Privacy and compliance
Voice agents handle personal data by nature: people say their name, their number, and sometimes far more. These are the controls.
Redaction
Transcript redaction is not currently offered. Where it applied, it scrubbed the stored transcript only, while the live call log still carried each turn as it was spoken, so it protected less than its name suggested. The control is read-only in the builder until that gap is closed, and agents that already carry the setting are unchanged. Do not rely on Glytos to remove personal data from a conversation or to meet a regulatory obligation for you.
Recording
Recording is off by default and enabled per agent. Whether you may record, and whether you must announce it, depends on your jurisdiction - in many places you must tell the caller. If you must announce it, put it in the agent's opening line.
Recorded audio is never given out as a storage address. A playback link is minted when you read the session, is scoped to that one call, and expires within the hour, so it does not become a standing way in to a customer conversation. Within that hour, though, anyone holding the link can play the recording: treat it like a password and do not paste it into tickets, chats or logs. See Sessions.
Deleting data
Deleting an agent is immediate and is not blocked by call history. It removes the agent's sessions - transcripts, variables, analysis and event timelines - along with its campaigns and test suites, and frees its phone numbers. Your billing records are kept.
Recorded audio is handled differently: deleting an agent makes its recordings unreachable through the API, because the sessions that pointed at them are gone, but does not erase the audio files themselves.
Deleting an agent cannot be undone and destroys the record of its calls. Archive it instead if you only want it out of the way; an archived agent keeps its call history.
Where data goes
Your data lives in your organization's region. Conversation content is sent to the model, transcriber and voice providers you chose for the agent, which process it on their own infrastructure - so which providers you pick is part of your compliance posture, not just a quality decision.
What is yours
Glytos gives you the controls. Consent, calling hours, do-not-call lists, disclosure, and the lawful basis for what you do with what you capture are your responsibility - and they vary by country.