A company in Connecticut is considering a service that records customer calls, creates transcripts, and generates AI summaries. What should an attorney examine about participant notice, permissions, vendor terms, data use, and deletion? How should the review account for callers in other states?