance, or accounts you hold directly with them. Their policies are available from Cloudflare, Telnyx, Stripe, Resend, Google, and DiceBear.
We may also disclose relevant information when legally required, to respond to valid legal process, to protect rights and safety, or in connection with a business transfer subject to applicable privacy protections. We do not provide call audio to advertisers or AI training providers.
International processing
Telhey operates from the United States and uses providers and telephone networks that may process information in the United States and other countries. A call to another country necessarily involves international routing. Those countries may have different privacy laws from your country.
Where EEA or UK law requires a legal mechanism for an international transfer, that requirement is not waived by using Telhey. Relevant arrangements may need to include an adequacy decision or appropriate contractual safeguards. Contact contact@telhey.com for information about the arrangements applicable to your data. This policy does not represent that Telhey is certified under a data privacy framework.
Retention and deletion
Account profiles and contacts you control remain available while needed for your account or until you delete them. Call metadata remains available for service history, billing and security; Telhey currently does not offer per-call editing or deletion through the call-history interface. Contact us to request correction or deletion of information that cannot be managed in the interface.
You can delete a personal account through your profile. Deletion removes the profile, linked accounts, memberships and associated personal workspace data. Teams owned by that account and their associated workspace data are also deleted. This cannot be undone through the product and removes access to the affected wallets and credit.
Account deletion is not an immediate erase of every related record:
- Payment and webhook records may survive with account links removed, while transaction identifiers, amounts and other billing information remain for reconciliation, disputes or legal obligations.
- Abuse and restriction records, including email identifiers and relevant evidence, may remain to prevent circumvention and address security concerns.
- Call activity in a team you do not own may remain in that team's records, including the name or email recorded when the call was made. That organization's records are not automatically erased by deleting your own account.
- Providers may retain their own records under their policies and legal obligations. Infrastructure backup or recovery copies are not necessarily erased at the same instant as the live account data.
The current service does not apply one fixed automatic deletion period to all retained payment, call, security or team records. The appropriate period depends on the continuing service purpose, an unresolved payment or dispute, an active or relevant abuse restriction, applicable legal retention periods, and the rights of other people or organizations. Contact us for a review of retained information and its continuing necessity. We do not claim that all account-related data is immediately and irreversibly erased everywhere.
Your privacy rights
Depending on applicable law, you may request access to and a copy of your information, correction, deletion, restriction, portability, or objection to particular processing. Where processing relies on consent, you may withdraw it without affecting the lawfulness of earlier processing. You may have rights to challenge qualifying automated decisions and request human intervention.
Send requests to contact@telhey.com. We may need proportionate verification of your identity or authority, but do not send a password or login code. Rights can be subject to legal exceptions and the rights of others. We will address requests within the periods applicable to them and explain any applicable refusal or extension. Where applicable, authorized agents may act for you and you may appeal a refusal by contacting the same address. We do not discriminate against users for exercising protected privacy rights.
EEA and UK residents may complain to their local data protection authority, including the UK ICO. Other users may contact the authority available under their local law. You do not have to contact us first to exercise a right to complain.
Automated abuse checks
Automated checks analyze patterns in call metadata, such as rapid calls, repeated unsuccessful attempts, and repeated calls to a number. They can limit calls to a number or restrict account calling. No call recording or transcript is needed for these checks. If you think a restriction is wrong, contact us to request a human review and explain the circumstances.
Younger users
Telhey is not intended for children under 13. Users aged 13–17 may use it only with a parent or guardian's agreement and where local age, capacity and consent rules permit. A higher local minimum age applies where required. We do not currently provide a dedicated verified-parental-consent process; a child who requires such a process must not register until the applicable requirements can be met.
If you believe a child has supplied information contrary to these conditions, contact us so we can investigate and take appropriate action, including deletion where required. Parents and guardians can contact us about a child's privacy request; we may need to verify their authority.
Cookies, security and changes
See our Cookie Policy for login, workspace and appearance storage. We use measures designed to protect information, but no network or storage system can be guaranteed completely secure. Protect your email account and report suspected compromise promptly.
We may update this policy when the service or our practices change. The date above shows the current version. Material changes will be communicated as required, and consent will be requested for new processing where necessary. Questions may be sent to contact@telhey.com.