CallAgent AI
Home About Features How It Works Pricing Demo Contact
Login Start Free Trial
Login Start Free Trial
Home Privacy Policy

Privacy Policy

Last updated: June 10, 2026 GDPR Considered CCPA Considered
Table of Contents
  • 1. Introduction
  • 2. Who We Are
  • 3. Information We Collect
  • 4. How We Use Your Information
  • 5. Legal Basis for Processing (GDPR)
  • 6. Sharing and Disclosure
  • 7. Third-Party Services
  • 8. International Data Transfers
  • 9. Data Retention
  • 10. Your Privacy Rights
  • 11. Cookies and Tracking Technologies
  • 12. Data Security
  • 13. Children's Privacy
  • 14. Changes to This Privacy Policy
  • 15. Contact Us
This policy should be reviewed by a qualified legal professional before final publication.
Legal Review Required. This Privacy Policy is provided as a comprehensive template for CallAgent AI. It should be reviewed and approved by a qualified legal professional in your jurisdiction before being published or relied upon as a legally binding document.

1. Introduction

Welcome to CallAgent AI ("we," "us," "our," or the "Service"). This Privacy Policy explains how Thinkers Media ("the Company") collects, uses, discloses, and protects information about you when you use the CallAgent AI platform, including our website at callagentai.com and all related services (collectively, the "Service").

By accessing or using the Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with the practices described in this Policy, please do not use the Service.

This Policy applies to: (a) subscribers who register for and use the Service to manage their business; (b) visitors to our website; and (c) any individuals whose personal data is processed in connection with the Service (including customers of our subscribers whose information is captured during AI-handled calls).

2. Who We Are

The data controller responsible for your personal information is <strong>Thinkers Media</strong>, the company that develops and operates the CallAgent AI platform. For the purposes of applicable data protection legislation, Thinkers Media is the data controller in respect of subscriber account data and website visitor data.

In respect of customer data captured during AI-handled calls (such as caller names, phone numbers, booking details, and complaint information), the subscriber (i.e., the business using our Service) acts as the data controller, and Thinkers Media acts as the data processor on their behalf.

3. Information We Collect

3.1 Account and Registration Information

When you create a CallAgent AI account, we collect: your full name, email address, business name, business type, business address, phone number, and password. If you register using Google OAuth, we receive your name and email address from Google in lieu of a password.

3.2 Business Configuration Information

To configure your AI agent, you provide us with: your services list (names, descriptions, prices), operating hours, FAQ and knowledge base content, and notification preferences. This information is used solely to train and operate your AI agent.

3.3 Call Data

The CallAgent AI platform processes every inbound call handled by your AI agent. This includes:<br><ul><li><strong>Call recordings:</strong> Audio recordings of calls handled by the AI agent.</li><li><strong>Call transcripts:</strong> Text transcriptions of call audio, generated by OpenAI Whisper or Twilio speech-to-text.</li><li><strong>Caller information:</strong> Information provided by callers during AI-handled calls, including names, phone numbers, email addresses, service addresses, booking preferences, and complaint details.</li><li><strong>Call metadata:</strong> Date, time, duration, caller phone number, call outcome, and priority flags.</li></ul>

3.4 Usage and Analytics Data

We automatically collect information about how you use the Service, including pages visited, features used, session duration, device type, browser type, IP address, and referral URLs. This data is used to improve the Service and diagnose technical issues.

3.5 Payment Information

Payment processing is handled entirely by Stripe, Inc. We do not store your full credit card number, CVV, or expiry date on our servers. We retain only the last four digits of your card number, card brand, and expiry month/year for display purposes. Stripe's privacy policy governs how your payment data is handled.

3.6 Communications Data

If you contact us via our contact form, email, or support channels, we retain records of those communications and any information you provide within them.

