Privacy Policy

Introduction

AI Calls is an outbound AI calling platform. This Privacy Policy explains how we collect, use, store, and share information when users configure assistant profiles, place calls, recharge credits, and review call results.

Information We Collect

We collect information needed to operate the platform:

1. Account information — name, email address, authentication records, settings, roles, and support requests.
2. Billing information — orders, subscriptions, credit grants, credit consumption, invoices, and payment-provider references. We do not store full card numbers.
3. Call setup data — assistant profile prompts, first messages, response language, transcriber language, voice/model settings, max duration, runtime variables, target country, target phone number, contact name, and schedule timestamps.
4. Call records — platform call IDs, status, duration, billable minutes, country pricing snapshots, reserved credits, final credits, error states, and reconciliation events.
5. Call artifacts — recordings, stereo recordings when available, transcripts, summaries, and structured analysis returned after a call.
6. Provider evidence — raw provider request, response, and webhook records needed for debugging, reconciliation, fraud prevention, and auditability. User-facing APIs do not expose raw provider payloads.
7. Device and usage data — browser, device, IP-derived logs, security events, feature usage, and diagnostics.

Call Recipients and Consent

Users decide who to call, what number to dial, what assistant profile to use, and what runtime variables to provide. Users are responsible for having a lawful basis to call each recipient, for honoring do-not-call and opt-out obligations, and for giving any notice or obtaining any consent required for automated calls, AI-generated speech, recording, transcription, or analysis.

Recordings, Transcripts, and Summaries

When recording or artifact storage is enabled, call recordings and derived text artifacts may contain personal data from both the user and the call recipient. Recordings are archived in private platform storage and served through authenticated platform download routes. We do not expose upstream Vapi recording URLs or private R2 object keys to end users.

Transcripts, summaries, and analysis are generated from call content and may be inaccurate or incomplete. Users should review important results before relying on them for customer, billing, legal, medical, financial, or operational decisions.

How We Use Information

We use information to:

• Authenticate users and protect accounts.
• Create, schedule, route, and reconcile outbound calls.
• Reserve and finalize call credits through the platform ledger.
• Store pricing snapshots and call artifacts for review and auditability.
• Provide customer support and troubleshoot call, billing, webhook, and storage issues.
• Detect abuse, fraud, unauthorized access, and security incidents.
• Maintain service quality, reliability, analytics, and compliance records.

Provider Processing

AI Calls uses voice and infrastructure providers, including Vapi, to place calls, process audio, generate transcripts or summaries, and return call events. Provider processing is limited to operating the call workflow, artifact generation, provider reconciliation, diagnostics, and abuse prevention.

The platform treats Vapi as an internal provider adapter. User-facing APIs expose platform call jobs, profile versions, pricing snapshots, credit ledger entries, transcripts, summaries, and authenticated recording downloads. They do not expose raw Vapi payloads, provider call IDs, provider costs, or private R2 object keys.

Data Sharing

We do not sell personal information. We may share information:

• With service providers that operate authentication, hosting, database, storage, payments, email, analytics, and voice calling.
• With payment processors to complete purchases, subscriptions, invoices, refunds, and fraud checks.
• With voice providers to place calls, process call audio, return provider events, and generate call artifacts.
• When required by law, legal process, or enforceable government request.
• To protect users, recipients, the platform, or the public from fraud, abuse, security threats, or unlawful activity.

International Processing and Countries

Calls may involve recipients in different countries, and service providers may process data in regions different from the user's or recipient's location. Users are responsible for choosing call countries and complying with local calling, recording, consent, telecom, marketing, and data-protection rules that apply to their use case.

Retention

We retain account, billing, credit-ledger, call, provider-evidence, and artifact records for as long as needed to operate the service, provide auditability, resolve disputes, enforce terms, comply with legal obligations, and maintain security. Some records, such as credit ledger entries, payment records, provider evidence, and call reconciliation events, may be retained even after an account is closed when required for accounting, fraud prevention, legal compliance, or operational integrity.

Users may request deletion or export of eligible personal information. Some information may be excluded from deletion where retention is required or permitted by law, security, fraud prevention, accounting, dispute resolution, or platform auditability.

Security

We use technical and organizational safeguards such as access controls, private storage for recordings, authenticated download routes, secret handling, audit-oriented logs, and encryption in transit where supported. No internet service can be guaranteed perfectly secure.

Changes to This Policy

We may update this Privacy Policy as the product, providers, laws, or operating practices change. The updated date at the top of this page shows when this policy was last revised.

Contact Us

If you have questions about this Privacy Policy or want to exercise privacy rights, contact us through the address or support channel provided on our website.