Legal

Privacy Policy

How Call0 processes account, communication and call data, how long it is retained, and which privacy rights apply.

Last updated: October 26, 2026

This is the complete English master version. The German master version controls German statutory notices; mandatory law remains unaffected.

1. Data Controller

Call0 Inc. is the controller for the website, accounts, billing and its own inquiries. The business using Call0 determines the purposes and legal bases for its customers’ communications; Call0 processes that data on documented instructions. This also applies to Softphone and UnfallNavi. Separate data processing terms are agreed before processing on the business’s behalf begins.

Call0 Inc. 447 Broadway, 2nd Floor Suite #3389 New York, NY 10013, United States

For privacy questions or requests, use our contact page.

2. Data We Collect

  • Account data: email address, name, optional company name and sign-in information.
  • Usage data: call logs and duration, transcripts, agent settings, booking data, credit balance and transaction history.
  • Payment data: processed exclusively by Stripe Inc. Call0 does not store card numbers, bank account details or other payment credentials on its servers.
  • Technical data: IP address, browser and device information, and referring URLs for security, fraud prevention and service improvement.
  • Call data: phone numbers, audio recordings when enabled, transcripts, summaries and conversation analysis.
  • Channel data: WhatsApp phone numbers, content and timestamps, plus email addresses, subjects, bodies and timestamps processed through configured integrations.
  • Content you provide: text, websites, selected images, knowledge and instructions for your agents.

3. How We Use Data

  • Accounts, calls, integrations, billing and support: to perform our contract and handle your requests (GDPR Article 6(1)(b)).
  • Security, reliability and abuse prevention: our legitimate interest in a safe, working service (Article 6(1)(f)).
  • Tax records and other processing required by law: compliance with legal obligations (Article 6(1)(c)).
  • Optional recordings and consent-based marketing: only with your separate consent (Article 6(1)(a)), which you can withdraw at any time for the future.

We need the information required for sign-in, billing or a requested feature to provide that service. Without it, the relevant feature is unavailable. Information and consent marked optional are not required to use the other features.

4. AI Call Processing

At the start of an inbound or outbound call, participants are told that AI is involved. Audio is recorded only if the feature is enabled, participants have been informed and any required consent has been obtained. Continuing the call alone is not consent.

Voice and conversation content are processed to answer inquiries and carry out requested tasks. This may create transcripts, summaries and call outcomes. AI outputs can contain mistakes and require human review for important matters. Call0 does not use this processing to make solely automated decisions with legal or similarly significant effects.

5. Service Providers and International Transfers

Depending on the features used, the following providers receive the data needed for their services. Customer-selected integrations receive only the content covered by the customer’s instructions.

ProviderPurposeProcessing locations
Supabase Pte. Ltd.Account management and data storageSingapore; processing also in the EU and USA
Stripe Inc.Payment processingUSA; international
Twilio Inc.Telephony and SMSUSA; international
OpenAI OpCo, LLCTranscripts, summaries, answer suggestions and processing of supplied contentUSA; international
Composio Inc.Customer-connected integrationsUSA; depending on the connected service
Google LLCCustomer-selected Google servicesUSA; depending on the selected service
Vercel Inc.Providing the website and web applicationUSA; international
LiveKit, Inc.Real-time voice transport, running voice agents and AI voice models through LiveKitUSA; international
Resend (Plus Five Five, Inc.)Sending sign-in codes, invitations and notificationsUSA; international

Call0 Inc. is based in the USA. Providers and their subprocessors may also process data outside the EU/EEA, particularly in the USA and Singapore. Transfers rely on an applicable adequacy decision (GDPR Article 45) or EU Standard Contractual Clauses with any necessary supplementary measures (Article 46). Copies of the relevant safeguards are available at support@call0.ai.

LiveKit: data processing terms · LiveKit: further subprocessors · Supabase: data processing terms · Twilio: data processing terms · Vercel: data processing terms

6. SMS and Text Messaging Consent

If you provide a mobile number and opt in, Call0 may send account and onboarding notices, responses to support or sales inquiries, scheduling and follow-up messages, and service or account updates.

  • You opt in by submitting your number through a website, sign-up or demo form and agreeing to contact, or by providing it verbally during a Call0 call or demo. SMS consent is not a condition of purchase.
  • Mobile numbers and SMS consent information are never sold, rented or shared with third parties or affiliates for their own marketing. Providers such as Twilio receive data only to operate messaging for Call0.
  • Message frequency varies. Carrier message and data rates may apply.
  • Reply STOP to opt out and HELP for assistance. A STOP confirmation is sent and further messages stop.

7. Data Retention

  • Account and contract data: throughout the contractual relationship, then only as needed for legal duties or legal claims.
  • Transcripts, recordings and other communication content: for the retention period determined by the customer, until deletion or until the processing purpose ends. The customer is responsible for appropriate periods.
  • Invoice and payment records: for the applicable statutory retention periods.
  • On account deletion, personal data is deleted unless a legal retention duty applies.

