Last updated: 13 October 2026
1. Who this policy is about
This policy covers visitors to our website, people who create a CallCleverly account (our customers and their team members), and people who call or are called by our customers' AI agents.
For calls and contacts, our customer (the business you called or that called you) decides why and how your data is used and is the "controller". We process that data on their behalf as a "processor", under our Data Processing Agreement. If you have questions about a call, please contact that business first.
2. What we collect
| Data | Examples | Why |
|---|---|---|
| Account data | Name, work email, company, phone, password (stored scrambled), role | To create and secure your account and contact you about it |
| Billing data | Plan, invoices, billing address. Card details are handled by Stripe; we never see or store full card numbers | To take payment and keep tax records |
| Call data | Phone numbers, recordings, transcripts, summaries, outcomes, survey answers, bookings and tasks | To provide the Service our customers use |
| Contact data uploaded by customers | Lead lists, contact details, notes | To make and manage calls for our customers |
| Usage and technical data | Log-ins, IP address, browser, pages used, error logs | Security, fraud prevention and fixing problems |
| Website forms | Name, email, company, message | To answer your enquiry |
Website analytics
If you accept analytics, Google Analytics receives website usage information such as page views, browser and device information and interactions with our public site. Microsoft Clarity receives interaction data for heatmaps and session replays. These tools receive technical information when your browser connects to their services. Form fields are masked for Clarity, and we do not include your name, email or enquiry message in Analytics events. Neither tracking tool is installed on the customer dashboard. Analytics is optional and can be withdrawn using Cookie preferences in the footer. See our Cookies Policy, Google's data-use information and the Microsoft Privacy Statement.
3. Legal bases
We use personal data to perform our contract with customers, for our legitimate interests (keeping the Service secure, improving it, answering enquiries), to meet legal obligations (tax, accounting), and with consent where required.
4. Who we share data with
We use trusted providers to run the Service. They may only use data to provide their service to us:
- Hosting: our servers are hosted in data centres in the European Union.
- AI processing: Google (Gemini) processes call audio and text to run the AI agents and write transcripts and summaries.
- Payments: Stripe processes payments and stores card details.
- Telephony and integrations chosen by the customer: for example Twilio, Telnyx, calendars and CRMs, which receive data only when the customer connects them.
We may also disclose data if required by law or to protect rights and safety. We do not sell personal data and we do not use it for advertising.
5. International transfers
Some providers may process data outside your country. Where required, we use appropriate safeguards such as standard contractual clauses.
6. How long we keep data
- Call recordings: for the period included in the customer's plan (7 days to 1 year), or until the customer deletes them.
- Transcripts, summaries, contacts and tasks: while the customer's account is active, or until deleted by the customer.
- Account data: while the account is active and up to 30 days after it closes, then deleted.
- Billing records: as long as tax and accounting laws require.
7. Security
We protect data with encrypted connections (HTTPS), access controls, protection against repeated failed log-ins, and by never showing saved keys and passwords again. No system is perfectly secure, and we will notify affected customers without undue delay if a breach affects their data.
8. Your rights
Depending on where you live, you may have the right to access, correct, delete or export your personal data, to object to or restrict its use, and to complain to a data protection authority. To use your rights, email info@callcleverly.com. If your request is about a call made by one of our customers, we will pass it to that business.
9. Children
The Service is for businesses and is not intended for children under 16.
10. Cookies
See our Cookies Policy.
11. Changes and contact
We may update this policy and will show the date of the latest version at the top. Questions: info@callcleverly.com.