Privacy Policy

Information we collect

Account information: your name, email address, and login details when you create an account or sign in (including Sign in with Google).

Business configuration: business name, phone numbers, services, hours, escalation contacts, service area, and instructions you provide for the AI agent.

Call information: caller and recipient phone numbers, call times and duration, call outcomes, recordings, transcripts, and summaries. Calls handled by the AI are recorded and transcribed so the business can review them.

Lead and appointment information: names, contact details, requested services, booking times, and related notes.

Google account data (only if you connect Google): your Google account email and calendar event data (create and read events on the calendar you select). See “Google user data” below.

Support communications: messages you send us through the dashboard inbox, onboarding, or chat, plus basic device, log, and diagnostic data to operate and secure the service.

Google user data: access, use, storage, and sharing

If you connect Google Calendar, we request the calendar.events scope to list availability and create appointment events, plus your account email (openid, email, profile) to identify the connected account.

We use this data only to provide the features you enable: showing which account is connected and creating calendar events for booked appointments. We do not use Google user data for advertising, do not sell it, and do not transfer it to third parties except our infrastructure providers as needed to operate the service (database hosting), who are bound to protect it.

Google account tokens are stored encrypted (separate encryption keys, never in plain text) and are used only to act on your calendar when you or the AI agent books, updates, or checks appointments.

You can revoke access at any time from the dashboard (Calendar → Disconnect), which deletes the stored tokens, or from your Google Account permissions page. After revoking, we stop accessing your Google data.

How we use information

We use information to answer and route calls per each business's configuration, record call activity, capture leads, manage appointments and calendar sync, operate the dashboard, process subscriptions and billing, provide support, secure the service, and comply with legal obligations.

CallSpawn uses automated AI systems. AI responses can be incomplete or inaccurate and are not professional, emergency, or legal advice.

Service providers we share data with

Supabase (hosting, database, authentication), Twilio (telephony and phone numbers), Retell AI (voice and chat AI processing of calls and support chats), Google (Calendar sync and Sign in with Google, per your consent), Dodo Payments (subscriptions and billing), and Resend (transactional email). Each receives only what its role requires.

We do not sell personal information. We may disclose information when required by law, to protect people or the service, or as part of a business transfer with appropriate protections.

Retention and deletion

Call records, recordings, and transcripts are kept while your account is active and per each business's retention settings, then deleted. Calendar tokens are deleted when you disconnect or delete your account. Deleting your business removes its calls, leads, appointments, and connections; backups expire on their normal cycle.

We apply administrative, technical, and organizational safeguards, including encryption in transit and at rest and encrypted credential storage. No method is completely secure.

Your rights and caller consent

Depending on where you live, you may request access, correction, deletion, or a copy of your personal information, or object to certain uses. Write to support@callspawn.com and we will respond.

Business customers are responsible for giving callers any legally required notices and obtaining consent before calls are recorded or transcribed.

The service is for businesses, not children. We may update this policy as the service changes; material changes will be noted here with a new effective date.