Privacy Policy
This policy explains what personal data CallMyAI collects, how we use and protect it, who receives it, and the rights you have. It applies to both fans and creators, and works alongside the Terms of Service and the Age Verification & Records Statement.
We are the controller of the personal data described here.
1. The data we collect
From fans
- Your phone number or email, converted into a one-way anonymized code (a hash) — creators never see the real value.
- Payment information, handled by our payment processor. We store a payment token, not your full card number.
- Call transcripts and the summaries and memory derived from them.
- Basic technical data — IP address (used to determine your country for legal and tax purposes), device and log information.
From creators
- Legal name, date of birth, and government-issued identification, collected for age and identity verification.
- Voice recordings and persona materials you submit.
- Payout details and the tax information we are required to report.
2. Caller anonymization
Fan identity is protected by design. A fan's phone number or email is turned into a one-way hash that is unique to each creator, so the same fan appears under a different alias to each creator, and no creator can see a fan's real number, email, or legal identity.
These hashes are still treated as personal data. Hashing reduces risk; it does not remove our obligations. Hashed identifiers are included when you exercise the rights in Section 7. Full detail: How caller anonymization works.
3. How we use your data
To create and operate AI personas; connect and bill calls; give a persona conversational memory; enforce our safety rules; verify age and identity; process payouts and taxes; prevent fraud and abuse; provide support; and meet our legal and payment-network obligations.
4. Who receives your data
We do not sell your personal data, and we do not share it for cross-context behavioural advertising.
We disclose categories of recipients rather than naming each vendor. Data-protection law permits describing "recipients or categories of recipients", and doing so lets us treat our provider stack as commercially confidential and change a provider without re-issuing this policy. A current list of the categories, and what each does, is maintained at Subprocessor categories and can be updated there without a change to this policy.
The categories are: hosting and infrastructure; compute for voice and language processing; speech-to-text; identity, age, and deepfake verification; image moderation; payment processing and payouts; tax reporting; telephony and call routing; transactional email; error monitoring; and caching.
We may also disclose data where required by law or to protect the platform, our users, or the public — see Law Enforcement Guidelines.
5. International transfers
CallMyAI is established in the United States, and personal data we process is handled there and by service providers who may be located in other countries.
Where we transfer personal data out of the United Kingdom, the European Economic Area, or Switzerland, we rely on the European Commission's and the UK's Standard Contractual Clauses, together with supplementary technical measures — including the one-way hashing of fan identifiers described in Section 2, which means much of what crosses a border is pseudonymous rather than directly identifying. You can ask us for detail on the mechanism used for a specific transfer at privacy@callmyai.ai.
6. How long we keep it
| Data | Retention |
|---|---|
| Call transcripts | 30 days, then hard-deleted |
| Call summaries | 30 days, following the transcript window |
| Persona memory (derived, non-verbatim) | Until you delete your account or ask us to erase it |
| Anonymized fan identifiers | While the account or credit balance is active |
| Payment and financial records | As required by tax, accounting, and card-network rules |
| Age and identity verification records | As required by law and card-network rules, and excluded from routine deletion — see the Age Verification & Records Statement |
| Fraud and safety records | While a safety or investigation need exists |
| Records under legal hold | Frozen for the duration of the hold, overriding the periods above |
Some records survive an erasure request. Where a statute, a financial duty, or a platform-safety need requires it — money records, verification records, safety and fraud records, and anything under a legal preservation obligation — we retain the minimum necessary and tell you what was kept and why.
7. Your rights
Wherever you live, you can ask us to access, correct, or delete your personal data, ask for a portable copy, ask us to restrict or stop certain processing, and withdraw consent where we rely on it. Withdrawing consent does not affect processing already carried out.
If you are in the EEA, UK or Switzerland, these are your rights under the GDPR and UK GDPR, including the right to object to processing based on legitimate interests and the right to lodge a complaint with your data protection authority.
If you are in California, you have the rights to know, delete, correct, and opt out of sale or sharing. We do not sell or share personal data. You also have the right not to receive discriminatory treatment for exercising these rights, and the right to appeal a decision we make on your request.
If you are in another US state with a privacy law, you have the equivalent rights that law provides, including the right to appeal a refusal.
To exercise any right, or to appeal a decision, write to privacy@callmyai.ai. To protect your data we may need to verify your identity first, and we may decline a request where we cannot.
California collection categories
We collect the following statutory categories: identifiers (including hashed phone numbers and emails, and account identifiers); customer records (name, government identification and partial payment information, for creators); protected classification characteristics (age and date of birth); commercial information (minutes purchased and calls placed); internet or network activity (IP address, device and log data); sensory information (voice recordings submitted by creators, and call transcripts); professional information where a creator provides it; inferences drawn from use of the service, including persona memory. We disclose these categories to the recipient categories listed in Section 4 for the business purposes in Section 3.
Nevada residents may direct us not to sell personal data by writing to privacy@callmyai.ai, although we do not sell it.
8. Automated decisions
Some enforcement decisions are made automatically, without a person reviewing them at the time. We automatically block an identifier from the platform where our systems detect a successful payment chargeback, a pattern of repeated calls with no purchase, or a payment card being tested across multiple accounts.
These decisions can affect your ability to use the service, so: you may ask for a human to review any automatic block, and to contest it, by writing to privacy@callmyai.ai or following the Appeals Policy. We will tell you the general reason for the block, subject to not disclosing detail that would help someone evade fraud controls.
9. Data breach notification
If a breach occurs affecting your personal data, we will notify the relevant supervisory authority within 72 hours of becoming aware of it where the law requires, and will tell affected users without undue delay where the breach is likely to present a high risk to them. We will say what happened, what data was involved, and what we are doing about it.
10. Security
We protect personal data with encryption in transit and at rest, strict database access controls, and internal safeguards. We limit staff access to personal data and log administrative actions to a tamper-evident record. No system is perfectly secure, but we work to protect your information and to meet the notification duties above.
11. Cookies
The callmyai.ai website sets no cookies and writes nothing to browser storage. See the Cookie Notice for the detail and for what changes if that ever does.
12. Age
The platform is strictly for adults 18 and over. We do not knowingly collect data from anyone under 18. If we learn that an underage person has used the platform, we remove their access and data. See Age Verification & Records.
13. Changes
We may update this policy. Material changes are posted here with a new effective date, and where a change materially affects your rights we give notice as described in the Terms of Service.
How to reach us
For any privacy request, question, or appeal:
- Data and privacy requests — privacy@callmyai.ai
- Law enforcement, subpoenas, legal notices — legal@callmyai.ai
CallMyAI LLC, 30 N Gould St, Ste N, Sheridan, WY 82801