4. How We Use Your Information

We use the information we collect for the following purposes:

Purpose Data Used
Providing and operating the Service Account info, business config, call data
Processing subscription payments Billing info (via Stripe), subscription records
Sending transactional emails (confirmations, reminders, notifications) Subscriber email, caller email from bookings
Provisioning dedicated phone numbers Account info, subscription status (via Twilio)
Monitoring and improving AI agent performance Call transcripts and recordings (aggregated)
Sending automated usage alerts (minutes warnings, reports) Usage data, notification email
Customer support and responding to enquiries Communications data, account info
Platform security and fraud prevention Usage data, IP address, account info
Legal compliance and dispute resolution Relevant account and transaction data

We do not use your data for advertising purposes, do not sell your data to third parties, and do not use customer call data to train general AI models beyond the scope of improving your specific AI agent's performance.

5. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA) and United Kingdom, we process your personal data under the following legal bases:

  • <strong>Contractual necessity:</strong> Processing required to provide the Service you have subscribed to, including account management, call handling, and billing.
  • <strong>Legitimate interests:</strong> Processing for fraud prevention, security monitoring, product improvement, and analytics, where our interests do not override your rights.
  • <strong>Legal obligation:</strong> Processing required to comply with applicable laws, including tax, financial reporting, and data retention obligations.
  • <strong>Consent:</strong> Where we send optional marketing communications, we do so only with your explicit consent, which you may withdraw at any time.

6. Sharing and Disclosure

We do not sell, rent, or trade your personal information to third parties. We share data only in the following circumstances:

6.1 Service Providers

We share data with trusted third-party service providers who process it on our behalf under data processing agreements. These providers include our telephony provider (Twilio), AI processing provider (OpenAI), voice output provider (ElevenLabs), cloud infrastructure provider (Amazon Web Services), and payment processor (Stripe).

6.2 Legal Requirements

We may disclose personal information if required to do so by law or in response to a valid legal process (such as a court order or government request), or to protect the rights, property, or safety of CallAgent AI, our subscribers, or the public.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of our business, your information may be transferred as part of that transaction. We will notify you via email and a prominent notice on our website before your data becomes subject to a different privacy policy.

6.4 With Your Consent

We may share your information with third parties when you have given us explicit consent to do so.

7. Third-Party Services

The CallAgent AI platform integrates with the following third-party services. Each has its own privacy policy governing the data it processes:

  • <strong>Twilio Inc.</strong> — Telephony services, call routing, and phone number provisioning. Twilio processes call audio in transit. Privacy policy: twilio.com/legal/privacy
  • <strong>OpenAI, L.L.C.</strong> — AI conversation processing (GPT-4) and call transcription (Whisper). Call content is processed via OpenAI's API under their data processing agreement. Privacy policy: openai.com/privacy
  • <strong>ElevenLabs Inc.</strong> — Text-to-speech voice generation. Privacy policy: elevenlabs.io/privacy
  • <strong>Amazon Web Services, Inc.</strong> — Cloud hosting, storage, and infrastructure. Privacy policy: aws.amazon.com/privacy
  • <strong>Stripe, Inc.</strong> — Payment processing and subscription billing. Privacy policy: stripe.com/privacy

8. International Data Transfers

CallAgent AI is operated from the United States. Our third-party service providers may process data in the United States, the European Union, or other countries. When we transfer personal data from the EEA, United Kingdom, or Switzerland to countries that have not been deemed to provide an adequate level of data protection, we rely on appropriate safeguards such as Standard Contractual Clauses approved by the European Commission, or the UK International Data Transfer Addendum.

9. Data Retention

We retain your data for as long as necessary to provide the Service and comply with our legal obligations:

  • <strong>Account information:</strong> Retained for the duration of your subscription plus 12 months after account closure, to handle any post-closure queries or disputes.
  • <strong>Call recordings and transcripts:</strong> Retained for 24 months from the date of the call, after which they are permanently deleted.
  • <strong>Booking, complaint, and callback records:</strong> Retained for the duration of your subscription plus 24 months.
  • <strong>Payment and billing records:</strong> Retained for 7 years in accordance with financial record-keeping obligations.
  • <strong>Usage and analytics data:</strong> Retained in aggregated, anonymised form indefinitely; identifiable data retained for 24 months.

