Home/Privacy Policy

Privacy Policy

Last updated: March 12, 2026

1. Introduction

CallScaler (“we,” “us,” “our”) operates a cloud-based call tracking and analytics platform. This Privacy Policy explains what information we collect, how we use it, who we share it with, and your rights regarding your data. This policy applies to all users of our website, platform, APIs, and related services.

2. Information We Collect

Account Information. When you register, we collect your name, email address, phone number, company name, and billing information. If you sign in with Google, we receive your name, email, and profile picture from Google.

Payment Information. Credit card and payment details are collected and processed by our payment processor (Stripe). We do not store full card numbers on our servers. We retain transaction records including amounts, dates, and payment method identifiers.

Call Data. We process phone numbers (caller and destination), call recordings, AI-generated transcriptions and analysis, call duration, timestamps, and call disposition. Call recordings are stored encrypted and access is restricted to your account.

Website Visitor Data. When you install our tracking script (DNI or form tracking), we collect visitor IP addresses, browser and device information, referrer URLs, UTM parameters, Google/Microsoft/Meta click IDs, pages visited, and form submissions. This data is used to attribute calls and form submissions to traffic sources.

Usage Data. We automatically collect IP addresses, browser type and version, operating system, pages viewed within the platform, features used, and timestamps. We use this to improve the Service and troubleshoot issues.

Communications. We retain support tickets, in-app messages, and email correspondence with our team.

Team and Client Data. If you invite team members or manage client accounts (agency/white-label), we collect their name and email address as provided by you. You are responsible for having the right to share this information with us.

3. How We Use Your Information

We use your information to:

  • Provide, operate, and maintain the Service
  • Process and route calls, recordings, and transcriptions
  • Attribute calls and form submissions to marketing sources
  • Process payments and manage your account balance
  • Send transactional communications (receipts, alerts, password resets, account notifications)
  • Provide customer support and respond to inquiries
  • Run AI analysis on calls to generate lead scores, categories, and summaries
  • Send conversion data to advertising platforms you have configured (Google Ads, Meta, Microsoft Advertising)
  • Detect fraud, abuse, and violations of our Terms of Service
  • Improve and develop new features for the Service
  • Comply with legal obligations

We do not use your call recordings or transcripts to train AI models. AI processing is performed solely to provide features you have enabled (transcription, lead scoring, call summaries).

4. How We Share Your Information

We do not sell your personal data. We share data only in the following circumstances:

Service Providers. We use third-party providers to operate the Service, including telephony infrastructure for call routing and number provisioning, payment processing (Stripe), cloud hosting and storage (AWS), AI transcription and analysis services, and email delivery services. These providers access data only as needed to perform their services and are bound by confidentiality obligations.

Advertising Platforms. When you configure conversion integrations, we transmit call conversion data (conversion event, timestamp, click ID) to Google Ads, Meta Ads, or Microsoft Advertising on your behalf and at your direction.

White-Label Clients. If you are an end client of a white-label reseller, your account data is accessible to the reseller who manages your account. The reseller's privacy practices may differ from ours.

Legal Requirements. We may disclose information if required by law, subpoena, court order, or government request, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

Business Transfers. In connection with a merger, acquisition, reorganization, or sale of assets, your data may be transferred to the successor entity. We will notify you before your data becomes subject to a different privacy policy.

With Your Consent. We may share information with third parties when you have given us explicit permission to do so.

5. Data Retention

Call Recordings and Transcripts. Retained for the duration of your account, subject to your plan's storage limits. You can delete individual recordings at any time.

Call Metadata and Analytics. Retained for the duration of your account plus 30 days after account deletion.

Account Information. Retained while your account is active and for 30 days after deletion. After 30 days, your data is permanently deleted from our production systems. Backup copies may persist for up to 90 days.

Payment Records. Transaction records are retained for 7 years as required by tax and accounting regulations.

You may request a full export of your data at any time by contacting support.

6. Data Security

We implement industry-standard security measures to protect your data:

  • All data in transit is encrypted using TLS 1.2 or higher
  • Call recordings are stored encrypted at rest
  • Database access is restricted and audited
  • Authentication uses bcrypt password hashing and secure session tokens
  • API keys and secrets are stored encrypted
  • We perform regular security reviews of our codebase and infrastructure

While we take reasonable measures to protect your data, no system is completely secure. You are responsible for keeping your account credentials confidential.

7. Cookies and Tracking Technologies

Platform Cookies. We use essential cookies to maintain your login session and preferences. These are strictly necessary and cannot be disabled while using the Service.

Analytics. Our marketing website may use analytics cookies to understand traffic patterns and improve our site.

DNI Script. The CallScaler tracking script installed on your website uses first-party cookies and local storage to track visitor sessions for call attribution. This data is collected on your behalf and is associated with your CallScaler account. You are responsible for disclosing the use of this tracking in your own website's privacy policy.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

  • Access: Request a copy of the personal data we hold about you
  • Correction: Request correction of inaccurate or incomplete data
  • Deletion: Request deletion of your personal data, subject to legal retention requirements
  • Portability: Request an export of your data in a machine-readable format
  • Objection: Object to certain processing of your data
  • Restriction: Request that we limit how we use your data

California Residents (CCPA/CPRA). You have the right to know what personal information we collect, request deletion, opt out of any sale of personal information (we do not sell personal information), and not be discriminated against for exercising these rights. To submit a request, email privacy@callscaler.com.

EU/EEA Residents (GDPR). CallScaler acts as a data processor for call data processed on your behalf. For personal data where we are the controller (account information, usage data), our legal basis for processing is contract performance (to provide the Service), legitimate interest (to improve the Service and prevent fraud), and consent (where applicable). You may lodge a complaint with your local data protection authority.

To exercise any of these rights, contact us at privacy@callscaler.com. We will respond within 30 days.

9. International Data Transfers

The Service is hosted in the United States. If you access the Service from outside the United States, your data will be transferred to and processed in the United States. By using the Service, you consent to this transfer. We ensure appropriate safeguards are in place for international data transfers as required by applicable law.

10. Children's Privacy

The Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we learn we have collected data from a child under 18, we will delete it promptly. If you believe a child has provided us with personal information, please contact us at privacy@callscaler.com.

11. Third-Party Links

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review the privacy policies of any third-party services you interact with.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or in-app notification at least 30 days before they take effect. The “Last updated” date at the top of this page indicates when the policy was last revised.

13. Contact Us

For privacy-related questions or to exercise your data rights, contact us at:

Email: privacy@callscaler.com

You can also reach us through the in-app support system.

Ready to get started?

Sign up free and start tracking calls in under 60 seconds. No credit card required.