Skip to content
Log in

Legal

Privacy policy

What personal data call2all handles, why, who processes it with us, and the choices you have.

Draft, pending legal review. This text is not final and may change before launch. Items in [square brackets] are still to be decided.

Last updated 28 Oct 2026

  1. 01

    Two roles

    For your own account details we decide how the data is used. For the contacts you upload and the people your agents speak to, you decide, and we process that data on your behalf and on your instructions.

  2. 02

    What we collect

    • Account: your name, company, email, a hash of your password, and your team members.
    • Your own mobile number, if you verify it with a code to receive test calls from your agents.
    • Business details for invoices and verification: legal name, GSTIN, address and KYC documents.
    • Contacts you add or import: phone numbers, names, emails and the fields you choose to keep.
    • Calls: numbers, times, recordings, transcripts, summaries, outcomes and captured fields.
    • Payments: order and payment references from our payment gateway. We do not store card numbers or bank passwords.
    • Records of what you agreed to, such as the non-refundable acknowledgement on each recharge, with the time, IP address and browser.
    • Technical data: IP address, browser, and request logs used for security and support.
  3. 03

    Who processes it with us

    A licensed telecom partner (to place and receive calls), speech and AI model providers (to transcribe, understand and speak), a payment gateway, an email provider and our hosting provider. Each receives only what it needs. [Data storage location to be confirmed.]

  4. 04

    How long we keep it

    Account and invoice records are kept as long as the law requires. Call recordings can be played and downloaded for 90 days after the call. Transcripts, summaries and call results are kept for [period to be decided], then deleted. You can erase a contact's details at any time from the dashboard or the API.

  5. 05

    Security

    Passwords and API keys are stored only as hashes. Secrets you give us, such as tool headers and webhook secrets, are encrypted at rest. Access to customer data inside call2all is limited and logged.

  6. 06

    Cookies and storage

    We set one sign-in cookie (c2a_session, HTTP-only) when you log in. Your light or dark theme choice is kept in your browser's local storage. We do not use advertising trackers.

  7. 07

    Your rights

    Under the Digital Personal Data Protection Act, 2023 you can ask to see, correct or erase your personal data, and you can raise a grievance. People your agents called can ask you, or us, to stop: every outbound call offers an opt-out.

  8. 08

    Grievance Officer

    Complaints about how we handle personal data or content go to our Grievance Officer. Their details and the timelines are on the Grievance Officer page. Until one is appointed, write to support@call2all.in.