Privacy Policy

Last Updated: May 24, 2025

Welcome to CallZero's Privacy Policy

This Privacy Policy explains how and why Positive Potato LLC ("CallZero," "we," "our," or "us") collects, uses, and shares your personal information when you use our services. This includes when you:

• Use our website or app
• Ask us to place a call on your behalf
• Interact with us through support, marketing, or other communications

Our goal is to be clear, respectful, and responsible with your data. This policy outlines what we collect, why we collect it, how we protect it, and what choices you have.

Please read it carefully. If you don't agree with our practices, we ask that you not use our services. If you have any questions, contact us anytime at [email protected].

SUMMARY OF KEY POINTS

This section highlights the key topics covered in our Privacy Policy. We've written it in plain language so you can understand what data we collect, how we use it, and how you can stay in control. For more detail, scroll down to the pertinent section and check out the full policy below.

What information do we collect?
We collect information you provide directly (like names, account numbers, and call instructions), along with technical data such as IP address, browser type, and call timestamps. If you use our AI calling service, we may also collect transcripts and—when applicable—audio recordings, to help deliver and improve your experience.

What personal information do we process?
When you visit, use, or navigate our Services, we may process personal information depending on how you interact with Developer and the Services, the choices you make, and the products and features you use. We use your data to operate and improve the service. We do not use your data to train third-party AI models or for advertising purposes.

Do we process any sensitive personal information?
Only when it's necessary for delivering the service and only with your consent, or as otherwise required by applicable law. For example, if we need to pass along an account number to resolve an issue on your behalf.

Do we receive any information from third parties?
No. We don't buy or collect your information from outside sources.

How do we use your information?
We use your data to make calls on your behalf, improve performance, prevent fraud, and meet legal requirements. We do not use your data to train third-party AI models or target you with ads - ever.

In what situations and with which types of parties do we share personal information?
We may share information in specific situations and with specific categories of third parties. These partners only process data on our behalf and under strict confidentiality agreements. Learn more about when and with whom we share your personal information.

How long do we keep your data and can you delete it?
We retain personal data only for as long as needed to fulfill the purposes described in this Privacy Policy, or as required by law. You can email us anytime to request full data removal. We're actively working toward offering automatic data deletion options for users who prefer additional control.

How do we keep your information safe?
We use end-to-end encryption (HTTPS), secure storage, limited access controls, and regular internal audits. While no system is bulletproof, we invest heavily in keeping your data safe and review our practices continuously.

What are your rights?
Depending on where you live, you may have the right to access, correct, delete, or limit how your data is used. We honor these rights wherever applicable.

How do you exercise your rights?
You can email us at [email protected] to request access, deletion, correction, or to withdraw consent. We respond to verified requests in accordance with applicable data protection laws.

TABLE OF CONTENTS

1. WHAT INFORMATION DO WE COLLECT?

We collect both personal information you choose to provide and data automatically generated when you interact with our services. The types and scope of data collected may vary depending on your activity, preferences, device settings, and how you use our features.

A. Information You Provide to Us
You may provide personal data voluntarily when you:
• Create or manage an account
• Submit instructions for an AI-assisted call
• Enter payment details
• Contact our support team
• Participate in surveys or other user feedback programs

This may include:
• Identifiers: Your name, email address, and account credentials
• Call inputs: Instructions for calls, case reference numbers, third-party names or account details
• Billing data: Payment method and billing address, processed by Stripe (view Stripe's Privacy Policy)
• Sensitive information (if applicable and with your consent): Any information needed to act on your behalf during calls (e.g., passcodes or customer numbers)
• Social login credentials: Profile information from login providers (e.g., Google) based on your settings

You are responsible for ensuring all information provided is lawful, accurate, and that you have appropriate authorization to share third-party information.

B. Information We Collect Automatically
We collect certain information automatically as you use our services. This helps us deliver, maintain, and improve platform performance and user safety.

This may include:
• Device and browser data: Device type, operating system, IP address, browser version, screen resolution, system settings
• Log data: Feature usage, timestamps, navigation events, crash logs, and referral URLs
• Cookies and tracking tools: We use cookies and similar technologies for functionality, analytics, and fraud prevention. See our Cookie Policy for details.

Some of this data is aggregated or anonymized and does not directly identify you.

