Privacy Policy
Last updated: 2 July 2026. This policy explains what personal data CallBehalf collects, why, and what rights you have. The short version: we collect what's needed to make phone calls on your behalf and report back to you - and nothing we don't need.
1. Who is responsible for your data
The data controller is Tikhonova Ekaterina, a sole trader (trabalhador independente) registered in Portugal, NIF 313424608 ("CallBehalf", "we"). Contact for all privacy matters: [email protected].
2. What data we collect
- Account data - your phone number, which is your sign-in identifier and is verified by an SMS code (managed by our authentication provider, Clerk), plus your name and an optional e-mail address (used for receipts and account recovery). We do not send marketing or notification e-mails - the app itself is the only notification channel.
- Task data - what you type when you request a call: the request itself, the business's phone number, and details you choose to share so the call can succeed (for example a name for a booking, a customer number, a preferred time). This may include personal data of third parties (e.g. a name of a person a booking is for) - you are responsible for having the right to share it.
- Call data - the audio of calls made on your behalf, transcripts of those calls, and the call outcome. Calls are processed and transcribed by our voice-calling provider (Retell AI) and language-model provider (Anthropic) to conduct the conversation and produce your report.
- Billing data - subscription status and payment history. Card details are handled entirely by Stripe; we never see or store your card number.
- Technical data - server logs and error reports (via Sentry) needed to keep the service working and secure.
- Waitlist data - if you join the waitlist on our landing page, we store your e-mail address to send you your invite.
3. Why we process it (legal bases under GDPR)
- To provide the service (Art. 6(1)(b) - contract): placing calls you request, generating transcripts and outcomes, managing your account and subscription.
- To keep the service safe and improve it (Art. 6(1)(f) - legitimate interest): debugging, preventing fraud and abuse, understanding which features work.
- To comply with the law (Art. 6(1)(c)): tax and accounting obligations require keeping billing records.
- With your consent (Art. 6(1)(a)): the waitlist e-mail and its one-time invite - you can ask to be removed at any time.
4. Call recording and the people we call
- Our AI assistant identifies itself at the start of every call as an assistant calling on your behalf.
- Calls are recorded and transcribed so that we can give you the outcome and transcript - that is the core of the service.
- The person answering the call may share personal data during the conversation (e.g. their first name, a booking confirmation). This data appears in your transcript and is used for no other purpose.
- Do not use CallBehalf to collect data about people unlawfully. See our Terms of Use for prohibited uses.
5. Who we share data with (processors)
We use a small set of service providers, each bound by data-processing agreements:
| Provider | Purpose |
|---|---|
| Clerk | Sign-up and sign-in (authentication) |
| Stripe | Payments and subscription management |
| Retell AI | Placing and transcribing phone calls |
| Anthropic | Language model that conducts the conversation and parses your request |
| Sentry | Error monitoring |
| Hosting & database providers | Running the application and storing data |
Some providers process data outside the EEA (notably in the United States). Where that happens, transfers rely on the EU-US Data Privacy Framework and/or Standard Contractual Clauses. We do not sell personal data to anyone.
6. How long we keep data
- Account and task data - for as long as your account exists. Deleting your account removes it, except where law requires retention.
- Call recordings and transcripts - kept so you can access your call history; deleted when you delete your account (or on request).
- Billing records - kept for the period required by Portuguese tax law (currently up to 10 years).
- Waitlist e-mails - until you get access or ask to be removed.
7. Your rights
Under the GDPR you can ask us for access to your data, correction, deletion, portability, restriction of processing, or object to processing based on legitimate interest. Write to [email protected] - we respond within one month. You also have the right to lodge a complaint with the Portuguese supervisory authority, CNPD (Comissão Nacional de Proteção de Dados, cnpd.pt), or the authority of your country of residence.
8. Cookies
The marketing site (this website) sets no advertising or analytics cookies. The application uses strictly necessary cookies for authentication (session management by Clerk). If we ever add analytics that require consent, we will ask for it first.
9. Changes to this policy
If we change this policy in a meaningful way, we will post the new version here and update the date at the top. For significant changes affecting your rights, we will notify you by e-mail.
Questions? Write to [email protected].