Privacy Policy

CallProxy is an AI-powered phone call screening service available exclusively in the United States. When someone calls your CallProxy virtual number, an AI assistant answers on your behalf, conducts the conversation, and provides you with a real-time transcript. We do not record or store audio files. We store text transcripts of conversations only.

Account information: email address, display name, and password (hashed, never stored in plaintext). Virtual phone number: a US phone number assigned to your account via Twilio. Call transcripts: text transcripts of conversations between callers and your AI assistant. These contain the words spoken by callers and the AI's responses. No audio is recorded or stored. Call metadata: caller phone number, call duration, timestamp, and spam risk score. Usage data: minutes used per billing period. Device information for push notifications: browser endpoint URL, used only to deliver call alerts. Payment information: processed exclusively by Stripe. We do not store credit card numbers.

To provide the call screening service. To send you push notifications when calls arrive. To calculate your usage for billing purposes. To improve spam detection accuracy. To comply with legal obligations. We do not sell your personal information. We do not use your data for advertising. We do not share your data with third parties except as described in Section 4.

Twilio (twilio.com): Handles phone call infrastructure. Caller phone numbers and call audio pass through Twilio's systems transiently during calls. Twilio's privacy policy applies to data they process. OpenAI (openai.com): Processes audio streams in real time to generate transcripts and AI responses. Audio is processed transiently and is not retained by OpenAI under our Data Processing Agreement. OpenAI's privacy policy applies. Supabase (supabase.com): Hosts our database in the EU (Ireland). Call transcripts and account data are stored on Supabase servers. Supabase's privacy policy applies. Stripe (stripe.com): Processes payments. We share only the information necessary to complete transactions. Stripe's privacy policy applies. Fly.io (fly.io): Hosts our backend application servers. Fly.io's privacy policy applies.

When someone calls your CallProxy virtual number: The call is answered by an AI assistant that discloses it is AI and that the conversation will be transcribed. The caller's words are transcribed to text and stored as part of your call record. Callers may request deletion of their transcript by contacting us at s.takahata.business@gmail.com. We will process deletion requests within 30 days. We do not contact callers, market to them, or share their information beyond what is necessary to provide the service.

If you are a California resident, you have the right to: Know what personal information we collect about you. Delete your personal information. Opt out of the sale of your personal information (we do not sell personal information). Non-discrimination for exercising your privacy rights. To exercise any of these rights, contact us at s.takahata.business@gmail.com. We will respond within 45 days as required by law. You may also delete your account directly in Settings → Profile → Delete account, which removes all your data from our systems.

Call transcripts are retained for 60 days from the date of the call, then automatically deleted. Account information is retained until you delete your account. Billing records are retained for 7 years as required by US tax law. When you delete your account, we delete: your profile, all call transcripts, all virtual numbers, all push notification subscriptions, and all notification records. Billing records are retained only as required by law.

We use industry-standard security measures including TLS encryption in transit, encrypted database storage, and row-level security policies that ensure users can only access their own data. API access requires authenticated JWT tokens. We conduct regular security reviews.

CallProxy is not intended for users under 18 years of age. We do not knowingly collect information from children. If you believe we have inadvertently collected information from a child, contact us at s.takahata.business@gmail.com.

We may update this privacy policy periodically. We will notify you of material changes by email and by posting a notice in the app. Continued use of CallProxy after changes constitutes acceptance of the updated policy.

For privacy questions, data deletion requests, or to exercise your rights: Email: s.takahata.business@gmail.com Response time: within 30 days for deletion requests, within 45 days for CCPA requests.