Legal
Privacy policy
Last updated 2026-10-15. Written to describe what the product does; this is not legal advice.
Praxli answers phone calls, so the most sensitive thing on this page is call audio and transcripts. For those, we are a processor acting for the business you called; that business decides what happens to the recording.
Who this covers
This policy explains how Praxli, operated by Prashant Thakur (“Praxli”, “we”), handles personal information for three groups:
- Businesses that open an account, and their staff, we are the controller of that account data.
- Callers who phone a number a business has connected to Praxli, for that call data we are a processor acting for the business.
- Visitors to this website.
What we collect
For a call: the audio (when recording is on), a transcript, an AI summary, and any name, number, time or request the caller gives. Call metadata: the caller's number, the number dialled, start and end time, duration, and whether the call was passed to a person.
For an account: your business name, your administrators' names and emails, your hours, transfer number, and the notes and knowledge base you write. Billing details (card numbers are handled by our payment processor, not stored by us). Basic technical logs when you use the web app.
We do not ask for government IDs, card numbers over the phone, or health information. A caller can say anything, so a transcript may contain more than we asked for, which is why retention and access controls matter.
If you called a business that uses Praxli
We are not the business you called; we provide the software that answered. That business decides whether the call is recorded, what happens to the transcript, and how long it is kept. To have your recording or transcript deleted, contact that business, or write to us at hello@praxli.ai with the number you called and the rough date and time, and we will pass it on.
Recording and AI disclosure. By default, the receptionist tells callers at the start that they are speaking with an AI assistant, and, where the business has turned recording on, that the call is recorded. The business can replace the wording, but it cannot silence the recording disclosure while recording. Whether all-party consent is obtained for a given state is the business's responsibility, not ours.
How we use it
For call data, only to run the service for the business: transcribe the call, answer from the notes, capture the request, pass the call to a person, notify the business, and store the recording and transcript for the business's retention period.
We do not sell personal information, we do not use call content to train Praxli's models, and we do not build advertising profiles of callers. Call content is sent to the third-party providers below only to produce a response on that call.
How long we keep it
Recordings, transcripts and summaries are kept for the business's chosen retention period, 365 days by default, and deleted sooner on the business's instruction. Account data is kept for the life of the account, then a 30-day export window, then deleted from live systems within 30 days and from backups within a further 90.
Automatic deletion is a setting the account owner turns on; until they do, “365 days” is the configured value, not an enforced one. We will not claim data is being auto-deleted when it is not.
Security, stated plainly
In place today: TLS for data in transit, per-tenant isolation with the tenant resolved server-side, authentication on every API, role-based access, an append-only audit log, and optional multi-factor authentication we recommend every admin turn on.
Not in place today, said here so you don't have to infer it: no SOC 2 report, no ISO 27001 certification, no third-party penetration-test report, no HIPAA Business Associate Agreement (do not put protected health information into the service), and no customer-managed encryption keys. The platform runs in the United States; we do not offer EU or UK data residency.
Your rights and data requests
If your state has a comprehensive privacy law (California, Colorado, Connecticut, Virginia, Texas, Oregon, Montana and others), you may ask what we hold, get a copy, correct it, or delete it; we do not sell or share personal information or run targeted advertising. GDPR/UK rights apply where that law applies.
To make a request, email hello@praxli.ai with “Data request” in the subject. If it concerns a call you made to a business using Praxli, we route it to that business rather than acting on their data ourselves.
Children, changes, and contact
Praxli is a business tool and is not directed to children. For material changes to this policy we give at least 30 days' notice to account administrators.
The controller for account data, and processor for caller data, is Praxli, operated by Prashant Thakur. Privacy and data requests: hello@praxli.ai. Security: hello@praxli.ai.