10. Your Privacy Rights

10.1 Rights Under GDPR (EEA and UK Users)

If you are located in the EEA or United Kingdom, you have the following rights under the General Data Protection Regulation (GDPR) or UK GDPR:

  • <strong>Right of access:</strong> You may request a copy of the personal data we hold about you.
  • <strong>Right to rectification:</strong> You may request correction of inaccurate or incomplete data.
  • <strong>Right to erasure:</strong> You may request deletion of your personal data in certain circumstances.
  • <strong>Right to restriction of processing:</strong> You may request that we limit how we use your data.
  • <strong>Right to data portability:</strong> You may request your data in a structured, machine-readable format.
  • <strong>Right to object:</strong> You may object to processing based on legitimate interests or direct marketing.

10.2 Rights Under CCPA (California Residents)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

  • The right to know what personal information we collect, use, disclose, and sell.
  • The right to request deletion of your personal information.
  • The right to opt out of the sale of personal information. (Note: We do not sell personal information.)
  • The right to non-discrimination for exercising your privacy rights.

11. Cookies and Tracking Technologies

We use cookies and similar tracking technologies on our website. These include:

  • <strong>Essential cookies:</strong> Required for the website and application to function correctly, including authentication session management. These cannot be disabled.
  • <strong>Analytics cookies:</strong> Used to understand how visitors interact with our website (pages visited, time on site, referral source). We use anonymised data only and do not link analytics to individual identities.
  • <strong>Preference cookies:</strong> Used to remember settings such as your preferred language or billing cycle selection.

You may disable non-essential cookies through your browser settings at any time. Doing so may affect the functionality of certain features on our website.

12. Data Security

We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, or damage. These measures include:

  • TLS encryption for all data in transit between your browser and our servers.
  • AES-256 encryption for sensitive data stored at rest, including call recordings and personal identifiers.
  • Role-based access controls limiting internal access to subscriber data on a need-to-know basis.
  • Regular security assessments and penetration testing.
  • Hosting on Amazon Web Services infrastructure with SOC 2 and ISO 27001 certifications.

In the event of a personal data breach that is likely to result in risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach (where required by GDPR), and notify affected individuals without undue delay where the breach is likely to result in high risk to their rights.

13. Children's Privacy

The CallAgent AI Service is designed for use by businesses and is not directed at children under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have inadvertently collected personal information from a child under 18, we will take steps to delete that information promptly. If you believe a child under 18 has provided us with personal information, please contact us at privacy@callagentai.com.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes, we will:

  • Update the "Last Updated" date at the top of this Policy.
  • Notify active subscribers via email at least 14 days before the changes take effect.
  • Display a prominent notice on our website and within the subscriber dashboard.

Your continued use of the Service after the effective date of the updated Policy constitutes your acceptance of the revised terms. If you do not agree to the updated Policy, you should discontinue use of the Service and contact us to close your account.

15. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your privacy rights, or have a concern about how we handle your personal data, please contact us:

Data Privacy — CallAgent AI (operated by Thinkers Media)
Email: privacy@callagentai.com
General support: support@callagentai.com
Contact form: callagentai.com/contact

If you are located in the EEA and are not satisfied with our response to your privacy enquiry, you have the right to lodge a complaint with your local data protection supervisory authority.

CallAgent AI

The AI phone agent built for service businesses.

Product

  • Features
  • Pricing
  • Demo

Company

  • About Us
  • Contact
  • Privacy Policy
  • Terms of Service

Legal

  • Privacy Policy
  • Terms of Service

© 2026 CallAgent AI. All rights reserved. Built by Thinkers Media.

PrivacyTerms