Privacy Policy

Call0 Inc. (“Call0”, “we”, “us”) is the data controller responsible for the processing of personal data described in this policy.

Call0 Inc. 447 Broadway, 2nd Floor Suite #3389 New York, NY 10013, United States

For privacy questions or requests, use our contact page.

• Account data: email address, name, optional company name and authentication provider (email OTP or Google OAuth).
• Usage data: call logs and duration, transcripts, agent settings, booking data, credit balance and transaction history.
• Payment data: processed exclusively by Stripe Inc. Call0 does not store card numbers, bank account details or other payment credentials on its servers.
• Technical data: IP address, browser and device information, and referring URLs for security, fraud prevention and service improvement.
• Call data: caller phone numbers (stored as SHA-256 hashes in customer profiles), recordings when enabled, AI-generated transcripts, summaries and sentiment analysis.
• Channel data: WhatsApp phone numbers, content and timestamps, plus email addresses, subjects, bodies and timestamps processed through configured integrations.

We process personal data for the following purposes:

• Delivering the service, including AI voice agents, call handling, transcription and analytics.
• Account management, authentication, billing, credit management and support.
• Improving platform performance and features by evaluating usage patterns.
• Preventing fraud and abuse and protecting infrastructure.
• Meeting tax, regulatory and other legal obligations and responding to lawful requests.
• Sending account, billing and security notices. Marketing is sent only with explicit consent.

Every inbound or outbound call begins with a clear automated notice that the person is speaking with an AI voice agent rather than a human. The specific purpose is explained in the configured greeting or in pre-call information. Only when recording is enabled must a separate recording notice be given, and the Controller must obtain any consent required by applicable law before recording starts. Continuing the call is not treated as blanket GDPR consent; the legal basis depends on the specific context. The agent must not claim or create the impression that it is a human person.

Depending on the selected voice pipeline, call processing may include:

• Caller phone number pseudonymized with SHA-256 in customer profiles.
• Transcription of incoming speech and generation of response text and tool calls through OpenAI in the OpenAI Realtime pipeline.
• Agent setup, prompt optimization, transcription, text processing and tool calls through OpenAI.
• Text-to-speech exclusively through Hanabi AI Inc. (Fish Audio).
• In the OpenAI Realtime pipeline, OpenAI transcribes incoming speech and generates response text and tool calls. Hanabi AI Inc. (Fish Audio) converts the approved response text into the audible speech output.
• Sentiment analysis, AI-generated summaries, extracted information, bookings and orders created during the call.

From August 2, 2026, Call0 ensures that people in direct chat and voice interactions are informed, no later than the first interaction, clearly, distinguishably and in accordance with applicable accessibility requirements that they are interacting with an AI system. For Art. 50(2) EU AI Act, Call0 takes technically feasible measures consistent with the generally acknowledged state of the art so that synthetic audio and text output can be marked in a machine-readable format and detected as artificially generated or manipulated, taking account of the type and limitations of the content and implementation costs. This is not a promise of a persistent audio watermark. Only providers of systems placed on the market before August 2, 2026 may use the special transition for Art. 50(2), and they must take the required steps by December 2, 2026. Art. 50(1) and the first-interaction notice remain unaffected.

Call transcripts, recordings and customer-memory profiles are retained according to the customer’s configuration, operational needs and applicable legal obligations. Customers can delete supported data in the product or request deletion.

Call0 uses only the paid Fish Audio s2.1-pro model in production, not the free model. Processing and any retention are governed by the Fish contracts and privacy terms that actually apply. Zero Data Retention applies only if it has been separately contracted and enabled for the account.

Call0 uses the following service providers to operate the platform:

Where a specific transfer from the EU/EEA requires a third-country mechanism, it takes place only under a mechanism that is actually applicable and in force, such as an adequacy decision or executed EU Standard Contractual Clauses under Art. 46(2)(c) GDPR, with supplementary measures where needed. Details of the mechanism used for a particular provider are available on request.

If you provide a mobile number and opt in, Call0 may send account and onboarding notices, responses to support or sales inquiries, scheduling and follow-up messages, and service or account updates.

• You opt in by submitting your number through a website, sign-up or demo form and agreeing to contact, or by providing it verbally during a Call0 call or demo. SMS consent is not a condition of purchase.
• Mobile numbers and SMS consent information are never sold, rented or shared with third parties or affiliates for their own marketing. Providers such as Twilio receive data only to operate messaging for Call0.
• Message frequency varies. Carrier message and data rates may apply.
• Reply STOP to opt out and HELP for assistance. A STOP confirmation is sent and further messages stop. Carriers are not liable for delayed or undelivered messages.

• Account, booking and customer-memory data: while the account is active.
• Call transcripts and recordings: according to account configuration, operational needs and applicable legal obligations.
• Payment records: the legally required period, typically seven years for tax purposes.
• Account deletion: personal data is removed through the account-deletion process, except where continued retention is legally required.

Call0 uses only essential authentication, session and language cookies and stores the cookie preference in localStorage. Tracking, advertising and analytics remain disabled without a separate consent flow.

Details are available in the Cookie Policy.

People in the EEA have the following rights, subject to the statutory conditions:

• Access (Art. 15), rectification (Art. 16) and erasure (Art. 17).
• Restriction of processing (Art. 18) and data portability (Art. 20).
• Objection to processing based on legitimate interests (Art. 21).
• Withdrawal of consent at any time (Art. 7(3)), without affecting earlier lawful processing.
• A complaint to the competent data protection authority.

The legal bases are contract performance (Art. 6(1)(b)), legitimate interests (Art. 6(1)(f)), consent (Art. 6(1)(a)) and legal obligations (Art. 6(1)(c)). For caller data of business customers, the customer is controller and Call0 is processor.

The processing relationship is described in the Data Processing Agreement.

California residents may request:

• Information about personal data Call0 collects, uses and discloses.
• Deletion of personal data, subject to legal exceptions.
• Opt-out from sale or sharing and non-discrimination for exercising privacy rights.

Call0 does not sell personal information and does not share it for cross-context behavioral advertising. Submit a request through the contact page; Call0 will respond within 45 days.

Call0 maintains risk-appropriate technical and organizational safeguards, including:

• Access controls and authorization policies for application and database access.
• Encryption protections provided by the hosting and service infrastructure.
• Pseudonymization of caller phone numbers in customer profiles where configured.
• Backup, monitoring and availability controls appropriate to the service.

Call0 is not directed to children under 18 and does not knowingly collect their personal information. Contact Call0 if you believe a child’s data was collected so it can be deleted promptly.

Call0 may update this policy. Significant changes will be announced by email or through the platform. Continued use after a change constitutes acceptance where legally permitted.

For privacy questions or to exercise a right:

Call0 Inc. 447 Broadway, 2nd Floor Suite #3389 New York, NY 10013, United States

Contact Call0 online.