C. Application-Specific Data
When you use our mobile or web applications and opt to grant access, we may collect:
• Permissions: Microphone, camera, notifications (only when needed for features like call execution or confirmation)
• Device IDs: Mobile device ID, OS version, and installed app version
• Interaction insights: In-app behavior, crash logs, or user interface interactions

You can manage or revoke these permissions at any time via your device settings.

D. Data Accuracy and Responsibility
You are responsible for providing accurate, complete, and current information. If you submit personal data relating to someone else (e.g., to resolve a third-party customer issue), you confirm that you have the right to do so and that it complies with applicable laws.

We reserve the right to verify the information you provide to ensure lawful and secure operation of the service.

2. HOW DO WE PROCESS YOUR INFORMATION?

We do not use your personal information to train third-party AI models or for targeted advertising.

Our processing activities fall into the following categories:

A. Service Delivery and Account Management
• To create and maintain user accounts, manage logins, and store user preferences
• To carry out core functionality, such as placing AI-powered calls on your behalf based on your inputs
• To process transactions and maintain payment history, where applicable

B. User Support and Communications
• To respond to questions, resolve technical issues, and assist with your requests
• To send you system or service-related notices (e.g., call summaries, service updates, security alerts)
• To gather feedback and improve our support operations

C. Platform Security and Performance
• To prevent misuse, detect and respond to fraud or abuse, and enforce platform integrity
• To analyze usage trends and application performance to improve the user experience
• To monitor system health, diagnose errors, and manage security risks

D. Marketing and Outreach
• To send optional updates, feature announcements, or promotional content, if legally permitted and based on your communication preferences

You can opt out of marketing messages at any time by contacting us.

E. Legal Compliance and Enforcement
• To comply with applicable laws, regulations, court orders, or law enforcement requests
• To protect our legal rights and interests, resolve disputes, and enforce our Terms of Service

3. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

We only share your personal information when necessary to operate our services, comply with legal obligations, or support core business activities. All third-party access is governed by binding agreements that limit data use, prohibit unauthorized sharing, and require appropriate technical and organizational safeguards.

A. Service Providers
We disclose information to trusted third parties who help us deliver and improve our services. These vendors are contractually obligated to use your data solely as instructed by us.

Examples include:
• Cloud hosting and infrastructure (e.g., Supabase)
• Telephony and voice services (e.g., Twilio, ElevenLabs, OpenAI)
• Payment processors (e.g., Stripe)
• Analytics and error monitoring tools
• Authentication and login platforms

We share only the minimum data necessary for them to perform their work, and they are not permitted to use your information for any other purpose.

B. Business Transfers
If we undergo a merger, acquisition, financing, or sale of assets, your personal data may be transferred as part of that transaction. We will ensure the successor entity continues to respect your privacy in line with this policy or provide notice if material changes occur.

4. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?

Yes. We use cookies and similar technologies to support essential features, personalize your experience, analyze usage, and enhance platform performance.

These technologies may include:
• Cookies (both session-based and persistent)
• Web beacons and pixels (e.g., for functionality tracking)
• Local storage (e.g., for maintaining your settings across sessions)

We may also allow limited use of third-party tools for internal analytics. These tools do not access personally identifying information unless explicitly provided by you (e.g., in form submissions).

You can control cookie behavior using your browser or device settings.

5. HOW DO WE HANDLE YOUR SOCIAL LOGINS?

If you choose to sign up or log in using a third-party provider (like Google), we may receive certain profile information, such as your name, email address, and account ID, depending on the settings you've enabled with that provider.

We use this data only to authenticate you and simplify account setup. We do not access your social media account, post on your behalf, or collect additional data beyond what is required to log you in.

Your interaction with the third-party platform remains governed by its own privacy practices. We encourage you to review their privacy policies to understand how your data is handled outside of CallZero.

6. HOW LONG DO WE KEEP YOUR INFORMATION?

In Short: We keep your information for as long as necessary to fulfill the purposes outlined in this privacy notice unless otherwise required by law.

We will only keep your personal information for as long as it is necessary for the purposes set out in this privacy notice, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements). No purpose in this notice will require us to keep your personal information for longer than the period of time in which users have an account with us.

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize such information, or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.

We retain personal information only for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy—unless a longer retention period is required by law.

Retention timelines vary depending on the nature of the data and how you use our Services:
• Account data is retained while your account remains active
• Call transcripts and usage logs are retained for up to 30 days unless you request earlier deletion
• Backup archives are retained securely for a limited period and are automatically purged on a rolling basis

When information is no longer needed, we delete it or anonymize it. If immediate deletion is not feasible (e.g., in backups), we restrict further access and processing until deletion occurs.

