.png)
Effective Date: January 19, 2025
Last Updated: June 3, 2026
Callpad is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and protect information about you when you use our website, products, and services (together, the “Services”). The Services are provided by Callpad Inc., a Delaware corporation, and where applicable its operating subsidiary Callpad GmbH (HRB 284808 B, Berlin, Germany) (together, “Callpad,” “we,” “our,” or “us”).By using the Services, you agree to this Privacy Policy. If you do not agree, please discontinue use of the Services.
Controller and Processor Roles
When we handle personal data about our own account holders and website visitors, Callpad acts as a data controller. When our business customers use the Services to handle calls, messages, and bookings from their own customers (“Customer Content”), the business customer is the controller of that data and Callpad acts as a processor on their behalf. In that case, our processing is also governed by our Data Processing Addendum (DPA), which forms part of our Terms of Service.
1. Information We Collecta. Information You Provide Directly
Account Information: name, email, phone number, business name, and login credentials.
Billing Information: payment details, processed securely via third-party providers and not stored by us.
Customer Content: call recordings, transcripts, messages, appointment data, and other communications routed through the Services on your behalf.
b. Information Collected Automatically
Usage Data: IP address, browser type, device information, operating system, access times, and pages visited.
Service Logs: metadata about calls, SMS, and messages handled by Callpad, such as timestamps, duration, and channel.
Cookies & Tracking: we use cookies and similar technologies to improve performance, remember preferences, and analyze traffic. You can manage cookies through your browser or our cookie settings.
c. Information from Third PartiesIntegrations: if you connect Callpad to third-party platforms such as calendars, CRM, booking systems, or messaging accounts, we may access the data needed to provide the integration.
Partners & Vendors: we may receive business contact details or analytics from our software partners and service providers.
2. How We Use Information
We use the information we collect to:Provide, operate, maintain, and improve the Services.Answer calls, messages, and customer inquiries on your behalf.Book, reschedule, and manage appointments.Personalize responses and improve performance based on previous interactions.Maintain security, detect and prevent fraud, and troubleshoot issues.Process payments and provide invoices.Communicate with you about updates, support, and (with consent where required) promotional offers.Comply with legal obligations.We do not use Customer Content to train general-purpose AI models for use outside your account without your instruction or consent.
3. Legal Bases for Processing (EU/UK)
If you are in the European Economic Area or the United Kingdom, we process personal data on the following legal bases: performance of a contract (to provide the Services you request); our legitimate interests (to operate, secure, and improve the Services), balanced against your rights; your consent (for example, for certain marketing or cookies), which you may withdraw at any time; and compliance with a legal obligation.
4. How We Share InformationWe do not sell your personal data. We may share information in the following cases:
With Your Consent: when you authorize integrations or third-party sharing.
Service Providers: with trusted vendors who help us operate the Services, such as cloud hosting, payment processing, call and message routing, voice technology providers, and analytics. These providers are bound by confidentiality and data protection obligations.
Software Partners: where you access Callpad through a salon or wellness software platform, we share the data necessary to deliver the integrated Service.
Business Transfers: in connection with a merger, acquisition, financing, or sale of assets.
Legal Compliance: where required by law, subpoena, or to protect the rights, safety, or property of Callpad, our users, or others.
Aggregated/Anonymized Data: we may share insights that are aggregated or anonymized and not linked to any individual.
5. Data Retention
We keep call recordings, transcripts, and messages only as long as necessary to deliver the Services, or as required by law or our agreement with you. Account data is retained while your account is active and may be deleted on request, subject to legal retention requirements. Where Callpad acts as a processor, retention follows the instructions of our business customer. We periodically review and securely delete data that is no longer needed.
6. Your Privacy Rights
Depending on your location, you may have rights under the GDPR, CCPA/CPRA, or similar laws, including:
Access: request a copy of your personal data.
Correction: request corrections to inaccurate or incomplete data.
Deletion: request deletion of your data.
Portability: receive your data in a structured, commonly used format.
Restriction & Objection: restrict or object to certain processing, including profiling.
Opt-Out: decline marketing communications or, where applicable, opt out of the sale or sharing of personal data.To exercise these rights, contact us at privacy@callpad.ai. We will respond within the timeframes required by applicable law. If Callpad processes your data on behalf of a business customer, we will direct your request to that customer. You also have the right to lodge a complaint with your local data protection authority.
7. Security
We implement industry-standard safeguards to protect your information, including:Encryption of data in transit and at rest.Secure cloud infrastructure with strict access controls.Regular monitoring, logging, and vulnerability assessments.No system is completely secure, and we cannot guarantee absolute security. If we become aware of a data breach affecting your personal data, we will notify you and the relevant authorities as required by law.
8. Children’s Privacy
The Services are not intended for use by children under 16. We do not knowingly collect personal information from children. If we learn that we have inadvertently collected such data, we will delete it.
9. International Data Transfers
Your data may be transferred to and processed in countries other than where you are located, including the United States and Germany. Where we transfer personal data out of the EEA or UK, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses and, where relevant, the UK International Data Transfer Addendum.
10. Third-Party Links
Our website and Services may link to third-party websites. We are not responsible for their privacy practices, and we encourage you to review their policies.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the “Last Updated” date and, where required, providing direct notice.
12. Contact Us
If you have any questions about this Privacy Policy, or to exercise your rights, please contact us at:
Callpad Inc.
help@callpad.ai
