Privacy Statement

1.Who we are

Call Plus AI provides the software for the Call +AI hosted SIP dialer and AI agent platform. The platform is operated by independent service providers who run it for their customers — they're typically the data controller for your call data under EU/UK terminology, while Call Plus AI is the software vendor / processor. If your provider is participating in the Call Plus AI–operated closed beta, the controller may be Call Plus AI directly; in either case, your provider can tell you which applies. For software-level privacy questions, email privacy@callplusai.com; for questions about your own data and how your operator handles it, contact your service provider first.

2.What we collect

Account & device

• Account info — your email, name (if provided), and the API keys we issue to your devices.
• Device info — model, OS version, app version, and limited diagnostics used to route notifications and debug issues.

Calling & telephony

• SIP credentials — the SIP username, password, and server address you configure. Passwords are encrypted at rest using industry-standard symmetric encryption; the keys are not exposed through the API.
• Call metadata — direction, timestamps, duration, the originating and destination phone numbers, SIP account used, screening result, and whether an AI agent handled the call.
• Call recordings — when recording is enabled (by you or by a rule), we capture audio in AAC / WAV / Opus / OGG and store it in our cloud, encrypted at rest.
• Transcripts — when an AI agent handles a call, we store the generated transcript alongside the call record.
• Screening rules — the phone numbers and modes (ALLOW / BLOCK / SILENCE) you've configured.

Contacts & integrations

• Contact matches — names matched from your device contacts. We don't copy your address book; we store only the match result for calls you place or receive.
• Webhook configuration — the endpoint URLs you configure and the delivery-attempt logs (status code, timestamp, retry count).
• AI agent configuration — per-direction agent IDs and provider API keys you supply. These are stored encrypted and used only to route calls to your chosen provider.

3.How we use it

• Operate the service — routing calls, recording, transcription, delivering webhooks.
• Secure the service — rate limiting, abuse prevention, incident investigation.
• Improve the product during beta — debugging, quality measurement, and feature prioritization based on aggregated usage patterns.
• Communicate with you — onboarding, product updates, feedback requests, and security notices.

We do not use your call recordings or transcripts to train foundation models.

4.Third parties we share data with

To deliver the service during beta we share limited data with:

• AI agent providers you enable. During closed beta that means ElevenLabs; support for your own stack (via the "Use Your AI" provider) and Vapi is planned during or after the closed beta. While an agent is active on a call, the provider receives the audio stream and any context you've configured. Each provider operates under its own privacy terms — we recommend reviewing them before enabling.
• Cloud infrastructure used for hosting, storage, and media routing, in the region you select.
• Your webhook endpoints. You decide what those endpoints do with the data we deliver; we only record delivery outcomes.

We don't sell your data, we don't use it for advertising, and we don't share it outside the cases above.

5.Retention

Default retention targets during beta:

• Call metadata & transcripts — up to 12 months.
• Call recordings — 90 days by default, configurable per SIP account (including a global "never record" toggle).
• Webhook delivery logs — 30 days.
• Account information — for the duration of your beta participation, and up to 30 days after termination unless you ask us to delete it sooner.

Note: automated enforcement of these retention windows is rolling out during closed beta. Until then, deletion requests are processed manually on demand — email privacy@callplusai.com and we'll act within 30 days.

The Android app is free and open-source — anything stored on your device (the app's local cache, contact match results) follows your device's own retention. You can clear that any time from Settings.

6.Your rights

You can:

• Access, correct, or export your data.
• Delete your account and the data associated with it.
• Revoke API keys and disable recording at any time from Settings.
• Withdraw consent to beta communications.

Email privacy@callplusai.com with a request and we'll respond within 30 days. EU / UK residents have additional rights under GDPR; California residents under CCPA — we'll honor those on request.

7.Security

• Passwords and provider API keys encrypted at rest using industry-standard symmetric encryption.
• TLS on all transport.
• Rate-limited APIs with per-device authentication.
• Access to production data limited to named engineers with MFA and audit logging.

No system is perfectly secure. If you believe you've found a vulnerability, email security@callplusai.com — we respond to security reports before anything else.

8.Calls, consent, and local law

You are responsible for complying with call-recording and AI-agent-disclosure laws in your jurisdiction. Call +AI gives you the controls — per-account recording toggles, screening, disclosure prompts — but the legal duty to obtain consent from call participants rests with you.

9.Children

Call +AI is not intended for anyone under 16. We don't knowingly collect data from children. If you believe a child has given us information, email privacy@callplusai.com and we'll delete it.

10.Changes to this statement

We'll post material changes at the top of this page and notify beta participants by email before they take effect. Continued use of the beta after an update constitutes acceptance.

11.Contact

Questions, requests, or complaints: privacy@callplusai.com. Security issues: security@callplusai.com.