7. HOW DO WE KEEP YOUR INFORMATION SAFE?

We use industry-standard security practices to safeguard your personal data from loss, misuse, or unauthorized access. This includes:
• Encrypted transmission (HTTPS) and secure data storage
• Role-based access controls and authentication mechanisms
• Internal audits, incident monitoring, and risk assessment protocols

Our infrastructure and partners (such as Stripe, Supabase, and OpenAI) are selected for their strong security track record. We continuously evaluate and improve our systems to keep your data protected.

That said, no digital system is 100% immune to compromise. While we work hard to reduce risk, you share data at your own discretion, and we encourage you to use secure practices when accessing our Services.

8. DO WE COLLECT INFORMATION FROM MINORS?

Our services are not directed at children under 18 years of age, and we do not knowingly collect or solicit personal data from anyone under 18.

By using our Services, you confirm that you are at least 18 or that you are a parent or guardian authorizing use on behalf of a minor.

If we become aware that we have inadvertently collected personal data from someone under 18, we will take prompt steps to delete the information and deactivate the associated account. If you believe this has occurred, please contact us immediately at [email protected].

9. WHAT ARE YOUR PRIVACY RIGHTS?

Depending on your location, you may have legal rights over your personal data. These rights vary by jurisdiction and may include:
• The right to access, correct, or delete personal information
• The right to withdraw previously granted consent
• The right to opt out of marketing communications
• The right to file a complaint with a data protection authority (e.g., in the EEA, UK, or Switzerland)

A. Withdrawing Consent
If we rely on your consent to process your data, you may withdraw it at any time by contacting us at [email protected]. This will not affect the lawfulness of any processing conducted prior to withdrawal.

B. Marketing Preferences
You can opt out of promotional emails or SMS by clicking "Unsubscribe" or replying "STOP" at any time. Note that you may still receive transactional or service-related messages.

C. Managing Your Account
To review, update, or delete your account data:
Email [email protected] with your request.

We will deactivate or delete your account upon request, except where retention is required for legal or operational reasons (e.g., fraud prevention, dispute resolution, or compliance).

D. Cookies and Interest-Based Ads
Most browsers accept cookies by default. You can adjust your browser settings to remove or reject cookies. Disabling cookies may affect certain features of our Services.

10. CONTROLS FOR DO-NOT-TRACK FEATURES

Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track ("DNT") feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this stage no uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online. If a standard for online tracking is adopted that we must follow in the future, we will inform you about that practice in a revised version of this privacy notice.

11. DO CALIFORNIA RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?

If you are a California resident, you may exercise the following rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):
• Know what categories and specific pieces of personal information we collect
• Delete your personal data, subject to legal exceptions
• Correct inaccurate data
• Limit use of sensitive personal information (e.g., account login credentials, ID numbers)
• Opt out of the sale or sharing of personal data (Note: We do not sell your personal data)
• Non-discrimination for exercising your privacy rights

We disclose the following categories of data as required by law:
• Identifiers: Name, email, IP address, contact details
• Customer Records: Billing and transaction data
• Commercial Info: Purchase and service usage history
• Sensitive Info: Login credentials, when necessary for service execution

To exercise your rights:
Email us at [email protected]
We may request verification of your identity before processing your request

If you are under 18 and have posted content to our Services, you may also request its removal.

12. DO VIRGINIA RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?

If you reside in Virginia, you may have rights under the Virginia Consumer Data Protection Act (VCDPA), including the right to:
• Access, correct, or delete your personal information
• Obtain a copy of data you've shared with us
• Opt out of targeted advertising, sale of personal data, or automated decision-making

We do not sell personal data or use it for profiling with legal consequences.

To make a request or appeal a denial, email us at [email protected]. We will respond within 60 days (extendable when necessary).

13. DO WE MAKE UPDATES TO THIS NOTICE?

We may update this Privacy Policy to reflect changes in the law, our services, or practices. When we do, we revise the "Last Updated" date. For material changes, we may notify you by email or prominent notice on our platform.

We encourage you to review this notice periodically to stay informed.

14. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

If you have questions or feedback about this Privacy Policy, please email our Data Protection Officer at: [email protected]

15. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

You may request access to the data we hold about you, or ask us to update or delete it. To submit a request:

Contact [email protected]

We respond to verified requests in accordance with applicable privacy laws.