7a. No training with customer data

Call0 does not use customer data or conversation content to train its own or third-party AI models.

  • Zero Data Retention is available from Enterprise, subject to agreement and activation: Communication content is deleted after processing, within one hour at the latest; email drafts awaiting approval are deleted within one hour of the decision. Legally required contract and billing records are unaffected. This option is not a blanket promise for services independently connected by the customer.

8. Cookies and Browser Storage

Necessary cookies and browser storage support sign-in, security and preferences. Masked session recording in the dashboard is optional and stays off without separate consent.

Details are available in the Cookie Policy.

9. Rights under the GDPR

People in the EEA have the following rights, subject to the statutory conditions:

  • Access (Art. 15), rectification (Art. 16) and erasure (Art. 17).
  • Restriction of processing (Art. 18) and data portability (Art. 20).
  • Objection to processing based on legitimate interests (Art. 21).
  • Withdrawal of consent at any time (Art. 7(3)), without affecting earlier lawful processing.
  • A complaint to the competent data protection authority.

We normally respond to GDPR requests within one month. If a legally permitted extension is needed, we will inform you within that period.

10. Rights under the CCPA

California residents may request:

  • Information about personal data Call0 collects, uses and discloses.
  • Deletion of personal data, subject to legal exceptions.
  • Opt-out from sale or sharing and non-discrimination for exercising privacy rights.

Call0 does not sell personal information and does not share it for cross-context behavioral advertising. Submit a request through the contact page; Call0 will respond within 45 days.

11. Data Security

Call0 maintains technical and organisational measures appropriate to the risk under GDPR Article 32. Information needed to assess processing on behalf of customers is available on request.

12. Children

Call0 is not directed to children under 18 and does not knowingly collect their personal information. Contact Call0 if you believe a child’s data was collected so it can be deleted promptly.

13. Changes to this Policy

Call0 may update this policy. Significant changes will be announced by email or through the platform before they take effect where required. The version shown on this page identifies the currently applicable privacy information.

14. Contact

For privacy questions or to exercise a right:

Call0 Inc. 447 Broadway, 2nd Floor Suite #3389 New York, NY 10013, United States

Contact Call0 online.

Optional session recording

Necessary cookies and browser storage support sign-in, security and preferences. Masked session recording in the dashboard is optional and stays off without separate consent.

For troubleshooting, Call0 Inc. records the interface and selected non-sensitive settings, clicks, mouse movements, scrolling, page changes, loading times and technical errors. Data is linked to your account and company and includes browser and device type. Inputs, messages, conversation content, knowledge content and credentials remain masked. Audio, video and payment pages are not recorded.

You can decline without disadvantage. Consent uses a separate checkbox that is unchecked by default. You can withdraw it at any time in the account menu → “Privacy”. A general cookie acknowledgement does not enable Session Replay. Withdrawal stops further recording and blocks previous playback; it does not affect the lawfulness of earlier processing. The bases are GDPR Article 6(1)(a) and section 25(1) TDDDG for access to your device.

Processing is carried out by Call0 Inc., Vercel Inc. and Supabase Pte. Ltd. The international transfer safeguards described above apply to processing outside the EU/EEA.

Playback is available for up to 30 days, then blocked and automatically deleted. Archiving shortens the deletion deadline to three days; earlier deadlines still apply. Your user identifier, decision, time and notice version are stored separately as evidence of consent. The privacy rights and contact details in this policy also apply.

A grant lasts for up to 180 days. Decision records become due for deletion after no more than one year.

Demo and product inquiries

When you call a demo, request a callback or personal appointment, or send a product inquiry, Call0 Inc. associates the transmitted number and voluntarily provided contact details with that inquiry. These may include your name, company, email, a brief stated business need, source, appointment and processing status. Giving a name for a test call is optional. No audio recording is made.

To handle your demo inquiry, we analyse the conversation using OpenAI. We retain the complete transcript together with the contact details, industry and business needs you mention, a short summary and suggestions for relevant next steps. Access is limited to responsible staff. Suggestions support our team; they do not trigger automatic outreach or decisions with legal effects.

We use these details to handle your inquiry and the next steps you request. The basis is GDPR Article 6(1)(b) for pre-contractual steps at your request; for business contacts and internal organisation, Article 6(1)(f), with the interest of reliably handling concrete inquiries. Access is limited to responsible staff and the technical providers described in this policy. A test call or contact record is not general marketing consent. The policy’s information on recipients, transfers, access, deletion and objection also applies.

In internal contact management, the period runs from the last new processing event: 90 days for open telephone demo inquiries; 180 days for other inquiries, appointments, offers and won opportunities. Records closed as lost or ignored are deleted after 30 days, through daily cleanup. Legally required contractual records are kept separately for the periods described for them.