Foyer API
Privacy and what connected apps can see
Connecting an app is your choice, and you decide what it sees. This page explains what a connected app or assistant can read, what Foyer keeps about that, and what changes once your call content leaves Foyer.
What a connected app can see
Only your own account, and only what you allowed when you made the key or approved the connector:
| If you allow | The app can see |
|---|---|
| See your calls, summaries and voicemails list | Who called (number, name, caller ID name, company they gave), when, what Foyer did with the call, the summary, and whether you opened it. |
| Read conversations and voicemail text | What callers said to Foyer, voicemail text, and the transcript of calls you recorded, including your side. |
| Listen to recordings | Links to the audio, each working for five minutes. |
| See your contacts and how Foyer treats each one | Your contacts in Foyer, and approved and blocked numbers. |
| See your settings, numbers and what your host knows | Your settings, Foyer number and lines, your notes to your host, and the facts it knows about you. |
Write permissions let an app change things, as listed in Authentication and permissions. No permission lets an app delete your account, buy anything, or reach another member's data.
What Foyer keeps
- Keys: Foyer stores a fingerprint of each key, never the key itself. Keys expire after at most 90 days, and you can revoke any key at any time.
- Activity: Foyer logs each request a key or connector makes: when, which endpoint, the result and how many items. Connected apps shows you this, for example "read 14 calls, 3 voicemails, searched twice". The log does not record call content, names, numbers or what was searched for.
- Your calls: call details stay encrypted where Foyer stores them, as they are today. They are decrypted only to answer a request the key is allowed to make. Request logs leave out query strings, so search words and filters are not written to them.
- Read state: reading a call through the API does not mark it read in your app.
Recording links
A recording link plays one recording for five minutes, without further sign-in. Treat it like a password: do not post it anywhere others can see. It stops working when it expires, when you revoke the key that made it, when that key loses permission to play recordings, or if your account closes.
Once your calls leave Foyer
When an app or assistant reads your calls, a copy of that content is with that service. Its own terms and privacy policy then apply, not Foyer's. Before you connect one:
- Callers' words are in your calls. People who call you did not choose where their words go. Share only what you need.
- Health information. If your calls can include health information, think about where it goes. Foyer's Health privacy page explains how Foyer handles it.
- Workspace tools. If you send voicemails to Slack, Notion or email, everyone with access to that channel or page can read them.
You can revoke a key or disconnect an assistant at any time in Settings › Connected apps. That stops new access; it does not delete copies the other service already has.
Foyer's Privacy Policy covers everything else.
The legal text is in the Terms of Service, section 9A and the Privacy Policy, section 3A.