Privacy Policy

• Account data: name, email, phone number, company name, role, and billing details you provide when you sign up or contact us.
• Configuration data: prompts, scripts, knowledge bases, contact lists, and integration settings you upload to run your voice agents.
• Call data: call recordings, transcripts, AI-generated summaries and outcomes, and metadata such as duration, timestamps, and call results.
• Usage and device data: log data, IP address, browser and device information, and how you interact with the platform.

As a voice AI platform, we process call recordings, transcripts, and derived outputs on behalf of our customers. Recordings and transcripts are encrypted in transit (TLS 1.2+) and at rest (AES-256). Customers control retention settings and are responsible for notifying call recipients and obtaining any consent required by law before recording calls.

AI-generated transcripts and summaries are produced by probabilistic models and may occasionally contain inaccuracies or fabricated ("hallucinated") content. See the AI-Generated Content section of our Terms of Service for how such outputs should be reviewed and relied upon.

• To provide, operate, secure, and improve the Services.
• To run AI voice agents, process calls, and generate transcripts and outcomes.
• To manage your account, process billing, and provide support.
• To send operational notices and, with your consent, product and marketing updates.
• To detect and prevent fraud, abuse, and security incidents.
• To comply with legal obligations.

We do not sell your personal data, and we do not use your call recordings or transcripts to train general-purpose AI models without your explicit, separate consent.

We engage trusted third-party subprocessors to help deliver the Services, including cloud hosting, telephony carriers, payment processors, and analytics providers. Subprocessors are bound by contract to protect your data and use it only as instructed by us. A current list of subprocessors is available on request at privacy@callaro.ai. When you connect your own integrations (CRM, messaging, telephony), data flows to those systems as configured by you and is governed by their privacy policies.

• Call recordings and transcripts: retained per your configured retention period (default 90 days), after which they are deleted.
• Account data: retained while your account is active and for a reasonable period afterwards.
• Billing records: retained as required by tax and financial laws.

On account closure, we delete or anonymise personal data within a reasonable period, except where retention is required by law.

We use administrative, technical, and physical safeguards to protect personal data, including encryption in transit and at rest, role-based access controls, multi-factor authentication for administrative access, and audit logging. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Depending on your location and applicable law, you may have rights to access, correct, delete, or export your personal data, to restrict or object to certain processing, and to withdraw consent where processing is based on consent. To exercise these rights, contact us at privacy@callaro.ai. We will respond within the timeframe required by applicable law.

For individuals in India, we align our processing with the Digital Personal Data Protection Act, 2023 (DPDP Act). We process personal data for lawful purposes with an appropriate basis (such as consent or a legitimate use), provide notice of how data is used, honour rights available to Data Principals, and maintain reasonable security safeguards. Where we act as a Data Processor on behalf of a customer, the customer is the Data Fiduciary and is responsible for the lawful basis of processing.

If you have questions, concerns, or complaints about this Policy or our data practices, please contact our privacy team:

We may update this Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, provide additional notice.