Carly

Documented capabilities

Vendor statements, not verified task outcomes.

• Gmail and Outlook email delegation, drafts and sending through selected account or agent address Source · checked 2026-10-09
• Multi-calendar scheduling, booking pages, availability polls and meeting preferences Source · checked 2026-10-09
• Custom email agents with individual instructions, tool scopes and knowledge files Source · checked 2026-10-09
• Event-triggered workflows for emails, calendars, webhooks, schedules and connected apps Source · checked 2026-10-09
• CRM updates, lead follow-up, research, to-dos and briefings Source · checked 2026-10-09
• MCP read/write tools for compatible clients, with sensitive-write classification and API-key scopes Source · checked 2026-10-09
• SMS, Slack and dashboard chat channels Source · checked 2026-10-09
• Organization shared agents, with separately billed business calling and AI receptionist add-ons Source · checked 2026-10-09

Permissions and human control

• Custom email agents have their own instructions, email address and individually enabled tool access. The setup guide says they can only use the tools switched on; connections can be revoked.
• Sending mode can use the agent address or the user's connected Gmail/Outlook account. Review recipient, sender identity and automation scope before enabling live sends. No blanket per-message approval guarantee was established.
• MCP reference separates read, write and sensitive-write tools. Sending, deleting, running code and starting ongoing workflows are sensitive writes; it advises client approval for each call. OAuth acts for the authorizing Carly account; scoped API keys are an alternative.
• Calendar, mailbox, contacts and Drive access depend on the connections selected. The privacy notice distinguishes CC-thread access for core scheduling from optional broader mailbox and Drive access for CRM/agents.
• Business WhatsApp features operate at the connected business's direction. The business remains responsible for message content, recipients, consent and configured workflows; Meta limits and charges still apply.
• Paid subscription renewal is automatic unless cancelled. Credit top-ups are prepaid with no automatic charge when exhausted, according to the pricing FAQ; these are different billing mechanisms.

Documented controls do not prove that an agent always follows them.

Limits and open questions

• No hands-on test of email quality, scheduling accuracy, workflow reliability, response speed or approval enforcement was run. Testimonials and vendor response-time claims are not test results.
• Free plan lists 10 Zapier-style workflows. Non-AI steps are described as free to run, but that is not unlimited free AI assistance or paid-email sending. MCP reference says sending email requires a paid plan and some workflow features do too.
• Personal includes 200 credits/month in the live plan card. Numeric Organization pooled allowance, exact general task-to-credit conversion, phone/receptionist prices and Enterprise terms were not established.
• Pricing selector offers larger monthly credit allowances for additional fees. The FAQ describes a 7,500-credit add-on while the selector shows 7,700 total including 200 base; do not confuse extra credits with total allowance.
• Business SMS/calling and AI receptionist appear in the Organization feature list, but the FAQ says they are separately billed add-ons that require setup. No phone price or country eligibility is confirmed here.
• The policy claims encryption, role-based controls, security assessments and penetration tests; no independent audit report or certification was verified.
• Disconnecting an integration stops access but does not by itself erase stored records. Organization records and copies retained by recipients or other services have separate deletion rules.

Privacy and security

Carly's 7 October 2026 privacy notice explicitly says customer data, including Google, Microsoft and WhatsApp data, is not used to train AI or machine-learning models. It says contractual terms prevent AI providers from retaining user data or using it for training. This is a vendor policy, not an independently checked provider contract. It distinguishes calendar/contact access and optional broader email/Drive permissions; business WhatsApp may include messages, attachments and permitted history imports. Account-associated personal data is deleted within 90 days after account deletion, with legally required retention exceptions and separate rules for continuing organization accounts and copies held independently. Deletion/correction can be requested from the Account page or support; identity/authority checks may apply. Encryption, RBAC and security assessments are stated, not independently audited. Business customers can request the DPA and subprocessor list.