Privacy and hosting

Calls may be processed by third-party AI services and may generate transcripts, optional recordings and summaries. Caller phone numbers and conversation content are processed to provide the service.

For EU/EEA business customers, the customer controls the purposes it determines and Call0 processes the relevant data on documented instructions. See the Privacy Policy. The required versioned data-protection terms are agreed electronically before processing on behalf of the customer begins and remain available in a durable form.

Source: Terms and conditions

Call0 provides an automated AI disclosure at the beginning of calls. You agree to:

• Not disable or bypass the AI disclosure.
• Disclose clearly, distinguishably and accessibly from the beginning of the first interaction that AI is involved, and never present the agent as human.
• Not remove or falsify machine-readable labels that Call0 actually provides for synthetic audio or text output.
• Comply with local rules governing AI-generated communications.
• Give callers all legally required privacy and processing notices.
• Maintain a valid legal basis, required notices and consents, documented human oversight and appropriate retention rules.
• Together with Call0, each according to its own role as provider or deployer, take appropriate measures to support the development of AI literacy among staff and other persons dealing with the operation or use of AI systems on its behalf. Those measures must take account of technical knowledge, experience, education and training, the context of use and the persons or groups affected. Art. 4 EU AI Act does not require a guarantee of any specific level of AI literacy for an individual.
• Not use Call0 in regulated or high-risk applications unless a separately signed Enterprise agreement expressly enables that specific use and the agreed technical, organizational and human controls are in place.
• Art. 50(1) EU AI Act applies unchanged from August 2, 2026. For Art. 50(2), Call0 takes technically feasible measures consistent with the generally acknowledged state of the art; this is not a promise of a persistent audio watermark. The transition through no later than December 2, 2026 applies only to Art. 50(2) and systems placed on the market before August 2, 2026. This clause is not a blanket compliance guarantee.

Source: Terms and conditions

At the start of every inbound or outbound call, callers are told they are speaking with AI and what it is being used for. Audio is recorded only when recording is enabled, the caller has been informed and any required consent has been obtained. Continuing the call alone is not consent.

We process speech and conversation content to understand requests, answer questions and carry out requested tasks such as booking appointments. This may produce transcripts, summaries, identified needs and conversation analysis. During setup, we also process the text, websites and selected images you provide.

AI outputs can contain mistakes. Business customers choose the purpose and review important results. They are responsible for the lawful use of their caller data, which Call0 processes on their behalf. The retention rules below apply to transcripts, recordings and stored conversation information.

Source: Privacy policy

• Account, booking and customer-memory data: while the account is active.
• Call transcripts and recordings: according to account configuration, operational needs and applicable legal obligations.
• Payment records: the legally required period, typically seven years for tax purposes.
• Account deletion: personal data is removed through the account-deletion process, except where continued retention is legally required.

Source: Privacy policy

We protect data with access permissions, encryption, backups and security checks. The safeguards reflect the data processed and the risks involved.

Source: Privacy policy

People in the EEA have the following rights, subject to the statutory conditions:

We normally respond to GDPR requests within one month. If a legally permitted extension is needed, we will inform you within that period.

• Access (Art. 15), rectification (Art. 16) and erasure (Art. 17).
• Restriction of processing (Art. 18) and data portability (Art. 20).
• Objection to processing based on legitimate interests (Art. 21).
• Withdrawal of consent at any time (Art. 7(3)), without affecting earlier lawful processing.
• A complaint to the competent data protection authority.

Source: Privacy policy