Legal
Privacy notice
Last updated: 6 October 2026
Marketing-domain canonical copy (temsor.com). The same text is also hosted on the IVR studio surface: ivr.temsor.com/gizlilik.
1. Data controller
For your Temsor account, your access request, usage and billing records and the live trial calls you request, the data controller is the person who operates Temsor from Türkiye (identity below). Contact: [email protected] — a request sent from the e-mail address registered to your account counts as a written application. For your customers’ numbers, audio, conversations and consent records, you are the controller; Temsor is the processor.
Identity of the data controller
Serdar Küçüklü · [email protected]
2. Data processed
Account email; the name, company and note you give in the access request; flow diagrams and preview text; for calls an agent answers or live trial calls you request: caller/callee number, call time and duration, transcript and summary, and for trial calls your confirmation that the number is yours or that the person agreed; voicemail recordings you enable; session and technical logs. Temsor currently sends no marketing e-mail, SMS or calls; marketing e-mail would only be sent if you ticked the optional box on the form. For calls answered by the AI voice agent: the language the caller speaks, the name they give, their request, the appointment time and service type, and any callback request (call summary and appointment/callback request); Temsor does not store the audio or transcript of these calls.
3. Purpose and legal basis
Delivering the service, managing the account, billing and security. Legal basis: contract performance, legal obligations (billing records) and legitimate interest (security). Live trial calls are placed only at your request and open with a notice that the call is automated. Outbound calling is not offered; any consent the business’s own calls need is the business’s job.
4. Transfers and processors
We work with a small number of specialized processors to deliver the service: cloud hosting and infrastructure providers (EU), telephony carriers, speech and AI model providers, email providers, payment providers, and network and security providers. Each is bound by a data processing agreement and confidentiality obligations, and receives only the data needed for its task. Temsor is operated from Türkiye and its processors store and process data in the European Union and the United States, so your data is transferred internationally; where the law that applies to you requires it, these transfers are covered by standard contractual clauses or comparable contractual safeguards. The full list of processors, by name and location, is in the Data Processing Addendum (section 6). AI voice agent: when a business turns on the voice agent, call audio is streamed in real time to a voice AI provider, which processes it only to generate responses: OpenAI (US) for calls from recognised international-format numbers, and Google Cloud (Vertex AI, EU region) for calls from withheld or unrecognised numbers and from Turkish (+90) numbers, which are never sent to OpenAI. The caller’s phone number is not sent to this provider. At the end of the call only a call summary is emailed to the business. The agent does not diagnose, give medical advice or ask about health details; callers are asked not to share health information.
5. Outbound and commercial calling
Temsor does not place commercial or outbound calls on your behalf; outbound calling is not offered. If a business contacts people by other means, consent, calling hours, do-not-call lists and honouring opt-outs are its duties. Ignoring an opt-out is prohibited.
6. Your rights
You can ask for access to, correction or deletion of your personal information, ask about transfers, or object, at [email protected]. Rights specific to your country are in sections 9 to 13. For callers, the business that runs the phone line answers these requests and Temsor helps it.
7. Security and retention
Access control and least privilege apply; each business’s data is kept separate. Call records, transcripts and call traces are deleted automatically 90 days after the call; voicemail recordings after 30 days; access requests within 12 months. After account closure data is deleted or returned on request; send erasure requests to [email protected]. Callers are told before recording starts that they are being recorded and why. Legal retention duties (such as billing records) are reserved. AI voice agent: Temsor does not record the audio or keep a transcript of these calls; the voice AI provider may keep call data for a limited time for abuse monitoring under its terms (at most 30 days for OpenAI; Google Cloud may also cache it in memory for up to 24 hours). The call summary is deleted from memory within 3 hours after it is delivered to the business; appointment and callback requests and the call record (number, time, duration) are deleted after 90 days.
8. Cookies
Essential cookies for session and preferences. No advertising cookies.
9. United States
This section applies when your workspace country is the United States, and to people in the United States who call a business that uses Temsor. Temsor does not sell or share personal information, does not use it for targeted advertising, and does not use callers’ conversations to train AI models. People in any US state can ask for access to, correction of or deletion of their personal information at [email protected], and no one is treated differently for asking; for callers, the business that runs the phone line answers these requests and Temsor helps it as its service provider. Every call answered through Temsor opens, before the conversation, with an announcement that the caller is speaking with an AI assistant on behalf of the business and that the call may be recorded and transcribed and why, so every party is informed and can hang up (as all-party consent states such as California, Penal Code §632, require, and as Utah Code §13-75-103 provides for AI disclosure). Businesses cannot turn these announcements off. Outbound calling is not offered in the United States. Personal information is processed in the European Union and the United States by the processors listed in the DPA.
