Home services and trades
Should AI vendors be allowed to train on your customer call recordings?
By SourceX Editorial · Reviewed by Noah Loul ·
Short answer
AI vendors should be allowed to use your customer call recordings to run the service you pay for, but usually not to train their general models on identifiable calls. The working rule: allow service use, refuse resale and open-ended training, and negotiate de-identified product improvement only with an opt-out, deletion at exit and no exclusive rights.
Key takeaways
- Service use, product improvement and model training are separate permissions, and vendor terms often bundle them in one clause.
- Call recordings capture callers who never signed your vendor's terms, so training rights are a privacy question as well as a commercial one.
- A broad training grant today can complicate what you can license on your own terms later.
- The terms that keep recordings yours are ownership, use limits, an opt-out, export in a usable format and deletion at exit.
- A disclosure that calls are recorded for quality and training may not cover a third party training AI models.
The short answer for owners#
AI vendors should be able to process your customer call recordings to deliver the service, and in most cases should not receive an open-ended right to train their own models on them. An AI receptionist, answering service or call tracking platform needs the audio to transcribe, route and summarize calls. Training a model that the vendor then offers to every contractor, including your competitors, is a different use with different value.
The decision is made in the contract, and it is easiest at signing or renewal. This is general information, not legal advice: the right position depends on your vendor's terms, your call disclosures and the laws that apply to your callers.
What to allow, what to refuse and what to negotiate#
The allow, refuse or negotiate decision turns on two questions: does the use serve your account, and can a caller be identified from what the vendor keeps.
- Allow what runs your account.
- Negotiate what improves the product without identifying callers.
- Refuse what turns your callers' details into the vendor's asset.
| Vendor use | Default position | Reason |
|---|---|---|
| Transcribe, route, summarize and store calls for your account | Allow | This is the service you pay for |
| Vendor staff reviewing your calls to fix problems you report | Allow with limits | Useful for support; access should be logged and limited to named roles |
| Improving the vendor's product with de-identified, aggregated call data | Negotiate | Workable with an opt-out, a clear definition of de-identified and a ban on re-identification |
| Training or fine-tuning general models on identifiable recordings or transcripts | Refuse | Caller details leave your control and the benefit goes to every vendor customer |
| Sharing, selling or licensing recordings or transcripts to third parties | Refuse | Removes your say over who uses caller data and for what |
| Keeping recordings, transcripts or derived data after the contract ends | Refuse or limit | Exit should end in deletion with written confirmation |
Why call recordings deserve more caution than other vendor data#
Customer call recordings deserve more caution because they capture people who never agreed to your vendor's terms. A caller gives a name, address and phone number, sometimes a card number, and often details about who is home, a health condition or a dispute with a landlord. A structured job record holds a few of those fields; the audio holds all of them at once, and a voice can itself identify a person.
Recordings also hold your know-how: how CSRs handle a price objection, how they triage a no-cool call on the hottest day of the year, how they offer a membership without pushing. That is why AI developers find booking calls useful, and why a free training grant deserves a second look. Once recordings help train a general model, the contribution cannot be taken back out.
Privacy laws may apply to caller data, including state consumer privacy laws such as the CCPA for California residents and state call recording consent rules. Whether a particular vendor use fits those rules is assessed case by case with counsel.
Contract terms that keep recordings yours#
The contract terms that keep customer call recordings yours are spread across the master agreement, the data processing addendum and sometimes a separate AI addendum. Read all of them, because a strong ownership clause in one document can be undercut by a broad license in another.
Some vendors now answer the question in writing. Zoom's Terms of Service, for example, state that Zoom does not use audio, video, chat and similar communications content to train Zoom or third-party AI models. Watch for terms that shift later, too: in February 2024 FTC staff warned that adopting more permissive data practices, such as AI training, through a surreptitious, retroactive change to terms of service or a privacy policy may be unfair or deceptive.
- Ownership: recordings, transcripts, summaries and call metadata are your data, and processing them gives the vendor no ownership.
- Use limitation: the vendor may use your data only to provide and support the service for you unless you agree otherwise in writing.
- Training restriction: no training of models offered to other customers on your recordings or transcripts without a separate opt-in.
- De-identification: if product improvement is allowed, define de-identified, exclude raw audio and prohibit re-identification.
- Opt-out: an admin setting or written notice that stops improvement use for data going forward.
