How does CallsIQ handle call privacy and data security?

We work in a regulated industry (insurance/collections) and before switching tools, I need to understand how recordings and transcriptions are stored. Are calls processed and immediately deleted, or retained? Is data encrypted at rest and in transit? Do you offer data residency options for EU customers (GDPR compliance)?