10. Canada (except Québec)
This section applies when your workspace country is Canada, and to people in Canada who call a business that uses Temsor. Temsor is not yet offered to businesses located in Québec. The person who operates Temsor (identity in section 1) is accountable for Temsor’s compliance with PIPEDA and acts as its privacy officer: [email protected]. Every call opens with an announcement that the caller is speaking with an AI assistant on behalf of the business and that the call may be recorded and transcribed and why, so the caller can continue or hang up. Temsor is operated from Türkiye, and its processors store and process personal information in the European Union and the United States (see the DPA); while it is there, it may be accessible to the courts, law enforcement and national security authorities of those countries. Each processor is bound by contract to a comparable level of protection. You can ask for access to and correction of your personal information, or withdraw consent subject to legal and contractual limits, at [email protected]; Temsor replies within 30 days. You may also complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca).
11. Australia
This section applies when your workspace country is Australia, and to people in Australia who call a business that uses Temsor. Temsor handles personal information in line with the Australian Privacy Principles (APPs), whether or not the small business exemption applies to it. Every call opens with an announcement that the caller is speaking with an AI assistant on behalf of the business and that the call may be recorded and transcribed and why, so the caller can continue or hang up (APP 5). Temsor is operated from Türkiye, and its processors store and process personal information in the European Union and the United States (see the DPA); each is bound by contract to protect it and not to use it to train AI models or for advertising (APP 8). The AI assistant answers questions and takes requests such as booking requests; it does not make decisions that significantly affect a caller’s rights or interests — the business does. A business that wants a local Australian number provides proof of an Australian address; Temsor sends it straight to its telephone carrier (Telnyx) for the number registration the carrier must keep, does not store the document itself, and asks the carrier to delete the registration when the number is released or the account is closed. You can ask for access to or correction of your personal information at [email protected]; Temsor replies within 30 days. If you are not satisfied, you may complain to the Office of the Australian Information Commissioner (oaic.gov.au). Outbound calling is not offered in Australia.
12. New Zealand
This section applies when your workspace country is New Zealand, and to people in New Zealand who call a business that uses Temsor. The person who operates Temsor (identity in section 1) is Temsor’s privacy officer under the Privacy Act 2020: [email protected]. Every call opens with an announcement that the caller is speaking with an AI assistant on behalf of the business and that the call may be recorded and transcribed and why (IPP 3). Temsor and its processors hold callers’ information on behalf of the business, as its agents (section 11 of the Privacy Act 2020), in the European Union and the United States (see the DPA), and the business remains responsible for it; where a processor is not acting only as an agent — for example the voice AI provider that may keep call data for up to 30 days for abuse monitoring — Temsor requires by contract safeguards comparable to the Privacy Act (IPP 12). When a business gives Temsor information about people that Temsor did not collect from them, the business tells those people as IPP 3A requires. Proof of a New Zealand address for a local number is handled as in section 11. You can ask for access to or correction of your personal information at [email protected]; Temsor replies within 20 working days. You may also complain to the Office of the Privacy Commissioner (privacy.org.nz). Outbound calling is not offered in New Zealand.
13. Mexico
This section is Temsor’s privacy notice (aviso de privacidad) under Mexico’s Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP, 2025). It applies when your workspace country is Mexico, and to people in Mexico who call a business that uses Temsor. Responsible party: for your Temsor account, the person who operates Temsor from Türkiye (identity in section 1) is the responsable, and notices go to [email protected]; for callers’ numbers, audio, transcripts and requests, the business that runs the phone line is the responsable, and Temsor and its sub-processors are its encargados, processing the data only on its instructions. Purposes: providing the service (account, calls, billing, support and security). Secondary purpose: marketing email, sent only if you ticked the optional box on the form (section 2); you can refuse or withdraw it at any time at [email protected] without affecting the service. Temsor does not profile people or use call data to train AI models. Every call opens with an announcement that the caller is speaking with an AI assistant on behalf of the business and that the call may be recorded and transcribed. Transfers: the sub-processors listed in section 6 of the DPA (hosting, telephony, speech and voice AI, email, payment and network providers in the European Union and the United States) receive data only to perform the contract with you or with the business you call, which the LFPDPPP allows without separate consent (article 36), and each is bound by contract to the same obligations as Temsor. Temsor does not sell personal data or pass it to third parties for their own purposes. ARCO rights: you can ask for access to, rectification or cancellation of your personal data, object to its processing, withdraw consent or limit its use or disclosure by email to [email protected], giving your name, the data concerned and your request, with proof of identity (used only to verify the request). Temsor replies within 20 days; the period can be extended once by 20 days when justified. Callers send ARCO requests to the business they called; Temsor forwards any it receives. A security breach that significantly affects people’s property or moral rights is reported to them without delay once confirmed. Changes to this notice are published on this page with a new date. You may also go to the federal data protection authority (Secretaría Anticorrupción y Buen Gobierno). Outbound calling is not offered in Mexico.