KeyCall

Privacy Policy

Last updated: July 5, 2026

KeyCall ("KeyCall," "we," "us") is a tool for real estate agents that turns a recorded conversation into a transcript, a structured lead profile, drafted follow-ups, reminders, and a CRM-ready export. This policy explains what data we collect, how we use it, and who we share it with — including data about the buyers and sellers agents talk to, who are not KeyCall account holders themselves.

What we collect

  • Account data: name, email, phone, brokerage, license info, and preferences you provide when signing up or in Settings.
  • Call content: the audio/video/transcript you upload, and everything derived from it — the lead's name, contact info, budget, timeline, motivation, and anything else discussed on the call. This is personal data about a third party (your client), collected because you recorded and uploaded that call.
  • Billing data: handled by Stripe. We store your subscription status and Stripe customer ID, not your card number.
  • Usage data: basic logs needed to run and secure the service.

How we use it

To transcribe and analyze your calls, draft follow-ups in your tone, generate reminders and transaction deadlines, and let you export a lead to your CRM. We do not sell your data or your clients' data, and we do not use call content to train AI models — it is sent to our AI provider (OpenAI) solely to process that call under their API data-usage terms, which exclude API content from model training.

Who we share it with

We use a small set of subprocessors to run the service: OpenAI (transcription and analysis), Stripe (billing), Clerk (authentication), Supabase (database hosting), Vercel (application hosting), and Resend and/or Twilio (email/SMS delivery, only for the reminders and channels you enable). If you connect an integration — MoxiWorks, or a Zapier/Make webhook — the lead data you export goes to that third-party service under its own terms. We do not otherwise share your data with third parties.

Recording consent is your responsibility

KeyCall requires you to attest that all parties consented to being recorded before we process a call. We do not independently verify this. Recording-consent laws vary by state and country (some require consent from only one party, others from all parties) — you are responsible for knowing and following the law in your jurisdiction and your client's. Similarly, sending SMS to a lead requires their prior express consent under the TCPA; KeyCall gates automated SMS on the consent checkbox you set on that lead's profile, but you are responsible for the accuracy of that record.

Data retention and deletion

We keep your calls and account data for as long as your account is active. You can delete an individual call at any time from its detail page. To delete your account and all associated data, email kiro@mit.edu.

Your rights

You can access, export, or delete your data at any time from within the app, or by emailing kiro@mit.edu. If you are located somewhere with statutory data-subject rights (e.g. GDPR or CCPA), we will honor requests to the extent required by law.

Children

KeyCall is a professional tool and is not directed at children.

Changes to this policy

We may update this policy as the product changes. Material changes will be reflected by updating the date at the top of this page.

Contact

Questions about this policy: kiro@mit.edu.