Privacy and hosting

Calls may be processed by third-party AI services and may generate transcripts, optional recordings and summaries. Caller phone numbers and conversation content are processed to provide the service.

For EU/EEA business customers, the customer controls the purposes it determines and Call0 processes the relevant data on documented instructions. See the Privacy Policy. The required versioned data-protection terms are agreed electronically before processing on behalf of the customer begins and remain available in a durable form.

Source: Terms and conditions

Call0 provides an automated AI disclosure at the beginning of calls. You agree to:

• Not disable or bypass the AI disclosure.
• Disclose clearly, distinguishably and accessibly from the beginning of the first interaction that AI is involved, and never present the agent as human.
• Not remove or falsify machine-readable labels that Call0 actually provides for synthetic audio or text output.
• Comply with local rules governing AI-generated communications.
• Give callers all legally required privacy and processing notices.
• Maintain a valid legal basis, required notices and consents, documented human oversight and appropriate retention rules.
• Together with Call0, each according to its own role as provider or deployer, take appropriate measures to support the development of AI literacy among staff and other persons dealing with the operation or use of AI systems on its behalf. Those measures must take account of technical knowledge, experience, education and training, the context of use and the persons or groups affected. Art. 4 EU AI Act does not require a guarantee of any specific level of AI literacy for an individual.
• Not use Call0 in regulated or high-risk applications unless a separately signed Enterprise agreement expressly enables that specific use and the agreed technical, organizational and human controls are in place.
• Art. 50(1) EU AI Act applies unchanged from August 2, 2026. For Art. 50(2), Call0 takes technically feasible measures consistent with the generally acknowledged state of the art; this is not a promise of a persistent audio watermark. The transition through no later than December 2, 2026 applies only to Art. 50(2) and systems placed on the market before August 2, 2026. This clause is not a blanket compliance guarantee.

Source: Terms and conditions

At the start of an inbound or outbound call, participants are told that AI is involved. Audio is recorded only if the feature is enabled, participants have been informed and any required consent has been obtained. Continuing the call alone is not consent.

Voice and conversation content are processed to answer inquiries and carry out requested tasks. This may create transcripts, summaries and call outcomes. AI outputs can contain mistakes and require human review for important matters. Call0 does not use this processing to make solely automated decisions with legal or similarly significant effects.

Source: Privacy policy

• Account and contract data: throughout the contractual relationship, then only as needed for legal duties or legal claims.
• Transcripts, recordings and other communication content: for the retention period determined by the customer, until deletion or until the processing purpose ends. The customer is responsible for appropriate periods.
• Invoice and payment records: for the applicable statutory retention periods.
• On account deletion, personal data is deleted unless a legal retention duty applies.

Source: Privacy policy

Call0 does not use customer data or conversation content to train its own or third-party AI models.

• Zero Data Retention is available from Enterprise, subject to agreement and activation: Communication content is deleted after processing, within one hour at the latest; email drafts awaiting approval are deleted within one hour of the decision. Legally required contract and billing records are unaffected. This option is not a blanket promise for services independently connected by the customer.

Source: Privacy policy

Call0 maintains technical and organisational measures appropriate to the risk under GDPR Article 32. Information needed to assess processing on behalf of customers is available on request.

Source: Privacy policy

People in the EEA have the following rights, subject to the statutory conditions:

We normally respond to GDPR requests within one month. If a legally permitted extension is needed, we will inform you within that period.

• Access (Art. 15), rectification (Art. 16) and erasure (Art. 17).
• Restriction of processing (Art. 18) and data portability (Art. 20).
• Objection to processing based on legitimate interests (Art. 21).
• Withdrawal of consent at any time (Art. 7(3)), without affecting earlier lawful processing.
• A complaint to the competent data protection authority.

Source: Privacy policy