- Subprocessors: a list of transcription and model providers, notice of changes, and the same limits passed down to them.
- Export: audio files and transcripts with call IDs, dates and linked customer or job IDs, in a standard format, on request and at exit.
- Deletion: removal of recordings and derived data after exit, confirmed in writing.
- No exclusivity: nothing in the agreement limits your right to license your own recordings elsewhere.
Where to look in your current vendor paperwork#
Vendor paperwork for phone systems, AI receptionists and call tracking tools usually spreads data terms across several documents. Start with whichever vendor holds the most calls and note its renewal date, since that is when you can ask for changes. Check retention as well: Gong, for example, states that its standard retention for existing customers is the lesser of three years and the time the company is a customer, so older call history in a conversation platform may already be gone.
| Document | What to look for |
|---|---|
| Master subscription agreement | The license the vendor takes to customer data, and words such as improve, develop, train and aggregate |
| Data processing addendum | Purpose limits, subprocessors, deletion and help with privacy requests |
| AI or product-specific terms | Whether call data feeds model training and how an opt-out works |
| Privacy policy | Statements broader than the contract; confirm the contract controls |
| Admin settings | Toggles for data sharing or model improvement, and who in your company can change them |
| Order form | Renewal date, notice window and any terms that override the master agreement |
Illustrative: a plumbing company renegotiates its AI receptionist terms#
Illustrative: a fictional plumbing and drain company in the Southeast sends after-hours calls to an AI receptionist and records daytime CSR calls in its phone system. Before renewal, the owner reads both vendors' terms and finds that the receptionist vendor may use customer content to develop and train its models, with no opt-out in the admin settings.
The owner asks for service-only use of identifiable recordings, product improvement limited to de-identified transcripts with an opt-out, and deletion with written confirmation at exit. The vendor accepts the opt-out and deletion terms and narrows improvement use to de-identified text. The phone system's terms already limit use to the service, so nothing changes there. The company keeps its full recording archive under its own control.
How SourceX approaches call recording rights#
SourceX checks vendor terms during the Rights step of the SourceX five-step transaction (Supply, Rights, Preparation, Approval, Delivery). If a vendor already holds broad training rights or an exclusive license over a company's recordings, that is noted early because it can narrow what the company may license.
When call recordings do proceed, they are licensed, not sold, and the company keeps ownership. Caller details are removed during Preparation, and the permitted use and privacy record are written into the SourceX Evidence Packet before the company approves release.
Frequently asked questions
Does 'this call may be recorded for quality and training purposes' cover AI training?
Not necessarily. That line has long been understood as training your own staff. Whether it covers a vendor training AI models, or a later license of de-identified recordings, depends on the wording, the laws that apply and how recordings are used. Review your disclosure script with counsel before relying on it.
Can we stop training on recordings a vendor already used?
An opt-out usually applies going forward. Data already used to train a model generally cannot be removed from that model. Ask the vendor in writing what was used, whether raw recordings are still stored for that purpose, and whether it will delete stored recordings and transcripts held for training.
Is de-identified call data safe to let a vendor use?
Safer, not risk-free. Transcripts can still point to a person through an address, an unusual job detail or a voice. If you allow de-identified use, define the term in the contract, exclude raw audio, ban re-identification and require the vendor to hold its subprocessors to the same limits.
Do AI receptionist vendors own the transcripts they create?
Not unless the contract says so. Transcripts and summaries are derived from your calls, and a well-drafted agreement treats them as your data along with the audio. Check that the definition of customer data includes outputs, transcripts and call metadata, not only files you upload.
Would a vendor training grant stop us licensing recordings later?
It can complicate it. A non-exclusive grant usually does not block a later license, but buyers may ask whether the same recordings already feed a commercial model, and an exclusive or perpetual grant can block one outright. Keep vendor rights narrow and keep a copy of the terms.
Sources
- Zoom's Terms of Service (Section 10.2) state that Zoom does not use audio, video, chat, screen sharing, attachments or other communications-like Customer Content to train Zoom or third-party AI models. Source
- On February 13, 2024, FTC staff warned that adopting more permissive data practices such as AI training through a surreptitious, retroactive change to terms of service or a privacy policy may be unfair or deceptive. Source
- Gong's standard data retention period for existing customers is the lesser of three years and the time the company is a customer, including emails, calls and transcripts. Source
Related resources
See if your company qualifies
A short company assessment. No data uploads are needed.