Privacy Policy

Call0 Inc. (“Call0”, “we”, “us”) is the data controller responsible for the processing of personal data described in this policy.

Call0 Inc. 447 Broadway, 2nd Floor Suite #3389 New York, NY 10013, United States

For privacy questions or requests, use our contact page.

• Account data: email address, name, optional company name and sign-in information.
• Usage data: call logs and duration, transcripts, agent settings, booking data, credit balance and transaction history.
• Payment data: processed exclusively by Stripe Inc. Call0 does not store card numbers, bank account details or other payment credentials on its servers.
• Technical data: IP address, browser and device information, and referring URLs for security, fraud prevention and service improvement.
• Call data: phone numbers, audio recordings when enabled, transcripts, summaries and conversation analysis. Phone numbers in customer profiles may be stored in pseudonymized form.
• Channel data: WhatsApp phone numbers, content and timestamps, plus email addresses, subjects, bodies and timestamps processed through configured integrations.
• Content you provide: text, websites, selected images, knowledge and instructions for your agents.

• Accounts, calls, integrations, billing and support: to perform our contract and handle your requests (GDPR Article 6(1)(b)).
• Security, reliability and abuse prevention: our legitimate interest in a safe, working service (Article 6(1)(f)).
• Tax records and other processing required by law: compliance with legal obligations (Article 6(1)(c)).
• Optional recordings and consent-based marketing: only with your separate consent (Article 6(1)(a)), which you can withdraw at any time for the future.

We need the information required for sign-in, billing or a requested feature to provide that service. Without it, the relevant feature is unavailable. Information and consent marked optional are not required to use the other features.

At the start of every inbound or outbound call, callers are told they are speaking with AI and what it is being used for. Audio is recorded only when recording is enabled, the caller has been informed and any required consent has been obtained. Continuing the call alone is not consent.

We process speech and conversation content to understand requests, answer questions and carry out requested tasks such as booking appointments. This may produce transcripts, summaries, identified needs and conversation analysis. During setup, we also process the text, websites and selected images you provide.

AI outputs can contain mistakes. Business customers choose the purpose and review important results. They are responsible for the lawful use of their caller data, which Call0 processes on their behalf. The retention rules below apply to transcripts, recordings and stored conversation information.

Call0 uses the following service providers to operate the platform:

The table shows where our services process data. Support and further providers may also operate in other countries.

Data may be transferred to the USA and other countries outside the EEA. We use an applicable adequacy decision or agreed EU Standard Contractual Clauses, with additional safeguards where needed. Transfers do not take place without the required safeguards. You can request a copy of the relevant safeguards through our contact page.

If you provide a mobile number and opt in, Call0 may send account and onboarding notices, responses to support or sales inquiries, scheduling and follow-up messages, and service or account updates.

• You opt in by submitting your number through a website, sign-up or demo form and agreeing to contact, or by providing it verbally during a Call0 call or demo. SMS consent is not a condition of purchase.
• Mobile numbers and SMS consent information are never sold, rented or shared with third parties or affiliates for their own marketing. Providers such as Twilio receive data only to operate messaging for Call0.
• Message frequency varies. Carrier message and data rates may apply.
• Reply STOP to opt out and HELP for assistance. A STOP confirmation is sent and further messages stop.

• Account, booking and customer-memory data: while the account is active.
• Call transcripts and recordings: according to account configuration, operational needs and applicable legal obligations.
• Payment records: the legally required period, typically seven years for tax purposes.
• Account deletion: personal data is removed through the account-deletion process, except where continued retention is legally required.

Necessary cookies and browser storage support sign-in, security and preferences. Masked session recording in the dashboard is optional and stays off without separate consent.

Details are available in the Cookie Policy.

People in the EEA have the following rights, subject to the statutory conditions:

• Access (Art. 15), rectification (Art. 16) and erasure (Art. 17).
• Restriction of processing (Art. 18) and data portability (Art. 20).
• Objection to processing based on legitimate interests (Art. 21).
• Withdrawal of consent at any time (Art. 7(3)), without affecting earlier lawful processing.
• A complaint to the competent data protection authority.

We normally respond to GDPR requests within one month. If a legally permitted extension is needed, we will inform you within that period.

California residents may request:

• Information about personal data Call0 collects, uses and discloses.
• Deletion of personal data, subject to legal exceptions.
• Opt-out from sale or sharing and non-discrimination for exercising privacy rights.

Call0 does not sell personal information and does not share it for cross-context behavioral advertising. Submit a request through the contact page; Call0 will respond within 45 days.

We protect data with access permissions, encryption, backups and security checks. The safeguards reflect the data processed and the risks involved.

Call0 is not directed to children under 18 and does not knowingly collect their personal information. Contact Call0 if you believe a child’s data was collected so it can be deleted promptly.

Call0 may update this policy. Significant changes will be announced by email or through the platform before they take effect where required. The version shown on this page identifies the currently applicable privacy information.

For privacy questions or to exercise a right:

Call0 Inc. 447 Broadway, 2nd Floor Suite #3389 New York, NY 10013, United States

Contact Call0 online.

Necessary cookies and browser storage support sign-in, security and preferences. Masked session recording in the dashboard is optional and stays off without separate consent.

For troubleshooting, Call0 Inc. records the interface and selected non-sensitive settings, clicks, mouse movements, scrolling, page changes, loading times and technical errors. Data is linked to your account and company and includes browser and device type. Inputs, messages, conversation content, knowledge content and credentials remain masked. Audio, video and payment pages are not recorded.

You can decline without disadvantage. Consent uses a separate checkbox that is unchecked by default. You can withdraw it at any time in the account menu → “Privacy”. A general cookie acknowledgement does not enable Session Replay. Withdrawal stops further recording and blocks previous playback; it does not affect the lawfulness of earlier processing. The bases are GDPR Article 6(1)(a) and section 25(1) TDDDG for access to your device.

Only authorized Call0 staff can access recordings for troubleshooting; playback access is logged. Call0 Inc. and Vercel Inc. process data in the USA; Supabase Inc. stores it in Ireland. The international transfer safeguards described above apply.

Playback is available for up to 30 days, then blocked and automatically deleted. Archiving shortens the deletion deadline to three days; earlier deadlines still apply. Your user identifier, decision, time and notice version are stored separately as evidence of consent. The privacy rights and contact details in this policy also apply.

A grant lasts for up to 180 days. Decision records become due for deletion after no more than one year.

When you call a demo, request a callback or personal appointment, or send a product inquiry, Call0 Inc. associates the transmitted number and voluntarily provided contact details with that inquiry. These may include your name, company, email, a brief stated business need, source, appointment and processing status. Giving a name for a test call is optional. No audio recording is made.

To handle your demo inquiry, we analyse the conversation using OpenAI. We retain the complete transcript in encrypted form together with the contact details, industry and business needs you mention, a short summary and suggestions for relevant next steps. Access is limited to responsible staff. Suggestions support our team; they do not trigger automatic outreach or decisions with legal effects.

We use these details to handle your inquiry and the next steps you request. The basis is GDPR Article 6(1)(b) for pre-contractual steps at your request; for business contacts and internal organisation, Article 6(1)(f), with the interest of reliably handling concrete inquiries. Access is limited to responsible staff and the technical providers described in this policy. A test call or contact record is not general marketing consent. The policy’s information on recipients, transfers, access, deletion and objection also applies.

In internal contact management, the period runs from the last new processing event: 90 days for open telephone demo inquiries; 180 days for other inquiries, appointments, offers and won opportunities. Records closed as lost or ignored are deleted after 30 days, through daily cleanup. Legally required contractual records are kept separately for the periods described for them.