CallPalCall recording, encrypted and kept exactly as long as you say
Every answered call lands on its record with a player beside it. A year later, what matters isn’t the recording. It’s who could open it, and whether it’s still there at all.
- Encrypted at rest
- Every playback audited
- Retention you set
Only the calls that happened
Recording starts when the callee picks up, not when the rep clicks dial. A call that rang out, hit a busy signal or failed at the carrier never becomes a file. There’s nothing to store, and nothing to sweep up later.
What is stored goes to object storage, encrypted at rest, with the database keeping only a pointer to it. Playback runs through an authenticated endpoint inside the app: there is no public link to a recording, and no URL that keeps working once it leaves your account.
The row in the call log outlives the audio. When a recording reaches the end of its retention window the file is destroyed, and the call itself stays exactly where it was: who dialed, when, how long, how it ended. The history is append-only, and only the audio expires.
| Recording | Caller Name | Role | Contact Name | Country | Started At | Finished At | Duration | Talk Time | Hangup | Call Type | Outcome |
|---|---|---|---|---|---|---|---|---|---|---|---|
| Play18s paused | Dana Whitfield | Admin | Acme Retail | US | 9/29/202610:42 AM | 9/29/202610:46 AM | 4:12 | 4:02 | Caller | Click to call | Completed |
| Play | Marcus Bell | Member | Northwind | UK | 9/29/202610:39 AM | 9/29/202610:41 AM | 1:38 | 1:30 | Contact | Power dialer | Completed |
| Play | Priya Nair | Member | Cedar & Vine | US | 9/29/202610:31 AM | 9/29/202610:37 AM | 6:05 | 5:58 | Caller | Click to call | Completed |
| — | Tom Alvarez | Member | Alvarez Group | US | 9/29/202610:28 AM | 9/29/202610:28 AM | 0:22 | — | No Answer | Power dialer | No AnswerNo answer |
A Play button on every answered call, and on the first row, the badge that says 18 seconds of it were paused by the rep.
Your plan is a ceiling, not the answer
Most tools give you the retention their tier decided on. Here the tier only sets the maximum. The window itself is yours, and shorter is always allowed.
- Starter
- 90 days
- Set anything shorter and it sticks. A 30-day window is a setting, not a downgrade.
- Pro
- 1 year
- The usual answer for a team that reviews calls in coaching sessions.
- Scale
- Indefinite
- No sweep unless you ask for one by setting a window yourself.
Two behaviours are worth knowing before you pick a number. Asking for a window longer than your ceiling is refused, not silently shortened. A setting that displays one figure while the sweep enforces another is worse than no setting at all.
And a downgrade does not take effect on the audio for 30 days. The tier you left is what gets honoured for a month, so a plan change made in a hurry cannot destroy a year of recordings within the hour. The one exception is a trial nobody continued: that account loses its audio 30 days after the trial ends.
Who can open it, and what that leaves behind
A recording is the most sensitive thing this product holds, and it’s treated that way.
Every playback is written down
Opening a recording is audited against the call. It’s the only read in the product that gets logged routinely: listing calls isn’t audited, listening to one is.
Listening is its own permission
Access to the call log and access to recordings are separate rights. Someone can review what happened on a call without being able to hear it, and the Play button is simply absent for them.
A disclosure the callee hears first
The recording notice plays to the person you called before the two legs are joined. If the announcement can’t play at all, the call is dropped instead of connected unannounced.
The rep can pause mid-call
Taking a card number, the rep pauses their own recording and resumes it. The audio stays full-length with that stretch as silence, and the call log badges the row “18s paused”, so nobody draws a conclusion from a recording with a hole in it.
When someone asks to be erased
Erasing a contact destroys the audio of every call ever placed to them, then scrubs the contact record itself. The order is deliberate: the recordings go first, so a step that fails halfway fails having already removed the audio rather than having kept it and lost the paperwork.
What stays behind is a marker saying this person was erased. That’s what stops the next CRM sync from importing them back in as a new contact and starting the whole thing again. Without it, a right-to-erasure request would undo itself on the next import.
Recording, in plain terms
Are all calls recorded?
Every call that was answered. A call that rang out or failed never produces audio at all, because the recording starts when someone picks up. There’s no file of a phone ringing.
Where is the audio stored?
In S3-compatible object storage, encrypted at rest, with the database holding only a reference to it. The audio is served through an authenticated endpoint, never a public link, and the player fetches it through your session instead of a shareable URL.
Can I keep recordings for less time than my plan allows?
Yes, and that’s the normal case. The plan is a ceiling, not an instruction: pick 30 days on any plan and the hourly sweep enforces 30 days. Asking for longer than the ceiling is refused outright instead of quietly shortened, so a retention setting never says one thing while the sweep does another.
What happens to my recordings if I downgrade?
Nothing for 30 days. The tier you left keeps being honoured for a month, so a plan change can’t destroy a year of audio within the hour. An abandoned trial is different: everything goes 30 days after the trial ends.
Do you transcribe calls or generate summaries?
No. CallPal records, stores and plays back audio. There is no transcription, no AI summary and no sentiment scoring in the product. The call log is searchable by contact, caller, date and outcome; the inside of the audio is not.
Someone asks us to erase their data. What actually happens?
Erasing a contact destroys the audio of every call with that person, then scrubs the record itself and leaves a marker so a later CRM sync can’t import them back. The audio goes first on purpose: if any step fails, it fails having already removed the recording.
Next
What produces the recordings in the first place.
Start calling from your CRM today.
Sign up, connect your phone provider, and make your first call. Your own CRM, your own data.
- Every feature, up to 5 people
- No card, nothing to cancel
- Your CRM, your phone provider
Or write to us at [email protected].