Privacy Policy

Last updated: May 2, 2026

CallAngel (“we”, “us”, or “our”) operates an AI-powered voice receptionist platform that answers inbound calls, books appointments, and sends SMS confirmations on behalf of businesses. This Privacy Policy explains how we collect, use, and protect your information.

1. Information We Collect

We collect the following categories of personal information:

  • Identity data: name and email address provided during account registration or collected during a call.
  • Contact data: phone number used for SMS notifications and voice call identification.
  • Appointment details: service type, scheduling preferences, and session information collected through voice calls or the dashboard.
  • Call recordings and transcripts: audio recordings of inbound calls handled by our AI voice system, along with machine-generated transcripts and summaries.
  • Calendar data: availability windows and event details exchanged with your connected calendar for appointment scheduling.
  • Payment data: deposit amounts and payment status. We do not store full card numbers; all payment processing is handled by our payment provider.
  • Usage data: log data, IP addresses, browser type, and pages visited, collected automatically when you use our web interface.

2. How We Use Your Information

  • Answering inbound calls via our AI voice system and booking appointments on your behalf.
  • Sending SMS messages for appointment confirmations, payment deposit links, and service preparation instructions.
  • Scheduling and managing appointments through your connected calendar.
  • Processing deposit payments securely.
  • Displaying call history, job records, and analytics in the business owner dashboard.
  • Improving our AI models and service quality (using anonymized or aggregated data only).

3. Service Providers (Subprocessors)

We share data with the following service providers who process it on our behalf:

ProviderPurposeData shared
Vapi AI (vapi.ai)Voice call handling and transcriptionCall audio, transcripts
TwilioSMS delivery and inbound phonePhone numbers, message content
SupabaseDatabase and authenticationAll structured data
Amazon Web Services (SES)Transactional emailEmail addresses, message content
OpenAIAI-generated summaries and embeddingsCall transcripts, knowledge base content
StripePayment processingPayment intent data

Each provider is contractually prohibited from using your data for their own purposes.

4. AI Voice Processing

Inbound voice calls are handled by our AI voice system, which records the call audio, generates a transcript, and returns a structured summary to our system. Audio recordings and transcripts are stored and accessible to the business account owner.

5. SMS Messaging

We send SMS messages on behalf of the businesses that use CallAngel. By providing your phone number during an AI-handled call, you consent to receive transactional SMS messages including appointment confirmations, payment deposit links, and service preparation instructions.

  • Message frequency: 1–3 messages per appointment.
  • Message and data rates may apply.
  • Reply STOP to opt out at any time. No further messages will be sent after opt-out.
  • Reply HELP for assistance.
  • Mobile phone numbers are never shared or sold to third parties for marketing purposes.

6. Voice Calls and Call Recordings

When a caller contacts a phone number powered by CallAngel, the call is answered by an AI voice agent. The call is recorded and a transcript is generated. Callers are interacting with an automated AI system. Business owners who use our platform are responsible for ensuring that any local call recording disclosure requirements are met for their jurisdiction.

7. Calendar Integration

When a business owner connects a calendar, we use that integration to read availability and create appointment events. We access only the calendar data necessary to check availability and book appointments. We do not read, store, or share the content of existing calendar events.

8. Payments

All payment processing is handled by Stripe, a PCI-compliant payment provider. We store only the payment status and deposit amount in our system. Full card numbers, CVV codes, and bank account details are never transmitted to or stored on our servers. Stripe’s own privacy policy governs the data you provide directly to Stripe.

9. Data Storage and Security

Your data is stored in a secure, hosted PostgreSQL database in the United States. We enforce strict access controls that restrict each business owner’s access to their own data only. Data in transit is encrypted using TLS. Data at rest is encrypted by our cloud storage provider.

10. Data Retention

We retain data for the following periods:

  • Call transcripts and recordings: Retained for the duration of your subscription, then deleted within 30 days of account closure.
  • Booked appointment records: Retained for 24 months from the appointment date.
  • Demo lead data (phone, email): Retained for 24 months from last activity, then automatically deleted.
  • Billing records: Retained for 7 years as required by applicable tax law.

You may request early deletion by emailing privacy@callangel.ai.

11. Your Rights (GDPR and CCPA)

Depending on your location, you may have the following rights regarding your personal data:

  • Right to access the personal data we hold about you.
  • Right to correct inaccurate personal data.
  • Right to erasure (“right to be forgotten”).
  • Right to data portability.
  • Right to opt out of the sale of personal information (we do not sell personal data).
  • Right to non-discrimination for exercising your privacy rights.

To exercise any of these rights, contact us at support@callangel.ai.

12. Third-Party Services

We rely on third-party providers to deliver our service. Each processes data under its own privacy policy:

  • Stripe — payment processing
  • Google Calendar — appointment scheduling (when connected by the business owner)
  • Vapi.ai — AI voice infrastructure. Processes call audio and generates transcripts.
  • Twilio — SMS and telephony provider. Processes phone numbers and message content for appointment confirmations.

13. Security Incident Response

In the event of a data breach affecting your personal information, we will notify affected users within 72 hours of discovery as required by applicable law. To report a security concern, contact us at support@callangel.ai.

14. Children’s Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal data, please contact us and we will delete it promptly.

15. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by updating the “Last updated” date at the top of this page. Continued use of our services after changes are posted constitutes acceptance of the revised policy.

16. Contact

For any privacy-related questions or requests, please contact us at support@callangel.ai.