Privacy Policy
Last updated: April 2026
WhyAICall ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered outbound calling platform. Please read this policy carefully.
1. Information We Collect
1.1 Account Information
When you register, we collect your name, email address, and any profile information you provide. This information is necessary to create and manage your account.
1.2 Call Data
When you use the Service to make calls, we collect and store:
- Destination phone numbers you dial
- Call duration, status, and timestamps
- Text transcripts of conversations
- AI-generated call summaries and intent classifications
- Call mode (Short Call or Conversation), language selection, and your custom scripts
1.3 Usage Data
We collect usage statistics including the number of calls made, minutes consumed per billing period, features used, and general interaction patterns within the platform. This helps us improve the Service and enforce plan limits.
1.4 Technical Data
We automatically collect certain technical information, including your IP address, browser type, device type, operating system, and session identifiers. This data is used for security, debugging, and service improvement purposes.
2. How We Use Information
We use the information we collect to:
- Provide, operate, and maintain the Service
- Process and fulfill your call requests
- Manage your subscription and process billing
- Track usage against your plan limits
- Send transactional communications (receipts, service alerts)
- Respond to your support inquiries
- Detect and prevent fraud, abuse, and security incidents
- Comply with legal obligations
- Improve and develop new features for the Service
We do not sell your personal data to third parties. We do not use your call transcripts or scripts to train third-party AI models without your explicit consent.
3. Data Storage & Security
All your data is stored securely on Supabase-hosted PostgreSQL databases with row-level security (RLS) enabled on all tables. Data is encrypted both in transit (TLS/HTTPS) and at rest using industry-standard encryption.
We implement appropriate technical and organisational measures to protect your data against unauthorized access, loss, destruction, or alteration. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
Our servers are located in data centres with physical security controls, redundant infrastructure, and regular security audits.
4. Third-Party Services
We work with trusted third-party service providers to operate the platform. Each provider has their own privacy policy governing their data practices:
Stripe (Payment Processing)
All payment information is processed and stored by Stripe. We never store your full payment card details on our servers. Stripe is PCI-DSS compliant. See stripe.com/privacy.
ElevenLabs (Voice AI)
Call audio synthesis and conversation AI is powered by ElevenLabs. Your call scripts and knowledge base content are transmitted to ElevenLabs to enable AI responses during calls.
Telephony Providers (DIDWW / Twilio)
Phone call routing and SIP trunk infrastructure is provided by DIDWW (production) or Twilio (development). Destination phone numbers are shared with these providers to complete calls.
Supabase (Database & Auth)
Authentication and database hosting is provided by Supabase. All data stored in our database is subject to Supabase's infrastructure security policies.
5. Call Data
Audio Recordings: We do not store audio recordings of calls. Voice synthesis is handled in real-time by ElevenLabs and is not retained on our servers after a call ends.
Transcripts & Summaries: Text transcripts and AI-generated summaries of calls are stored in your account and visible only to you. You can delete individual call records or your entire call history at any time from your dashboard.
Recipient Data: Phone numbers and contact data you upload are stored securely and used solely to facilitate calls you initiate. We do not share recipient phone numbers with other users or use them for any other purpose.
6. Data Retention
We retain your account data for as long as your account is active or as needed to provide the Service. Call logs and usage statistics are retained for up to 24 months by default, after which they are automatically purged.
If you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain it for legal, tax, or fraud prevention purposes (typically up to 7 years for billing records).
7. Your Rights
You have the right to:
- Access: Request a copy of the personal data we hold about you
- Correction: Update or correct inaccurate personal data in your profile
- Deletion: Request deletion of your account and personal data
- Export: Download your call history as a CSV export from your dashboard
- Portability: Receive your data in a commonly used, machine-readable format
- Objection: Object to the processing of your personal data in certain circumstances
To exercise any of these rights, contact us at support@whyaicall.com. We will respond within 30 days.
8. Cookies
We use cookies and similar technologies for the following purposes:
- Session Management: Secure, HTTP-only cookies to maintain your authenticated session
- Language Preference: A cookie to remember your selected interface language
We do not use third-party advertising cookies or tracking pixels. The cookies we use are strictly necessary for the Service to function. You can control cookies through your browser settings, but disabling session cookies will prevent you from logging in.
9. Children's Privacy
The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a person under 18, please contact us immediately at support@whyaicall.com and we will take steps to delete such information.
10. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will notify you of material changes by posting the updated policy on this page with a revised "Last updated" date. For significant changes, we may also notify you by email. Your continued use of the Service after the changes take effect constitutes your acceptance of the updated policy.
11. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: